Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vdtuxbw3wWH5YbIj89VNS3pI5p4.roa
File:                     vdtuxbw3wWH5YbIj89VNS3pI5p4.roa (raw, json)
Hash identifier:          5XWAay6o/mQx9d9cU4H7jtEyyw3Aov2dWS+SODAdLPE=
Subject key identifier:   BD:DB:6E:C5:BC:37:C1:61:F9:61:B2:23:F3:D5:4D:4B:7A:48:E6:9E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0192
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vdtuxbw3wWH5YbIj89VNS3pI5p4.roa
Signing time:             Mon 20 Feb 2023 07:50:57 +0000
ROA not before:           Mon 20 Feb 2023 07:50:57 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.13/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:57 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=BDDB6EC5BC37C161F961B223F3D54D4B7A48E69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:84:49:e0:86:a7:d4:d3:54:52:bf:9e:e9:2f:
                    28:07:8a:58:9a:ed:91:c5:3b:05:28:5d:33:c5:0e:
                    e9:99:57:5f:b0:01:27:35:b6:7c:54:76:53:23:08:
                    e4:76:0d:96:14:ec:91:f5:36:e4:b4:d0:26:58:d6:
                    6c:ab:a4:eb:17:ca:0d:30:3c:01:dd:ff:f4:0b:3c:
                    08:f5:ef:b9:fb:1d:c7:74:40:fa:39:13:b4:ec:8e:
                    6b:87:ba:81:a9:3b:38:df:f7:d5:fc:07:d6:4d:d7:
                    bb:76:cb:ff:fd:23:7d:34:6f:ec:30:30:17:8c:b2:
                    b9:7d:71:52:06:63:5d:1b:11:18:03:94:19:96:d5:
                    a6:56:be:e4:61:42:3b:90:7e:7b:ae:8a:81:d1:ab:
                    b8:21:d8:a6:59:37:a7:5d:dd:69:08:fb:d9:c7:cf:
                    ec:62:17:1a:a0:17:d3:33:73:7a:5d:5a:34:7e:01:
                    a2:33:42:d2:d3:0b:da:71:56:87:ed:35:64:5d:87:
                    b6:34:2e:06:3e:d2:0f:ed:54:cd:ab:68:d6:6e:c7:
                    5b:92:a2:8e:db:db:4a:81:ed:bc:a3:c1:ca:63:cd:
                    73:dc:b3:80:ea:d6:e8:2d:9a:9a:89:5c:35:da:34:
                    30:9c:43:2e:19:ce:4d:1d:c0:50:ca:61:61:1c:d6:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:6E:C5:BC:37:C1:61:F9:61:B2:23:F3:D5:4D:4B:7A:48:E6:9E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vdtuxbw3wWH5YbIj89VNS3pI5p4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.13/32

    Signature Algorithm: sha256WithRSAEncryption
         48:31:94:e1:a3:1e:9a:c3:75:18:d1:c7:35:70:47:0c:eb:dc:
         29:e9:7e:58:ec:12:6b:b2:e8:10:d9:a4:ac:66:bd:43:84:0b:
         af:bb:85:3b:f2:92:70:c8:6b:e2:bc:6b:19:00:11:7c:e1:a8:
         2d:30:ae:a8:e7:38:70:90:43:19:76:e3:eb:cc:67:1c:a4:56:
         34:fd:d0:11:25:bc:fa:f5:a0:f4:ba:06:9d:7c:5e:bc:33:6c:
         8d:16:2a:bb:6a:4f:4b:cb:37:76:b7:ae:fe:a7:f0:d6:3b:43:
         8a:f9:9e:4d:b2:44:2c:6c:3c:09:19:ac:ba:43:c3:21:cf:c9:
         0f:89:3c:32:39:56:01:c5:24:75:cc:09:b3:4b:80:22:e2:74:
         d2:b7:77:ca:ba:00:5e:09:39:6c:52:e3:4e:33:ba:49:4a:38:
         18:29:6c:11:c4:47:a2:01:37:eb:1e:86:1f:b0:2c:2f:4d:3d:
         20:4b:e1:51:26:e2:77:fc:f4:88:11:f5:06:2c:4e:d0:73:04:
         37:ca:d4:b3:3b:d1:b9:a2:40:9b:82:a2:51:78:c8:30:b1:b5:
         ee:40:35:f8:48:f1:dc:df:97:b3:93:b8:4e:17:d2:81:99:cf:
         2e:f9:18:40:fe:67:75:56:37:ee:7c:d0:2e:25:b9:9e:40:d3:
         33:93:dc:85
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzUwNTdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJEREI2RUM1QkMzN0Mx
NjFGOTYxQjIyM0YzRDU0RDRCN0E0OEU2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8hEnghqfU01RSv57pLygHilia7ZHFOwUoXTPFDumZV1+wASc1
tnxUdlMjCOR2DZYU7JH1NuS00CZY1myrpOsXyg0wPAHd//QLPAj177n7Hcd0QPo5
E7TsjmuHuoGpOzjf99X8B9ZN17t2y//9I300b+wwMBeMsrl9cVIGY10bERgDlBmW
1aZWvuRhQjuQfnuuioHRq7gh2KZZN6dd3WkI+9nHz+xiFxqgF9Mzc3pdWjR+AaIz
QtLTC9pxVoftNWRdh7Y0LgY+0g/tVM2raNZux1uSoo7b20qB7byjwcpjzXPcs4Dq
1ugtmpqJXDXaNDCcQy4Zzk0dwFDKYWEc1lE3AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUvdtuxbw3wWH5YbIj89VNS3pI5p4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My92ZHR1eGJ3M3dXSDVZYklqODlWTlMzcEk1cDQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcDTANBgkqhkiG9w0BAQsFAAOCAQEASDGU4aMemsN1GNHHNXBH
DOvcKel+WOwSa7LoENmkrGa9Q4QLr7uFO/KScMhr4rxrGQARfOGoLTCuqOc4cJBD
GXbj68xnHKRWNP3QESW8+vWg9LoGnXxevDNsjRYqu2pPS8s3dreu/qfw1jtDivme
TbJELGw8CRmsukPDIc/JD4k8MjlWAcUkdcwJs0uAIuJ00rd3yroAXgk5bFLjTjO6
SUo4GClsEcRHogE36x6GH7AsL009IEvhUSbid/z0iBH1BixO0HMEN8rUszvRuaJA
m4KiUXjIMLG17kA1+Ejx3N+Xs5O4ThfSgZnPLvkYQP5ndVY37nzQLiW5nkDTM5Pc
hQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org