Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zzUvp354cyWdEg4RyCRJrEg0DHY.roa
File:                     zzUvp354cyWdEg4RyCRJrEg0DHY.roa (raw, json)
Hash identifier:          T9VPeZBMqv6AoL7vAQhfe3nIUx9n2VMJ59qgTQCvarg=
Subject key identifier:   CF:35:2F:A7:7E:78:73:25:9D:12:0E:11:C8:24:49:AC:48:34:0C:76
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A4
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zzUvp354cyWdEg4RyCRJrEg0DHY.roa
Signing time:             Mon 20 Feb 2023 08:05:31 +0000
ROA not before:           Mon 20 Feb 2023 08:05:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.3/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CF352FA77E7873259D120E11C82449AC48340C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:97:a3:e3:1b:7b:1a:f4:5f:88:aa:64:ef:
                    0a:42:f7:eb:3f:d9:f0:24:b0:06:d7:25:c4:55:90:
                    18:95:c4:a0:67:ba:a7:ed:63:77:05:00:4a:fc:49:
                    c8:fe:86:1d:e6:df:65:5e:55:cd:9f:8f:47:83:88:
                    37:0f:60:2d:7f:de:4f:ca:aa:a1:bd:7b:d4:a8:e3:
                    f5:ae:0f:45:81:72:6e:f5:d3:47:b2:4c:ae:ff:d3:
                    fe:72:35:9f:aa:59:3f:bc:8a:fa:a8:ec:fb:93:e4:
                    10:98:8b:5c:1c:73:20:04:b0:9d:b1:b2:5b:ad:b8:
                    d6:a2:e0:8b:ae:c5:15:13:10:a8:5b:d5:fe:20:26:
                    35:1c:30:27:9e:82:25:25:b4:da:f4:2c:d7:32:7f:
                    03:b6:91:23:2b:82:35:72:03:34:3d:b9:f1:1a:8e:
                    c5:6d:e6:64:f1:96:42:2d:ce:ab:4f:80:e4:07:8f:
                    b6:76:98:d2:6e:f9:fe:33:7d:5e:cd:74:dc:27:b3:
                    f8:69:a2:a0:23:96:7c:2a:35:76:04:0d:74:53:a8:
                    26:1d:0b:fa:45:d4:59:c8:f3:38:58:88:f7:ba:0d:
                    1b:5f:17:1b:70:a3:d1:41:f5:9e:83:f3:60:a1:83:
                    d1:3a:5c:e4:d4:97:71:31:23:6c:09:2a:ec:a1:3f:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:35:2F:A7:7E:78:73:25:9D:12:0E:11:C8:24:49:AC:48:34:0C:76
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zzUvp354cyWdEg4RyCRJrEg0DHY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.3/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:c4:a7:02:72:5c:29:d4:e1:f9:45:5b:cf:5c:4a:4b:6a:
         de:da:b0:25:9b:cd:c6:1a:f7:ef:28:6d:3c:f4:19:ee:c2:41:
         45:b1:79:b6:7c:38:e8:99:72:9c:3f:2c:27:64:5b:01:0c:e3:
         2e:4c:50:67:e6:aa:48:6e:ed:81:ca:de:76:ac:28:70:86:3f:
         86:16:c2:09:c9:1d:72:0b:cf:58:48:2a:ab:74:1f:61:42:af:
         0c:29:3b:cb:be:77:a3:d3:c1:6a:4f:bf:69:69:1d:28:77:ea:
         1c:7a:a3:44:67:a6:be:c0:44:9d:e8:c0:56:08:1a:30:03:6e:
         17:d0:58:89:e6:64:64:d3:12:7f:c4:1b:ed:63:ee:80:dc:7a:
         26:bc:ce:1d:e5:40:3d:fe:b1:d9:86:54:f1:d4:bf:2b:26:7b:
         98:ff:9b:03:53:52:42:9a:74:3b:ef:41:35:04:58:7e:d4:47:
         83:86:54:a2:60:eb:8a:5f:98:24:75:30:5a:46:0c:1d:00:d8:
         84:44:b3:76:7f:f5:53:f7:d7:d8:9c:76:1c:56:bd:86:f4:86:
         75:93:0d:c7:04:9d:e9:29:1e:89:a2:70:29:03:bb:ae:a2:e6:
         6a:e2:3b:5c:4a:44:53:91:9a:4f:81:9b:f3:ed:8e:7d:ee:c1:
         55:dc:eb:98
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENGMzUyRkE3N0U3ODcz
MjU5RDEyMEUxMUM4MjQ0OUFDNDgzNDBDNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAXJej4xt7GvRfiKpk7wpC9+s/2fAksAbXJcRVkBiVxKBnuqft
Y3cFAEr8Scj+hh3m32VeVc2fj0eDiDcPYC1/3k/KqqG9e9So4/WuD0WBcm7100ey
TK7/0/5yNZ+qWT+8ivqo7PuT5BCYi1wccyAEsJ2xslutuNai4IuuxRUTEKhb1f4g
JjUcMCeegiUltNr0LNcyfwO2kSMrgjVyAzQ9ufEajsVt5mTxlkItzqtPgOQHj7Z2
mNJu+f4zfV7NdNwns/hpoqAjlnwqNXYEDXRTqCYdC/pF1FnI8zhYiPe6DRtfFxtw
o9FB9Z6D82Chg9E6XOTUl3ExI2wJKuyhP2EjAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUzzUvp354cyWdEg4RyCRJrEg0DHYwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My96elV2cDM1NGN5V2RFZzRSeUNSSnJFZzBESFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaAzANBgkqhkiG9w0BAQsFAAOCAQEAW8DEpwJyXCnU4flFW89c
Sktq3tqwJZvNxhr37yhtPPQZ7sJBRbF5tnw46JlynD8sJ2RbAQzjLkxQZ+aqSG7t
gcredqwocIY/hhbCCckdcgvPWEgqq3QfYUKvDCk7y753o9PBak+/aWkdKHfqHHqj
RGemvsBEnejAVggaMANuF9BYieZkZNMSf8Qb7WPugNx6JrzOHeVAPf6x2YZU8dS/
KyZ7mP+bA1NSQpp0O+9BNQRYftRHg4ZUomDril+YJHUwWkYMHQDYhESzdn/1U/fX
2Jx2HFa9hvSGdZMNxwSd6SkeiaJwKQO7rqLmauI7XEpEU5GaT4Gb8+2Ofe7BVdzr
mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org