Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ebUfJFKxXucELkaHuz58Tu3Sfts.roa
File:                     ebUfJFKxXucELkaHuz58Tu3Sfts.roa (raw, json)
Hash identifier:          m1meYxSATrjhXef88a4bPqnhu8DO+70Rbf03SKhYYl0=
Subject key identifier:   79:B5:1F:24:52:B1:5E:E7:04:2E:46:87:BB:3E:7C:4E:ED:D2:7E:DB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01D3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ebUfJFKxXucELkaHuz58Tu3Sfts.roa
Signing time:             Mon 20 Feb 2023 07:55:25 +0000
ROA not before:           Mon 20 Feb 2023 07:55:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.170/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=79B51F2452B15EE7042E4687BB3E7C4EEDD27EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:4d:ff:c5:28:a9:11:57:8d:8b:e1:f4:ce:
                    99:05:c5:71:e5:26:d2:4a:29:3f:ff:c4:86:25:44:
                    bf:c8:6b:ee:41:8c:aa:e2:9c:98:8b:b1:c1:b0:04:
                    b5:38:ad:e3:dd:1d:da:3d:28:84:eb:db:83:26:1e:
                    d8:7f:9f:71:ae:19:e8:c6:63:1b:18:cd:e4:82:b3:
                    b4:36:b2:e2:fa:b8:a2:de:1b:01:87:47:1b:83:cf:
                    dc:cf:25:d1:9a:91:e6:d7:10:d5:70:33:97:57:9f:
                    e5:12:ab:9d:4a:82:11:21:55:79:7e:32:4d:0e:b7:
                    c0:79:fb:ea:37:b8:19:9c:1a:96:a8:cf:4f:68:a7:
                    16:3e:95:54:38:47:16:b9:fc:da:02:85:aa:75:44:
                    54:3b:bf:13:3d:66:0c:83:57:0b:94:ff:e0:25:14:
                    f6:e4:3e:c9:80:4f:65:19:54:b9:f4:5d:6e:be:c9:
                    5e:ef:de:dc:cd:1d:32:36:10:fc:7e:24:8d:dd:34:
                    c6:2c:6b:2d:f1:83:fe:18:a8:19:c6:cd:92:11:a4:
                    0f:28:29:0a:d6:51:bc:d6:ef:d0:b6:66:c4:b3:a2:
                    d9:c7:e8:1f:cd:7f:ee:4f:c0:4f:c6:2a:6a:c1:bd:
                    18:e6:f8:a7:d9:87:1c:d9:81:05:1c:da:ce:01:5c:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:1F:24:52:B1:5E:E7:04:2E:46:87:BB:3E:7C:4E:ED:D2:7E:DB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ebUfJFKxXucELkaHuz58Tu3Sfts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.170/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:21:4f:56:45:cd:95:2b:0b:ce:36:a2:19:b5:93:de:b4:
         20:5c:5b:45:c9:d9:f5:d1:3d:79:a2:71:90:04:74:3f:61:28:
         be:5f:a6:07:49:8a:60:00:50:0b:1f:79:16:af:44:b3:dd:23:
         a0:d0:66:94:04:64:26:b5:a1:f5:38:c7:f1:c0:d2:39:e8:4a:
         41:d1:00:5d:78:4e:21:69:58:9a:8e:8a:96:b0:f7:57:ad:fd:
         04:a3:b7:8a:e3:f7:cf:b1:09:7d:68:34:36:ae:a7:a1:c5:fd:
         5c:6e:20:e8:bf:e6:f2:8a:98:62:45:bb:2c:ed:f9:e4:e6:f0:
         62:f3:9a:4f:3d:91:b4:8a:91:65:46:74:db:54:36:d4:e8:03:
         c9:98:f5:76:95:a7:42:4d:0f:e9:47:d1:27:6b:3e:c8:57:38:
         39:19:e5:a6:04:14:f2:e7:c7:3f:46:cf:8e:a8:70:79:bd:73:
         3e:5f:5a:fd:b0:b8:ea:65:40:fa:20:cb:8b:30:1f:07:a2:f4:
         76:f0:3d:fa:49:86:9b:43:06:7e:26:06:f4:67:bc:6e:33:c7:
         0c:0f:0f:60:67:07:21:6b:06:f3:36:8f:14:65:d3:54:94:42:
         37:55:4e:d1:03:34:15:52:fd:c0:d9:9a:21:54:a6:44:c8:bf:
         d4:75:9b:1e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjVaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc5QjUxRjI0NTJCMTVF
RTcwNDJFNDY4N0JCM0U3QzRFRUREMjdFREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjv03/xSipEVeNi+H0zpkFxXHlJtJKKT//xIYlRL/Ia+5BjKri
nJiLscGwBLU4rePdHdo9KITr24MmHth/n3GuGejGYxsYzeSCs7Q2suL6uKLeGwGH
RxuDz9zPJdGakebXENVwM5dXn+USq51KghEhVXl+Mk0Ot8B5++o3uBmcGpaoz09o
pxY+lVQ4Rxa5/NoChap1RFQ7vxM9ZgyDVwuU/+AlFPbkPsmAT2UZVLn0XW6+yV7v
3tzNHTI2EPx+JI3dNMYsay3xg/4YqBnGzZIRpA8oKQrWUbzW79C2ZsSzotnH6B/N
f+5PwE/GKmrBvRjm+KfZhxzZgQUc2s4BXDINAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUebUfJFKxXucELkaHuz58Tu3SftswHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9lYlVmSkZLeFh1Y0VMa2FIdXo1OFR1M1NmdHMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcqjANBgkqhkiG9w0BAQsFAAOCAQEAUa0hT1ZFzZUrC842ohm1
k960IFxbRcnZ9dE9eaJxkAR0P2Eovl+mB0mKYABQCx95Fq9Es90joNBmlARkJrWh
9TjH8cDSOehKQdEAXXhOIWlYmo6KlrD3V639BKO3iuP3z7EJfWg0Nq6nocX9XG4g
6L/m8oqYYkW7LO355ObwYvOaTz2RtIqRZUZ021Q21OgDyZj1dpWnQk0P6UfRJ2s+
yFc4ORnlpgQU8ufHP0bPjqhweb1zPl9a/bC46mVA+iDLizAfB6L0dvA9+kmGm0MG
fiYG9Ge8bjPHDA8PYGcHIWsG8zaPFGXTVJRCN1VO0QM0FVL9wNmaIVSmRMi/1HWb
Hg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:50 2025 by rpki-client