Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y1kfEooHAT6c0uFtGoN-U-Lbmu8.roa
File:                     y1kfEooHAT6c0uFtGoN-U-Lbmu8.roa (raw, json)
Hash identifier:          ZCcAf1I8Z5J0oMQ/aMFhgDyya9RLAPwXbKhr4AcTh30=
Subject key identifier:   CB:59:1F:12:8A:07:01:3E:9C:D2:E1:6D:1A:83:7E:53:E2:DB:9A:EF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01CD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y1kfEooHAT6c0uFtGoN-U-Lbmu8.roa
Signing time:             Mon 20 Feb 2023 07:55:22 +0000
ROA not before:           Mon 20 Feb 2023 07:55:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.93/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CB591F128A07013E9CD2E16D1A837E53E2DB9AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:41:fd:6f:38:9c:4a:7a:e6:41:3c:c7:d1:
                    e3:f0:3b:b0:dd:ab:d2:c6:d2:f0:5b:cb:12:de:2d:
                    ce:0a:73:5c:69:70:f0:c5:9e:17:b8:d4:d8:aa:d9:
                    27:73:fc:d7:64:43:59:eb:ce:97:9c:0e:92:7f:95:
                    3f:d6:28:69:af:6f:82:d5:3b:c7:4e:8e:a2:5d:b2:
                    ae:9b:50:2c:b1:92:f8:0a:e6:e7:d5:51:48:73:47:
                    06:da:09:cf:78:3d:d9:65:8a:98:5d:30:cb:54:fa:
                    64:00:b0:9a:b2:91:bd:39:6e:ae:73:9c:c1:f9:79:
                    ff:57:e5:2f:58:b8:94:3b:ce:84:43:01:d8:1c:04:
                    82:ea:2b:4f:98:73:f0:35:a7:d1:31:eb:dd:a5:5b:
                    03:06:56:e7:43:b2:ae:b8:35:1c:b9:7b:f5:88:4b:
                    d9:2a:0c:46:7b:74:2e:5d:51:0d:b4:9a:26:c9:4d:
                    11:45:a0:fe:a4:75:5f:c7:09:03:97:39:d9:2f:02:
                    bd:fc:6f:a5:94:91:80:f0:bd:d5:ae:7e:62:a0:4c:
                    9c:92:e1:16:05:e7:8b:42:15:6e:38:60:09:77:ab:
                    c0:52:13:b1:e3:8e:03:26:4d:ec:65:2b:56:dc:50:
                    e7:19:14:de:d8:7d:32:cd:1d:6d:f0:41:08:77:63:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:59:1F:12:8A:07:01:3E:9C:D2:E1:6D:1A:83:7E:53:E2:DB:9A:EF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y1kfEooHAT6c0uFtGoN-U-Lbmu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.93/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:b5:d5:aa:17:28:0a:c8:a9:46:56:50:46:2f:55:e3:15:
         ab:a7:61:80:e5:f3:d8:cd:39:bc:93:22:c1:aa:50:84:11:e6:
         da:de:36:bd:4a:75:b9:5a:62:f6:a1:04:8b:b4:81:24:53:09:
         ca:5e:fb:88:8a:b9:84:0c:ab:a5:e3:98:98:66:ab:cb:4e:05:
         4f:72:e4:e3:3b:2b:f9:ce:12:2d:60:0f:6f:83:38:f3:c1:d7:
         88:a8:c3:0c:1c:5f:85:98:29:87:72:3f:65:40:d8:13:e1:85:
         ff:c5:0d:41:76:6a:30:e6:15:c3:97:2e:a6:f7:8f:12:fb:70:
         6e:88:6d:db:3a:05:8e:8a:79:31:8d:48:8c:b7:2c:d6:48:dc:
         4a:76:c1:6d:96:e0:8b:c7:7c:7e:30:81:e9:d1:ef:12:ac:8d:
         78:05:2e:ee:95:da:d9:61:22:23:a9:64:f2:9f:dd:e1:f1:c4:
         64:c9:58:e4:2a:fe:3c:2a:21:bc:60:cd:7d:e9:42:f8:49:75:
         e8:eb:58:6a:81:53:af:cc:1d:1d:34:d2:dc:84:16:ab:da:a6:
         58:70:85:f8:6f:9b:4f:26:89:55:ee:3e:b4:2f:98:f4:19:aa:
         2f:6a:2c:83:2f:c2:f6:18:ee:5b:89:bc:a5:14:f1:74:ce:f0:
         68:f0:60:72
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCNTkxRjEyOEEwNzAx
M0U5Q0QyRTE2RDFBODM3RTUzRTJEQjlBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSUEH9bzicSnrmQTzH0ePwO7Ddq9LG0vBbyxLeLc4Kc1xpcPDF
nhe41Niq2Sdz/NdkQ1nrzpecDpJ/lT/WKGmvb4LVO8dOjqJdsq6bUCyxkvgK5ufV
UUhzRwbaCc94PdlliphdMMtU+mQAsJqykb05bq5znMH5ef9X5S9YuJQ7zoRDAdgc
BILqK0+Yc/A1p9Ex692lWwMGVudDsq64NRy5e/WIS9kqDEZ7dC5dUQ20mibJTRFF
oP6kdV/HCQOXOdkvAr38b6WUkYDwvdWufmKgTJyS4RYF54tCFW44YAl3q8BSE7Hj
jgMmTexlK1bcUOcZFN7YfTLNHW3wQQh3YyilAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUy1kfEooHAT6c0uFtGoN+U+Lbmu8wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My95MWtmRW9vSEFUNmMwdUZ0R29OLVUtTGJtdTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcXTANBgkqhkiG9w0BAQsFAAOCAQEAW2a11aoXKArIqUZWUEYv
VeMVq6dhgOXz2M05vJMiwapQhBHm2t42vUp1uVpi9qEEi7SBJFMJyl77iIq5hAyr
peOYmGary04FT3Lk4zsr+c4SLWAPb4M488HXiKjDDBxfhZgph3I/ZUDYE+GF/8UN
QXZqMOYVw5cupvePEvtwboht2zoFjop5MY1IjLcs1kjcSnbBbZbgi8d8fjCB6dHv
EqyNeAUu7pXa2WEiI6lk8p/d4fHEZMlY5Cr+PCohvGDNfelC+El16OtYaoFTr8wd
HTTS3IQWq9qmWHCF+G+bTyaJVe4+tC+Y9BmqL2osgy/C9hjuW4m8pRTxdM7waPBg
cg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org