Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/p_KgshICw3wnmTQ8rk4kX6Oh98A.roa
File:                     p_KgshICw3wnmTQ8rk4kX6Oh98A.roa (raw, json)
Hash identifier:          OYtSWZV3I5lOR2PK5LQ81r3243fz5D8125u1VKsSaAw=
Subject key identifier:   A7:F2:A0:B2:12:02:C3:7C:27:99:34:3C:AE:4E:24:5F:A3:A1:F7:C0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       022F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/p_KgshICw3wnmTQ8rk4kX6Oh98A.roa
Signing time:             Mon 20 Feb 2023 07:59:28 +0000
ROA not before:           Mon 20 Feb 2023 07:59:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.158/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A7F2A0B21202C37C2799343CAE4E245FA3A1F7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:18:a5:92:78:e2:64:b4:b7:be:ac:67:1c:
                    8b:f5:5a:19:98:5c:36:03:f6:e8:99:68:21:04:f9:
                    1e:7d:0e:e6:d4:f2:b5:f4:cd:58:86:c5:9f:b9:69:
                    f3:24:6c:ed:ea:b7:a0:4d:0a:cf:38:ce:8e:76:1e:
                    1f:0e:5c:01:f2:c2:07:65:b5:50:d2:3a:0b:d8:5d:
                    80:4f:c3:ce:9b:47:5c:77:81:98:4c:5a:b4:7d:a7:
                    12:42:f6:f3:10:5f:43:f3:57:ee:0c:f9:89:ad:3f:
                    73:71:0f:59:65:1b:ec:a0:4b:9c:70:f0:26:df:12:
                    41:e8:b6:05:62:2d:2e:ea:83:a8:d3:3a:e3:a8:09:
                    be:37:95:c6:ed:3a:fb:8e:37:ae:b6:f6:fd:3d:37:
                    91:85:64:cd:63:62:7d:ec:bb:76:2c:f0:9e:ca:5b:
                    9f:fb:32:ab:04:2d:fb:98:5a:fc:ff:c3:dc:74:38:
                    35:09:0e:3d:5f:bf:b9:46:d5:82:a1:dd:44:c8:18:
                    e6:a7:52:97:13:68:0c:fa:da:82:6e:07:26:0c:36:
                    6f:77:75:61:70:37:4f:66:c0:e5:06:fc:b9:3b:31:
                    27:10:60:91:7c:9b:7f:5c:ff:35:82:55:e9:b4:12:
                    f6:7f:5f:2e:5d:ad:21:8b:b6:41:c5:6d:cf:70:0e:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:A0:B2:12:02:C3:7C:27:99:34:3C:AE:4E:24:5F:A3:A1:F7:C0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/p_KgshICw3wnmTQ8rk4kX6Oh98A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.158/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:06:39:67:87:0c:90:34:ed:b7:5c:25:f2:04:e9:91:69:
         76:f7:08:25:1d:9c:df:54:5f:2c:5b:e4:36:80:71:f9:5e:17:
         6e:90:20:d8:4f:71:83:c4:19:c5:b8:eb:e1:2e:13:28:fc:d3:
         49:79:43:5d:48:cd:2f:34:c9:21:ef:5c:07:f0:6a:d1:13:d0:
         6f:97:29:bb:7f:a9:66:39:f4:e6:2e:0c:8a:32:ad:29:9d:ed:
         5c:de:84:ac:0a:70:5c:e5:cb:e4:fa:4a:82:5d:eb:00:a1:96:
         15:cd:7c:a2:02:e7:db:8e:7b:b1:3a:b7:f9:a0:e6:2c:91:9e:
         76:81:6f:90:46:da:a8:85:c4:e2:1b:bc:72:4f:4b:10:4c:93:
         74:06:a8:58:c9:b6:fb:1c:2f:6b:7b:a7:b0:2f:6f:1d:84:12:
         c9:ee:a3:09:49:f3:47:46:46:b2:26:37:0d:3a:4c:70:8c:90:
         a4:f4:9e:ae:62:e2:a4:23:7f:b2:96:d4:d9:9a:73:68:c4:e5:
         f5:41:e1:be:58:70:6a:ef:ec:f7:0d:af:6a:7b:68:a3:d1:6b:
         ac:18:71:00:96:1c:53:e4:ee:fa:38:70:ce:86:6d:14:83:c2:
         7f:15:80:87:14:37:63:6c:8e:cc:1d:90:66:e6:70:91:e2:96:
         05:c0:06:af
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU5MjhaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE3RjJBMEIyMTIwMkMz
N0MyNzk5MzQzQ0FFNEUyNDVGQTNBMUY3QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUuxilknjiZLS3vqxnHIv1WhmYXDYD9uiZaCEE+R59DubU8rX0
zViGxZ+5afMkbO3qt6BNCs84zo52Hh8OXAHywgdltVDSOgvYXYBPw86bR1x3gZhM
WrR9pxJC9vMQX0PzV+4M+YmtP3NxD1llG+ygS5xw8CbfEkHotgViLS7qg6jTOuOo
Cb43lcbtOvuON6629v09N5GFZM1jYn3su3Ys8J7KW5/7MqsELfuYWvz/w9x0ODUJ
Dj1fv7lG1YKh3UTIGOanUpcTaAz62oJuByYMNm93dWFwN09mwOUG/Lk7MScQYJF8
m39c/zWCVem0EvZ/Xy5drSGLtkHFbc9wDjK1AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUp/KgshICw3wnmTQ8rk4kX6Oh98AwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9wX0tnc2hJQ3czd25tVFE4cms0a1g2T2g5OEEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxanjANBgkqhkiG9w0BAQsFAAOCAQEALGwGOWeHDJA07bdcJfIE
6ZFpdvcIJR2c31RfLFvkNoBx+V4XbpAg2E9xg8QZxbjr4S4TKPzTSXlDXUjNLzTJ
Ie9cB/Bq0RPQb5cpu3+pZjn05i4MijKtKZ3tXN6ErApwXOXL5PpKgl3rAKGWFc18
ogLn2457sTq3+aDmLJGedoFvkEbaqIXE4hu8ck9LEEyTdAaoWMm2+xwva3unsC9v
HYQSye6jCUnzR0ZGsiY3DTpMcIyQpPSermLipCN/spbU2ZpzaMTl9UHhvlhwau/s
9w2vantoo9FrrBhxAJYcU+Tu+jhwzoZtFIPCfxWAhxQ3Y2yOzB2QZuZwkeKWBcAG
rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org