Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yaoDq1hrja3pTKjzUyT9d5FBTCM.roa
File:                     yaoDq1hrja3pTKjzUyT9d5FBTCM.roa (raw, json)
Hash identifier:          aUX8acbUx1q6Ttp6M8p6tSLt9h5MF/W77YjI+VmGI28=
Subject key identifier:   C9:AA:03:AB:58:6B:8D:AD:E9:4C:A8:F3:53:24:FD:77:91:41:4C:23
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       027D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yaoDq1hrja3pTKjzUyT9d5FBTCM.roa
Signing time:             Mon 20 Feb 2023 08:03:34 +0000
ROA not before:           Mon 20 Feb 2023 08:03:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.198/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C9AA03AB586B8DADE94CA8F35324FD7791414C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:1b:e1:cf:52:20:f3:63:4f:29:c2:2c:57:
                    02:34:1d:a9:e8:cc:5e:28:5a:6e:3a:5f:53:0b:93:
                    b9:11:ea:35:20:db:71:b0:58:95:e3:00:75:8c:70:
                    2a:1a:c4:d9:ea:4b:bb:d2:f2:90:8e:0d:c9:d3:d5:
                    c7:72:a2:31:25:94:15:5f:1c:1f:e0:d0:ee:e1:a0:
                    b5:93:6c:28:7c:82:cb:f2:e4:31:31:d5:ae:1b:17:
                    6f:2e:51:68:09:f5:fa:92:2c:9c:23:0b:28:54:b9:
                    95:d7:da:d4:53:87:86:9b:c5:a2:22:c6:15:7c:45:
                    12:79:08:64:96:a0:87:3d:df:20:d6:e6:0e:f1:f0:
                    f6:dc:f8:0e:00:45:94:05:c0:01:b7:94:94:4b:ad:
                    a8:37:3b:9c:20:77:89:53:a8:76:2d:5f:d2:80:e1:
                    5a:49:32:24:a3:aa:86:c7:74:dc:b9:45:c5:e3:b4:
                    53:b8:31:9a:24:5f:84:9a:ef:90:b9:ab:77:11:ed:
                    87:5f:f2:fb:3e:c9:52:f6:a3:5d:e5:2f:43:eb:1e:
                    43:92:aa:71:91:fc:58:14:12:0d:b0:d3:65:d9:93:
                    bb:8f:0f:4f:c9:32:c8:89:96:c6:29:ea:b2:4b:94:
                    59:6b:7f:fc:8d:0c:cd:44:0a:06:85:5c:db:f6:02:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AA:03:AB:58:6B:8D:AD:E9:4C:A8:F3:53:24:FD:77:91:41:4C:23
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yaoDq1hrja3pTKjzUyT9d5FBTCM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.198/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:6d:7b:4d:d5:ec:36:d7:8c:3b:0f:89:ca:ec:98:40:f2:
         41:4e:43:e8:83:8c:b7:9a:c8:fb:1b:5d:21:7a:b7:53:15:1a:
         15:72:77:85:bd:76:17:33:62:c0:98:68:36:ae:cb:68:77:15:
         d2:11:fd:2f:b9:71:c6:03:15:81:c4:e2:df:36:4e:e9:55:50:
         82:bd:3d:fa:ae:b2:0e:0f:f6:0b:94:b9:a1:04:21:86:23:7e:
         72:e2:aa:1b:b5:9f:48:97:b1:1b:51:00:c4:7b:ac:9a:4a:45:
         0c:33:ab:cc:30:c5:02:6e:ce:4a:56:5b:1b:7f:dc:ab:a3:45:
         5f:94:25:30:cf:9d:97:fe:3d:3b:6a:5d:7f:fa:af:30:0a:43:
         1f:4f:da:80:b4:85:e6:16:2c:de:c3:41:95:cc:95:e8:e8:23:
         6e:c6:e9:e1:dc:f5:48:c8:0f:f8:67:60:e0:6b:01:55:8e:3d:
         24:8a:7c:4b:aa:99:6b:36:d7:6f:7e:3e:b6:a7:3f:6e:15:a7:
         b2:9a:13:0b:47:06:83:32:df:73:1d:be:b2:7d:47:b0:a4:ab:
         20:f1:75:41:e5:71:1f:8f:73:eb:18:c3:dd:5a:81:23:39:ee:
         04:3d:92:89:ba:33:2c:72:e7:5d:6b:01:3c:ba:d6:00:d9:0a:
         d6:2d:ff:9b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAzMzRaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5QUEwM0FCNTg2QjhE
QURFOTRDQThGMzUzMjRGRDc3OTE0MTRDMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuOhvhz1Ig82NPKcIsVwI0HanozF4oWm46X1MLk7kR6jUg23Gw
WJXjAHWMcCoaxNnqS7vS8pCODcnT1cdyojEllBVfHB/g0O7hoLWTbCh8gsvy5DEx
1a4bF28uUWgJ9fqSLJwjCyhUuZXX2tRTh4abxaIixhV8RRJ5CGSWoIc93yDW5g7x
8Pbc+A4ARZQFwAG3lJRLrag3O5wgd4lTqHYtX9KA4VpJMiSjqobHdNy5RcXjtFO4
MZokX4Sa75C5q3cR7Ydf8vs+yVL2o13lL0PrHkOSqnGR/FgUEg2w02XZk7uPD0/J
MsiJlsYp6rJLlFlrf/yNDM1ECgaFXNv2AhfpAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUyaoDq1hrja3pTKjzUyT9d5FBTCMwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My95YW9EcTFocmphM3BUS2p6VXlUOWQ1RkJUQ00u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaxjANBgkqhkiG9w0BAQsFAAOCAQEAaxVte03V7DbXjDsPicrs
mEDyQU5D6IOMt5rI+xtdIXq3UxUaFXJ3hb12FzNiwJhoNq7LaHcV0hH9L7lxxgMV
gcTi3zZO6VVQgr09+q6yDg/2C5S5oQQhhiN+cuKqG7WfSJexG1EAxHusmkpFDDOr
zDDFAm7OSlZbG3/cq6NFX5QlMM+dl/49O2pdf/qvMApDH0/agLSF5hYs3sNBlcyV
6Ogjbsbp4dz1SMgP+Gdg4GsBVY49JIp8S6qZazbXb34+tqc/bhWnspoTC0cGgzLf
cx2+sn1HsKSrIPF1QeVxH49z6xjD3VqBIznuBD2SibozLHLnXWsBPLrWANkK1i3/
mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org