Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nJCp70-537vRn_Pz-UgrYSDMEAs.roa
File:                     nJCp70-537vRn_Pz-UgrYSDMEAs.roa (raw, json)
Hash identifier:          7i/h/XAcsg/+8phEQJTv/7ehyTa0ASn10yPixdCyVDo=
Subject key identifier:   9C:90:A9:EF:4F:B9:DF:BB:D1:9F:F3:F3:F9:48:2B:61:20:CC:10:0B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02BC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nJCp70-537vRn_Pz-UgrYSDMEAs.roa
Signing time:             Mon 20 Feb 2023 08:07:22 +0000
ROA not before:           Mon 20 Feb 2023 08:07:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.128/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9C90A9EF4FB9DFBBD19FF3F3F9482B6120CC100B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:46:6e:b9:2f:06:db:a9:d6:b6:af:9b:da:
                    ba:cf:5e:df:5b:5a:5c:31:9d:b0:82:a8:f3:ff:06:
                    0f:d0:0d:53:98:14:38:6f:e0:db:d1:64:f3:34:9c:
                    40:ac:09:dd:73:9e:de:ca:fb:9a:32:cf:fa:d4:0e:
                    12:2c:b0:60:c2:d9:26:e8:40:d1:84:7b:b4:c5:f2:
                    e8:8c:28:78:18:e7:1d:91:21:ec:96:86:b7:67:1b:
                    9d:55:f8:19:13:e7:51:2d:2a:4d:ef:44:5d:8c:57:
                    a8:7b:13:34:73:dd:ba:74:a4:59:d9:55:38:9c:b9:
                    b7:e4:9e:be:d1:04:77:fb:d6:6a:3b:0a:98:95:b7:
                    fa:37:72:2f:08:41:1a:e5:55:83:84:3c:1d:92:9e:
                    47:d8:5b:e4:5a:e3:8e:44:60:34:d9:f0:48:a8:b2:
                    a7:0b:ae:b5:b2:f2:4a:af:7a:0d:ba:0d:af:5e:42:
                    cb:59:3e:ed:22:80:84:e6:a7:a2:06:36:cf:73:c0:
                    ec:14:79:42:a0:a2:d4:46:69:37:fe:21:85:00:aa:
                    72:a3:3a:2b:72:33:a6:ea:9a:b0:a8:b4:a3:b5:c0:
                    b9:62:8a:67:b6:bd:b9:c4:ec:c4:19:5e:1e:19:d7:
                    d9:25:db:2a:92:f2:16:81:9b:a6:96:ef:91:a4:c1:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:90:A9:EF:4F:B9:DF:BB:D1:9F:F3:F3:F9:48:2B:61:20:CC:10:0B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nJCp70-537vRn_Pz-UgrYSDMEAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.128/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:79:95:ce:88:93:92:63:75:88:da:77:51:78:f5:e0:ff:0c:
         51:e1:59:6a:7e:ca:15:34:bd:75:e5:37:52:57:35:27:b6:d9:
         ae:bd:c1:33:c2:82:72:57:95:b9:4a:04:74:c9:2e:00:40:a0:
         76:5d:1f:c3:58:22:86:f9:26:7f:22:90:77:65:a0:5f:90:22:
         25:98:aa:f3:fe:06:68:4c:5e:e6:b1:89:4f:0f:00:85:fb:e1:
         e8:4c:55:f6:bf:33:c5:de:0c:0c:5e:91:27:8e:b8:07:3b:7f:
         dc:a6:98:05:1f:e7:6f:64:6e:f6:d9:84:c6:ce:e3:96:a0:8a:
         0f:f8:1d:34:58:fa:e2:35:2a:f9:2d:f3:17:07:eb:6c:31:78:
         53:0b:bd:2a:63:1a:7c:a5:19:f2:f9:d9:95:de:23:e3:48:5d:
         80:43:64:63:e6:bd:55:ef:f1:ce:a0:dc:e2:39:d6:24:e5:2a:
         84:74:e9:58:6b:41:22:cc:0d:b6:af:19:66:17:f8:41:40:9b:
         c4:70:27:e7:66:56:5f:ac:c4:40:d8:e1:88:91:fd:c3:ae:2f:
         a8:fc:4a:fb:c7:27:8c:b2:fd:41:fb:85:84:71:42:12:6e:f1:
         fc:9f:a7:3b:77:18:80:f5:d1:65:7f:32:6b:8f:23:6e:95:14:
         e4:ed:7e:b0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICArwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA3MjJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDOTBBOUVGNEZCOURG
QkJEMTlGRjNGM0Y5NDgyQjYxMjBDQzEwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0X0ZuuS8G26nWtq+b2rrPXt9bWlwxnbCCqPP/Bg/QDVOYFDhv
4NvRZPM0nECsCd1znt7K+5oyz/rUDhIssGDC2SboQNGEe7TF8uiMKHgY5x2RIeyW
hrdnG51V+BkT51EtKk3vRF2MV6h7EzRz3bp0pFnZVTicubfknr7RBHf71mo7CpiV
t/o3ci8IQRrlVYOEPB2SnkfYW+Ra445EYDTZ8EiosqcLrrWy8kqveg26Da9eQstZ
Pu0igITmp6IGNs9zwOwUeUKgotRGaTf+IYUAqnKjOityM6bqmrCotKO1wLliime2
vbnE7MQZXh4Z19kl2yqS8haBm6aW75GkwUFNAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUnJCp70+537vRn/Pz+UgrYSDMEAswHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9uSkNwNzAtNTM3dlJuX1B6LVVncllTRE1FQXMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcgDANBgkqhkiG9w0BAQsFAAOCAQEAp3mVzoiTkmN1iNp3UXj1
4P8MUeFZan7KFTS9deU3Ulc1J7bZrr3BM8KCcleVuUoEdMkuAECgdl0fw1gihvkm
fyKQd2WgX5AiJZiq8/4GaExe5rGJTw8Ahfvh6ExV9r8zxd4MDF6RJ464Bzt/3KaY
BR/nb2Ru9tmExs7jlqCKD/gdNFj64jUq+S3zFwfrbDF4Uwu9KmMafKUZ8vnZld4j
40hdgENkY+a9Ve/xzqDc4jnWJOUqhHTpWGtBIswNtq8ZZhf4QUCbxHAn52ZWX6zE
QNjhiJH9w64vqPxK+8cnjLL9QfuFhHFCEm7x/J+nO3cYgPXRZX8ya48jbpUU5O1+
sA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org