Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wnloP9j7IfbMgmHav9ZW2jXeH0g.roa
File:                     wnloP9j7IfbMgmHav9ZW2jXeH0g.roa (raw, json)
Hash identifier:          b6ZRjB1Pyz6DeyCxtkl/Hz5iN6rm6SC4P+i27czqnfM=
Subject key identifier:   C2:79:68:3F:D8:FB:21:F6:CC:82:61:DA:BF:D6:56:DA:35:DE:1F:48
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01B3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wnloP9j7IfbMgmHav9ZW2jXeH0g.roa
Signing time:             Mon 20 Feb 2023 07:53:15 +0000
ROA not before:           Mon 20 Feb 2023 07:53:15 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.120/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:15 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C279683FD8FB21F6CC8261DABFD656DA35DE1F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:9e:67:15:0a:a0:57:d7:e2:b8:4b:74:d4:
                    4d:82:9d:89:b2:58:2d:71:8d:fd:49:fb:48:cc:6c:
                    92:9d:44:26:37:84:4b:2a:15:68:2d:c5:49:47:f8:
                    ef:d8:85:b8:d5:c1:3c:8b:92:f5:37:9c:e4:9b:ab:
                    6a:60:36:be:2d:ad:4d:2b:c0:ac:2c:6f:ce:fa:2c:
                    d2:e6:cd:33:13:36:2d:d8:d0:28:77:c5:a3:b2:88:
                    2d:f7:c7:3b:a4:22:2a:9a:dd:17:fa:ff:1b:b2:61:
                    96:cf:84:68:57:6b:64:78:46:74:c5:96:2d:93:41:
                    ef:3f:d4:a8:ca:4c:28:8a:72:bc:5c:b0:4b:2e:b3:
                    fa:bd:59:5f:30:87:af:a1:b4:a9:c8:13:25:76:d7:
                    71:1e:d1:5f:fe:8b:ed:e2:2f:43:c3:ff:d1:ca:85:
                    92:b7:99:af:3d:40:36:df:f6:fd:cf:c5:1f:23:ae:
                    b8:38:89:a9:3b:1a:6b:e6:c0:ed:36:ab:e0:20:88:
                    71:c2:d9:6a:81:cb:44:a3:73:5d:fe:ac:b9:02:29:
                    4e:f6:12:1c:1e:18:6a:23:48:1c:04:24:ef:00:7d:
                    f4:20:63:c1:e8:70:98:ee:c4:dd:aa:9c:2c:b0:11:
                    1b:d6:0d:a5:7c:90:d5:d0:96:a3:8d:b1:c0:81:ab:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:68:3F:D8:FB:21:F6:CC:82:61:DA:BF:D6:56:DA:35:DE:1F:48
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wnloP9j7IfbMgmHav9ZW2jXeH0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.120/32

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:fe:7e:ba:aa:9b:f8:e4:d7:15:80:c6:52:84:25:8e:3c:
         0b:73:20:85:49:d6:3a:b2:f2:e5:62:4a:f6:de:24:0a:0f:d2:
         2b:d5:e4:dd:f7:68:00:5f:5f:0b:43:45:20:f9:3f:9c:7f:95:
         dc:df:20:89:7c:01:c1:23:cf:f4:20:af:71:c4:9f:2e:87:2d:
         05:56:21:0c:96:bb:40:50:84:5b:a8:73:51:8c:9d:90:14:94:
         c6:b2:85:58:4a:e0:56:ce:92:e2:00:72:b1:07:57:64:29:b3:
         ea:e8:34:b3:d2:bc:e3:52:fb:04:19:8d:1d:9f:61:91:c6:d6:
         62:cb:c2:25:42:18:6e:fd:91:d8:61:6a:fc:dc:d6:1c:29:2f:
         2b:a8:26:6a:cf:5d:2a:7d:24:e7:ea:51:da:2a:5b:f6:82:72:
         2e:fb:d4:7f:96:e4:eb:23:1d:57:99:ce:19:fc:14:81:bf:6f:
         3a:46:fc:fe:f6:80:9c:66:65:72:b9:ff:d6:d9:94:49:80:3d:
         69:f1:e0:4d:9e:c3:c8:22:a4:17:ef:3a:b3:42:df:11:e4:fe:
         27:fe:7f:42:40:f4:3d:84:89:cc:9a:e4:df:6a:38:21:92:cc:
         66:43:ee:d7:6f:1a:15:b4:07:9b:b0:4f:18:81:c7:62:5b:60:
         c0:cf:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:09 2025 by rpki-client