Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nk3ULqtf2Q0WqkA3R-c7-Lf_ccI.roa
File:                     nk3ULqtf2Q0WqkA3R-c7-Lf_ccI.roa (raw, json)
Hash identifier:          uf19JiH5arxXFSvypu/0fhjE+Wsn3vV+3OJ157ckKdY=
Subject key identifier:   9E:4D:D4:2E:AB:5F:D9:0D:16:AA:40:37:47:E7:3B:F8:B7:FF:71:C2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0225
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nk3ULqtf2Q0WqkA3R-c7-Lf_ccI.roa
Signing time:             Mon 20 Feb 2023 07:59:24 +0000
ROA not before:           Mon 20 Feb 2023 07:59:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.210/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9E4DD42EAB5FD90D16AA403747E73BF8B7FF71C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:5c:df:b2:02:95:9d:18:ca:1b:14:a6:aa:
                    24:af:70:1c:a6:ee:68:00:bc:ac:ac:f7:68:ed:ee:
                    01:d5:d0:3b:34:55:c6:b9:23:d5:25:64:8b:24:78:
                    03:3c:0d:36:39:5a:08:d4:80:76:f6:43:96:d9:e9:
                    14:c8:e9:3b:38:54:09:44:05:02:df:1e:7a:9d:80:
                    33:9e:79:05:8b:36:57:82:46:06:de:92:f1:7d:9f:
                    05:a4:31:c9:9e:7a:2a:e0:53:37:e7:58:9e:13:3b:
                    48:a4:c0:d3:e3:39:34:c4:6e:44:cb:83:39:e9:68:
                    29:c7:a8:2c:e1:98:58:e3:47:fd:46:b3:41:5d:02:
                    21:5b:98:99:90:2f:10:d7:f5:27:23:28:67:ec:8c:
                    15:63:61:ae:3d:fa:a6:3b:58:65:a6:75:4f:2b:59:
                    b2:d5:6a:30:26:2a:fe:eb:58:9f:32:f3:de:90:71:
                    3f:46:fc:88:74:ca:6f:19:34:82:53:f3:bb:2c:d6:
                    cd:4a:80:6f:78:2b:3c:84:48:cc:92:9a:44:bb:31:
                    31:c8:49:20:a0:dd:03:51:cf:0d:97:f4:f3:ce:68:
                    17:64:c3:0b:fa:0a:77:f2:c6:1f:3b:f4:d3:a3:cb:
                    e8:b0:2d:5c:f0:f1:c3:aa:d9:7c:5d:15:aa:e8:be:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:D4:2E:AB:5F:D9:0D:16:AA:40:37:47:E7:3B:F8:B7:FF:71:C2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nk3ULqtf2Q0WqkA3R-c7-Lf_ccI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.210/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:7f:25:6e:46:07:96:d2:ab:f8:70:e1:e2:50:f5:92:1e:
         f4:65:59:9e:fd:54:90:bc:6b:bf:38:8f:ab:11:0b:09:8d:58:
         28:fd:81:c5:fb:46:4d:ba:cc:85:0f:c2:e6:4a:de:93:12:3e:
         0b:26:9f:63:fa:18:d3:f9:93:67:33:d7:16:7b:df:4c:23:b9:
         fa:13:83:ce:c2:80:ba:7a:86:b8:32:4a:4a:5b:b5:7e:27:e3:
         b1:21:c6:64:a5:4a:8e:ef:ad:43:fa:86:f8:77:76:df:d3:fd:
         a5:d7:f0:9b:9d:31:e7:36:b6:b8:0e:1a:6e:c8:21:11:db:33:
         d2:69:1a:fa:49:b4:df:20:d4:96:ff:05:cb:01:15:7b:24:1a:
         99:24:6f:0b:b7:5a:29:9d:c4:06:d7:ea:6c:e0:d3:81:b0:32:
         b3:bc:6e:e9:e2:6f:6a:f5:67:27:6c:da:1c:d6:57:ba:30:6f:
         98:ae:6e:7e:20:b8:6d:31:23:92:27:ba:13:92:1f:c6:b0:5f:
         f7:c3:c5:b6:43:0b:e5:23:8d:3b:36:c1:4d:b3:eb:bb:9c:c8:
         f5:f1:a8:8e:62:2b:fc:d6:96:e7:cc:29:6a:83:8a:9e:a1:88:
         86:fa:31:f6:b6:eb:08:80:a6:b8:55:40:29:cd:de:fd:82:35:
         87:a6:7a:fa
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU5MjRaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlFNERENDJFQUI1RkQ5
MEQxNkFBNDAzNzQ3RTczQkY4QjdGRjcxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoBFzfsgKVnRjKGxSmqiSvcBym7mgAvKys92jt7gHV0Ds0Vca5
I9UlZIskeAM8DTY5WgjUgHb2Q5bZ6RTI6Ts4VAlEBQLfHnqdgDOeeQWLNleCRgbe
kvF9nwWkMcmeeirgUzfnWJ4TO0ikwNPjOTTEbkTLgznpaCnHqCzhmFjjR/1Gs0Fd
AiFbmJmQLxDX9ScjKGfsjBVjYa49+qY7WGWmdU8rWbLVajAmKv7rWJ8y896QcT9G
/Ih0ym8ZNIJT87ss1s1KgG94KzyESMySmkS7MTHISSCg3QNRzw2X9PPOaBdkwwv6
Cnfyxh879NOjy+iwLVzw8cOq2XxdFarovrnvAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUnk3ULqtf2Q0WqkA3R+c7+Lf/ccIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9uazNVTHF0ZjJRMFdxa0EzUi1jNy1MZl9jY0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxa0jANBgkqhkiG9w0BAQsFAAOCAQEALSN/JW5GB5bSq/hw4eJQ
9ZIe9GVZnv1UkLxrvziPqxELCY1YKP2BxftGTbrMhQ/C5krekxI+CyafY/oY0/mT
ZzPXFnvfTCO5+hODzsKAunqGuDJKSlu1fifjsSHGZKVKju+tQ/qG+Hd239P9pdfw
m50x5za2uA4absghEdsz0mka+km03yDUlv8FywEVeyQamSRvC7daKZ3EBtfqbODT
gbAys7xu6eJvavVnJ2zaHNZXujBvmK5ufiC4bTEjkie6E5IfxrBf98PFtkML5SON
OzbBTbPru5zI9fGojmIr/NaW58wpaoOKnqGIhvox9rbrCICmuFVAKc3e/YI1h6Z6
+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org