Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSQt0olG8jV2l2ZlAYusrABNVjI.roa
File:                     uSQt0olG8jV2l2ZlAYusrABNVjI.roa (raw, json)
Hash identifier:          na9IELBdjXHy8zCB5vhDCiLtvCDhZaKE7fTaWzcFA3U=
Subject key identifier:   B9:24:2D:D2:89:46:F2:35:76:97:66:65:01:8B:AC:AC:00:4D:56:32
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       A4
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSQt0olG8jV2l2ZlAYusrABNVjI.roa
Signing time:             Fri 10 Feb 2023 07:45:45 +0000
ROA not before:           Fri 10 Feb 2023 07:45:45 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.27/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:45 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B9242DD28946F23576976665018BACAC004D5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:76:c4:92:22:e7:0c:68:92:f5:89:64:52:7b:
                    99:54:53:c5:91:14:f1:22:ce:97:18:47:80:fd:11:
                    52:75:31:6b:53:3e:7e:46:3e:75:09:3b:a0:19:7f:
                    f7:2d:09:1e:37:ba:15:37:15:70:ec:34:83:5d:b2:
                    ad:96:72:9a:79:d9:2d:81:63:bc:2d:5f:a6:34:7d:
                    60:1b:c4:ff:21:30:93:bc:48:a4:ed:b1:7b:82:82:
                    94:87:30:15:f9:59:37:0c:87:6b:e1:2c:df:6a:4a:
                    61:59:ad:b4:19:76:20:c9:fa:a9:6f:26:ad:7b:44:
                    63:8e:97:04:0e:03:6c:6c:cc:f4:f4:ec:5e:fa:e4:
                    a2:8c:f2:54:9b:76:56:1a:ae:9b:c6:64:0a:06:e6:
                    ed:ab:25:63:ed:7d:bf:3c:6b:8b:eb:bf:c1:4e:f5:
                    b5:ba:48:af:95:74:15:08:51:c1:85:8f:d1:e2:79:
                    2f:12:f5:99:b5:81:57:8a:4e:97:31:23:67:f3:db:
                    36:9d:dd:94:a8:11:1f:89:aa:ff:79:d1:0f:1c:a0:
                    ad:c8:52:56:d3:29:32:b6:2b:ff:92:8e:78:df:48:
                    b9:ab:f8:2b:9a:40:87:83:1f:da:62:25:84:06:00:
                    dc:b3:f6:9c:49:6d:ff:03:30:58:ea:6c:11:e7:3a:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:2D:D2:89:46:F2:35:76:97:66:65:01:8B:AC:AC:00:4D:56:32
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSQt0olG8jV2l2ZlAYusrABNVjI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.27/32

    Signature Algorithm: sha256WithRSAEncryption
         21:27:c5:27:38:c2:84:d4:61:f3:66:be:1e:c4:29:be:3f:c2:
         a9:ed:9b:0e:94:ee:18:8b:45:1e:89:ec:d3:55:47:eb:dc:52:
         bb:16:67:66:dc:44:c2:fa:80:4a:e8:e9:5b:bc:39:e6:b3:57:
         3a:bd:d4:9b:91:66:4a:ee:4d:de:39:ff:6c:e1:cb:79:eb:e8:
         3d:99:eb:f9:01:98:b2:73:f8:24:ad:3b:d9:4b:62:c1:41:db:
         f7:95:33:e8:37:49:33:e7:ab:f9:e8:62:09:f3:3e:6f:0e:7f:
         35:1c:a8:96:03:6a:ea:d0:e8:84:50:c1:77:e8:64:09:9e:8d:
         0d:ff:a4:12:5b:80:18:00:a6:b2:49:81:ea:0f:cc:dd:9f:3b:
         8f:6f:2a:b7:96:d7:0a:a5:7a:32:3a:9b:dc:23:0c:18:7c:f3:
         27:c1:22:48:37:57:33:bb:c2:92:d2:22:5c:87:5a:ad:e0:51:
         40:7f:c5:c5:1c:6c:35:d1:b8:12:99:4c:ea:25:24:3a:ed:f6:
         15:76:32:33:41:cb:09:9e:e2:1c:11:ab:6f:8b:28:b4:24:8b:
         42:0a:43:88:48:42:94:89:bc:bd:9a:33:d4:2f:c1:04:18:d1:
         b4:99:48:81:5f:62:a0:c7:1f:7f:f0:21:4c:cf:8e:18:7f:db:
         8a:6a:d8:95
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1NDVaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI5MjQyREQyODk0NkYy
MzU3Njk3NjY2NTAxOEJBQ0FDMDA0RDU2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpdsSSIucMaJL1iWRSe5lUU8WRFPEizpcYR4D9EVJ1MWtTPn5G
PnUJO6AZf/ctCR43uhU3FXDsNINdsq2Wcpp52S2BY7wtX6Y0fWAbxP8hMJO8SKTt
sXuCgpSHMBX5WTcMh2vhLN9qSmFZrbQZdiDJ+qlvJq17RGOOlwQOA2xszPT07F76
5KKM8lSbdlYarpvGZAoG5u2rJWPtfb88a4vrv8FO9bW6SK+VdBUIUcGFj9HieS8S
9Zm1gVeKTpcxI2fz2zad3ZSoER+Jqv950Q8coK3IUlbTKTK2K/+SjnjfSLmr+Cua
QIeDH9piJYQGANyz9pxJbf8DMFjqbBHnOuwfAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUuSQt0olG8jV2l2ZlAYusrABNVjIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My91U1F0MG9sRzhqVjJsMlpsQVl1c3JBQk5Wakku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaGzANBgkqhkiG9w0BAQsFAAOCAQEAISfFJzjChNRh82a+HsQp
vj/Cqe2bDpTuGItFHons01VH69xSuxZnZtxEwvqASujpW7w55rNXOr3Um5FmSu5N
3jn/bOHLeevoPZnr+QGYsnP4JK072UtiwUHb95Uz6DdJM+er+ehiCfM+bw5/NRyo
lgNq6tDohFDBd+hkCZ6NDf+kEluAGACmskmB6g/M3Z87j28qt5bXCqV6Mjqb3CMM
GHzzJ8EiSDdXM7vCktIiXIdareBRQH/FxRxsNdG4EplM6iUkOu32FXYyM0HLCZ7i
HBGrb4sotCSLQgpDiEhClIm8vZoz1C/BBBjRtJlIgV9ioMcff/AhTM+OGH/bimrY
lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org