Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wMxQ8waFfRUMjp7fv1eUUw67p64.roa
File:                     wMxQ8waFfRUMjp7fv1eUUw67p64.roa (raw, json)
Hash identifier:          Eq+OmNuL/ZysuMF/hZ4AfmT/DvF/ya2/ZukPzrSRSnA=
Subject key identifier:   C0:CC:50:F3:06:85:7D:15:0C:8E:9E:DF:BF:57:94:53:0E:BB:A7:AE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02AB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wMxQ8waFfRUMjp7fv1eUUw67p64.roa
Signing time:             Mon 20 Feb 2023 08:05:34 +0000
ROA not before:           Mon 20 Feb 2023 08:05:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.135/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C0CC50F306857D150C8E9EDFBF5794530EBBA7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:91:75:86:55:22:94:98:d5:80:a6:e4:ae:
                    a7:37:38:52:06:53:22:12:1f:3e:19:a3:ad:eb:90:
                    48:80:fe:42:87:0b:8b:44:d6:01:22:56:02:78:4e:
                    1c:60:ce:a6:e3:f6:5b:ae:4d:8e:00:79:ea:7b:a4:
                    76:58:8b:11:aa:f2:37:23:56:00:6e:ae:c1:76:7d:
                    12:38:1e:71:5e:08:8a:8d:46:3c:28:10:e4:47:9d:
                    ee:ce:e1:f3:bb:69:65:77:41:cf:0a:fa:c5:65:99:
                    7c:a7:05:ae:6e:0d:99:89:e8:79:d0:13:ea:18:ca:
                    ef:40:d1:18:cd:c7:62:3d:34:66:fc:5b:75:72:bc:
                    18:74:aa:df:2a:8d:06:bd:40:b3:40:61:5b:0c:5a:
                    55:d8:f9:9a:b3:90:fa:ae:b3:34:d2:c2:53:97:79:
                    56:ad:6f:9e:52:ec:40:e9:c7:aa:72:ec:11:c4:cb:
                    86:85:f4:fa:45:cd:f2:ce:aa:eb:a8:d6:5e:cc:68:
                    c5:bc:d5:d6:ed:4d:de:3b:82:82:59:49:35:7b:52:
                    6b:b6:81:d9:37:d3:1c:9d:62:36:d6:01:31:af:22:
                    b5:b0:1e:b3:f0:a3:30:a9:61:d3:e0:55:c4:e3:bc:
                    e7:1a:da:70:4b:f6:f6:15:5d:af:eb:6b:a6:e7:ed:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:50:F3:06:85:7D:15:0C:8E:9E:DF:BF:57:94:53:0E:BB:A7:AE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wMxQ8waFfRUMjp7fv1eUUw67p64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.135/32

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:bb:0b:62:a6:4a:ca:80:85:24:03:de:bf:51:f5:b9:3e:
         06:a7:d5:3b:35:37:b2:ad:cd:41:52:98:24:19:14:d9:b3:74:
         ba:fc:a2:6f:34:76:0a:dc:03:3b:29:e3:bb:6b:18:d6:e4:22:
         08:0e:9d:63:d3:be:0c:01:ee:e8:36:4e:37:f7:13:bf:16:0a:
         2f:ec:f8:83:34:cb:80:e5:2d:d3:30:be:09:96:8b:61:6b:35:
         e4:f1:2e:f8:37:5c:08:50:f5:2c:c5:1b:bb:55:c2:21:de:15:
         69:ac:84:9b:0b:86:3d:aa:c3:7d:f1:19:84:6b:9e:8c:20:a8:
         38:d8:af:db:9f:8e:10:91:02:53:a5:59:39:91:81:48:4d:97:
         81:bc:43:8f:69:ba:97:be:e0:44:29:42:11:63:4c:1c:62:7a:
         1a:9e:7f:40:2f:bc:da:a3:86:a3:bb:8f:4d:dc:22:79:30:e7:
         5a:77:42:9a:af:6f:a2:d4:95:eb:f3:dc:f6:a5:62:cb:40:34:
         6e:f5:ed:9b:70:0d:4c:38:69:17:43:02:74:c6:bb:b3:b9:54:
         67:43:54:e5:03:10:08:e8:55:f2:a2:00:1d:d0:96:78:b9:f2:
         5f:53:b7:01:be:49:ff:11:41:66:ec:48:2e:f4:6c:f2:94:f1:
         c2:a9:01:0b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzRaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMwQ0M1MEYzMDY4NTdE
MTUwQzhFOUVERkJGNTc5NDUzMEVCQkE3QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAjZF1hlUilJjVgKbkrqc3OFIGUyISHz4Zo63rkEiA/kKHC4tE
1gEiVgJ4Thxgzqbj9luuTY4Aeep7pHZYixGq8jcjVgBursF2fRI4HnFeCIqNRjwo
EORHne7O4fO7aWV3Qc8K+sVlmXynBa5uDZmJ6HnQE+oYyu9A0RjNx2I9NGb8W3Vy
vBh0qt8qjQa9QLNAYVsMWlXY+ZqzkPquszTSwlOXeVatb55S7EDpx6py7BHEy4aF
9PpFzfLOquuo1l7MaMW81dbtTd47goJZSTV7Umu2gdk30xydYjbWATGvIrWwHrPw
ozCpYdPgVcTjvOca2nBL9vYVXa/ra6bn7Z9dAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUwMxQ8waFfRUMjp7fv1eUUw67p64wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My93TXhROHdhRmZSVU1qcDdmdjFlVVV3NjdwNjQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxchzANBgkqhkiG9w0BAQsFAAOCAQEAKY67C2KmSsqAhSQD3r9R
9bk+BqfVOzU3sq3NQVKYJBkU2bN0uvyibzR2CtwDOynju2sY1uQiCA6dY9O+DAHu
6DZON/cTvxYKL+z4gzTLgOUt0zC+CZaLYWs15PEu+DdcCFD1LMUbu1XCId4VaayE
mwuGParDffEZhGuejCCoONiv25+OEJECU6VZOZGBSE2XgbxDj2m6l77gRClCEWNM
HGJ6Gp5/QC+82qOGo7uPTdwieTDnWndCmq9votSV6/Pc9qViy0A0bvXtm3ANTDhp
F0MCdMa7s7lUZ0NU5QMQCOhV8qIAHdCWeLnyX1O3Ab5J/xFBZuxILvRs8pTxwqkB
Cw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:29 2025 by rpki-client