Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gCyoGwFpFWYgTq2ALPSAeaWXrt4.roa
File:                     gCyoGwFpFWYgTq2ALPSAeaWXrt4.roa (raw, json)
Hash identifier:          rlXj1CcdfXIQv9NgwTYkIMBn7/qpeMGloVd+Qhv44jY=
Subject key identifier:   80:2C:A8:1B:01:69:15:66:20:4E:AD:80:2C:F4:80:79:A5:97:AE:DE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       027C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gCyoGwFpFWYgTq2ALPSAeaWXrt4.roa
Signing time:             Mon 20 Feb 2023 08:03:33 +0000
ROA not before:           Mon 20 Feb 2023 08:03:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.8/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=802CA81B01691566204EAD802CF48079A597AEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:78:15:ac:2e:9d:d4:a7:0f:3d:c0:69:62:
                    1b:54:1e:48:8a:3f:ab:df:77:80:cb:b0:8d:61:8e:
                    c7:43:99:e2:33:e4:31:fa:3a:e9:70:a8:66:fa:af:
                    04:d0:38:e0:4e:41:1a:68:ca:4f:a9:f2:6e:3f:a2:
                    ff:5c:33:26:55:34:ee:a7:6d:54:0e:31:1e:90:19:
                    d4:44:b8:a9:08:00:9f:56:37:3f:c5:a1:8a:6b:10:
                    da:72:af:29:ce:fa:13:e5:5b:91:e6:ce:ab:80:f8:
                    6d:1e:e9:e0:67:24:62:24:89:59:59:86:bb:cb:4c:
                    33:89:f6:c9:35:56:f4:92:47:af:45:9c:23:a0:54:
                    09:64:b1:88:55:dc:d6:a8:a4:ff:01:8b:1e:18:d8:
                    b1:bd:1c:7e:cc:ca:3e:1e:5a:a5:1b:c0:30:8d:36:
                    4a:23:73:e8:c0:dc:b9:b0:ed:33:2a:38:52:b9:d3:
                    f1:9d:e7:8c:56:57:be:32:86:44:64:a4:9e:a2:ee:
                    31:4c:5e:e7:22:a8:e5:6c:a7:8a:ff:4a:ce:da:c3:
                    da:6d:b0:59:e3:d7:ee:ae:70:28:7b:58:6d:5f:0a:
                    af:79:0d:ab:e7:c3:3d:37:0f:88:aa:51:f6:b1:4b:
                    5d:66:ad:07:59:f8:dc:55:f5:fe:b0:05:94:b2:dc:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:A8:1B:01:69:15:66:20:4E:AD:80:2C:F4:80:79:A5:97:AE:DE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gCyoGwFpFWYgTq2ALPSAeaWXrt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.8/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:04:ec:6c:eb:36:5c:47:06:6c:9f:c9:e3:d8:2a:54:0b:
         6e:08:11:29:2a:4a:11:dd:22:27:dc:da:c0:20:d0:16:f7:ea:
         e6:a7:f0:88:cc:64:79:63:ca:a4:49:d1:9f:89:2c:3d:d7:d7:
         41:51:1d:ea:d6:22:d9:20:6c:db:52:69:5b:07:c9:24:2a:6a:
         d0:c1:b7:a3:88:b8:f3:b7:de:81:94:3d:ed:2e:04:52:08:c5:
         d0:b8:8c:2e:c7:21:08:d0:21:55:86:29:84:81:b5:3a:e5:bd:
         6d:09:50:34:77:5a:54:80:6d:4c:89:94:ca:b3:5e:df:dc:cd:
         3f:7c:d4:9a:a6:6f:d2:5c:ae:33:c6:74:6c:bd:77:79:71:3b:
         b2:91:09:5b:2f:7c:3a:75:9a:0b:ab:62:63:1c:27:72:e8:98:
         20:db:35:65:52:85:09:84:5c:3f:06:b2:90:ab:34:35:ea:79:
         1a:e7:21:ad:6f:5b:db:8f:c6:20:bd:d6:dc:f8:ee:95:42:93:
         ed:48:5c:1a:4b:57:42:a3:47:a7:c5:6c:77:21:3c:1b:ab:14:
         fa:67:cc:f8:43:ab:84:01:01:e4:d0:90:cf:22:a6:28:9f:bc:
         da:9f:84:f2:6c:7a:c6:fe:6f:e5:5f:cc:6d:fa:72:a1:63:9d:
         a7:75:e3:c3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAzMzNaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwMkNBODFCMDE2OTE1
NjYyMDRFQUQ4MDJDRjQ4MDc5QTU5N0FFREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiV3gVrC6d1KcPPcBpYhtUHkiKP6vfd4DLsI1hjsdDmeIz5DH6
OulwqGb6rwTQOOBOQRpoyk+p8m4/ov9cMyZVNO6nbVQOMR6QGdREuKkIAJ9WNz/F
oYprENpyrynO+hPlW5HmzquA+G0e6eBnJGIkiVlZhrvLTDOJ9sk1VvSSR69FnCOg
VAlksYhV3NaopP8Bix4Y2LG9HH7Myj4eWqUbwDCNNkojc+jA3Lmw7TMqOFK50/Gd
54xWV74yhkRkpJ6i7jFMXuciqOVsp4r/Ss7aw9ptsFnj1+6ucCh7WG1fCq95Davn
wz03D4iqUfaxS11mrQdZ+NxV9f6wBZSy3KJpAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUgCyoGwFpFWYgTq2ALPSAeaWXrt4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9nQ3lvR3dGcEZXWWdUcTJBTFBTQWVhV1hydDQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaCDANBgkqhkiG9w0BAQsFAAOCAQEAgaAE7GzrNlxHBmyfyePY
KlQLbggRKSpKEd0iJ9zawCDQFvfq5qfwiMxkeWPKpEnRn4ksPdfXQVEd6tYi2SBs
21JpWwfJJCpq0MG3o4i487fegZQ97S4EUgjF0LiMLschCNAhVYYphIG1OuW9bQlQ
NHdaVIBtTImUyrNe39zNP3zUmqZv0lyuM8Z0bL13eXE7spEJWy98OnWaC6tiYxwn
cuiYINs1ZVKFCYRcPwaykKs0Nep5GuchrW9b24/GIL3W3PjulUKT7UhcGktXQqNH
p8VsdyE8G6sU+mfM+EOrhAEB5NCQzyKmKJ+82p+E8mx6xv5v5V/MbfpyoWOdp3Xj
ww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org