Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/w1BLWdEkya6r0YvLLdvHchygq2I.roa
File:                     w1BLWdEkya6r0YvLLdvHchygq2I.roa (raw, json)
Hash identifier:          ceKSCj5lnDgjqFzoj6RR1V3jeR/x5sc3mc5IIlqagTw=
Subject key identifier:   C3:50:4B:59:D1:24:C9:AE:AB:D1:8B:CB:2D:DB:C7:72:1C:A0:AB:62
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/w1BLWdEkya6r0YvLLdvHchygq2I.roa
Signing time:             Mon 20 Feb 2023 07:55:20 +0000
ROA not before:           Mon 20 Feb 2023 07:55:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.190/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C3504B59D124C9AEABD18BCB2DDBC7721CA0AB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:f5:88:c8:f0:f4:64:a4:c7:11:c4:b3:d6:
                    b0:3b:93:5b:dc:39:61:ad:17:e5:ea:16:c6:c5:48:
                    df:e2:7b:0c:97:d9:64:6f:3b:11:1c:15:c2:09:b1:
                    99:08:6e:56:0f:fc:ae:cb:22:0f:5e:44:5b:94:fe:
                    9b:7d:d9:a1:57:75:70:f2:f9:44:97:55:39:a2:63:
                    19:64:2a:b7:f8:52:a6:4e:8d:25:51:96:a3:9c:00:
                    2f:4f:75:bc:35:eb:79:d6:51:c4:21:2c:82:76:5d:
                    37:e8:88:23:9b:e8:33:4b:e6:c0:e0:3d:44:4f:5e:
                    3a:0a:4a:0c:c8:4a:97:9f:e9:08:e5:d5:54:17:bb:
                    90:40:62:44:10:0c:a8:c0:9f:a7:99:7c:b6:a2:c3:
                    76:01:53:9d:f2:ac:d4:04:ce:0d:12:4d:16:6b:1d:
                    b6:c9:b0:43:be:b8:95:e1:47:2e:67:69:e0:4c:6d:
                    9e:03:3c:6b:5f:4f:e1:4d:65:eb:a8:a2:06:10:e0:
                    7a:f6:2b:cd:88:38:e1:ef:bc:1a:29:47:bf:8b:5c:
                    fb:40:6b:27:e7:53:fc:ff:29:06:74:47:b9:65:66:
                    71:79:89:e9:c8:a3:99:da:b8:db:3c:24:9c:9f:c9:
                    c0:4f:57:d5:59:4a:5f:ef:c0:2b:2e:0e:46:6d:f7:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:4B:59:D1:24:C9:AE:AB:D1:8B:CB:2D:DB:C7:72:1C:A0:AB:62
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/w1BLWdEkya6r0YvLLdvHchygq2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.190/32

    Signature Algorithm: sha256WithRSAEncryption
         22:84:85:98:7a:37:51:ff:8d:30:68:94:78:b8:b1:72:51:b6:
         a7:1b:a4:1a:af:9e:99:15:42:64:d2:44:36:e4:0b:a8:66:08:
         6e:52:4c:21:5a:1d:5d:d9:c0:58:1e:d0:08:9a:b7:c0:30:5c:
         01:ff:e5:c3:09:f3:63:39:25:ea:13:cf:6c:4a:ca:7d:36:ab:
         28:b0:2d:f9:ea:da:d6:99:a7:4b:1a:0f:d4:e6:09:27:11:24:
         9e:0f:c5:dd:b8:e7:62:e0:4f:ed:70:dd:d9:99:60:49:83:2c:
         56:89:4f:60:3a:9f:31:20:ff:fd:d7:24:4e:be:e7:65:bf:e4:
         69:9b:04:71:f3:a5:5c:b5:d4:4b:2b:1f:85:42:c0:67:61:51:
         af:f7:0d:c9:8f:d3:67:e6:9c:63:de:0f:44:36:7c:0a:7c:b5:
         ba:7d:bd:26:a8:fb:8a:e2:3d:2d:ac:08:c1:69:ac:e2:8f:b5:
         11:f1:41:0d:a7:03:47:90:b6:c9:a1:b9:7b:d1:98:14:ae:8f:
         8b:1e:90:88:15:72:d7:8b:d6:6c:cd:1b:11:20:5d:cc:10:ea:
         ae:c8:fe:f1:f3:d3:8f:1d:6b:7a:ec:d1:d2:a6:f5:92:bf:de:
         d4:8e:f2:9c:2a:ae:0d:25:20:bd:f6:34:15:76:d2:bc:3c:9b:
         8c:77:55:b6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjBaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMzNTA0QjU5RDEyNEM5
QUVBQkQxOEJDQjJEREJDNzcyMUNBMEFCNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRG/WIyPD0ZKTHEcSz1rA7k1vcOWGtF+XqFsbFSN/iewyX2WRv
OxEcFcIJsZkIblYP/K7LIg9eRFuU/pt92aFXdXDy+USXVTmiYxlkKrf4UqZOjSVR
lqOcAC9Pdbw163nWUcQhLIJ2XTfoiCOb6DNL5sDgPURPXjoKSgzISpef6Qjl1VQX
u5BAYkQQDKjAn6eZfLaiw3YBU53yrNQEzg0STRZrHbbJsEO+uJXhRy5naeBMbZ4D
PGtfT+FNZeuoogYQ4Hr2K82IOOHvvBopR7+LXPtAayfnU/z/KQZ0R7llZnF5ienI
o5nauNs8JJyfycBPV9VZSl/vwCsuDkZt9zZzAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUw1BLWdEkya6r0YvLLdvHchygq2IwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My93MUJMV2RFa3lhNnIwWXZMTGR2SGNoeWdxMkku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxavjANBgkqhkiG9w0BAQsFAAOCAQEAIoSFmHo3Uf+NMGiUeLix
clG2pxukGq+emRVCZNJENuQLqGYIblJMIVodXdnAWB7QCJq3wDBcAf/lwwnzYzkl
6hPPbErKfTarKLAt+era1pmnSxoP1OYJJxEkng/F3bjnYuBP7XDd2ZlgSYMsVolP
YDqfMSD//dckTr7nZb/kaZsEcfOlXLXUSysfhULAZ2FRr/cNyY/TZ+acY94PRDZ8
Cny1un29Jqj7iuI9LawIwWms4o+1EfFBDacDR5C2yaG5e9GYFK6Pix6QiBVy14vW
bM0bESBdzBDqrsj+8fPTjx1reuzR0qb1kr/e1I7ynCquDSUgvfY0FXbSvDybjHdV
tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org