Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvKypj_LnTpLcGo1JuuBClbKYYg.roa
File:                     CvKypj_LnTpLcGo1JuuBClbKYYg.roa (raw, json)
Hash identifier:          x0STUj4sEbEzrhTeR+LIKCp4zo2ieliqflind3CRfzQ=
Subject key identifier:   0A:F2:B2:A6:3F:CB:9D:3A:4B:70:6A:35:26:EB:81:0A:56:CA:61:88
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       56
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvKypj_LnTpLcGo1JuuBClbKYYg.roa
Signing time:             Fri 10 Feb 2023 07:41:30 +0000
ROA not before:           Fri 10 Feb 2023 07:41:30 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.157/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:30 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=0AF2B2A63FCB9D3A4B706A3526EB810A56CA6188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:2f:69:14:6f:52:58:27:73:a6:15:71:ef:
                    c7:b6:57:e4:de:d1:96:66:75:70:2b:b1:70:43:aa:
                    30:97:0a:4c:f5:6d:d2:f7:8d:f9:88:c3:02:7a:c4:
                    76:b6:7f:48:18:a7:f6:53:ff:da:ec:97:5a:27:ef:
                    b5:52:bc:f2:d9:e3:18:97:db:cd:14:a7:15:de:21:
                    43:0b:76:fd:0f:97:be:2d:ee:0a:11:69:a4:18:8b:
                    65:d2:5c:3b:33:9d:2d:be:46:c9:21:a9:73:06:1f:
                    74:30:ab:41:94:ab:61:b9:d4:b0:d8:af:49:e9:5e:
                    f9:b4:2e:88:5d:cb:00:c7:60:12:ea:41:76:f0:7d:
                    e8:38:10:a4:d7:d3:01:e2:bb:8b:30:7e:dc:5c:f3:
                    61:f8:88:73:42:1e:35:79:f4:48:9b:2f:ea:0d:96:
                    ba:58:21:80:02:12:7a:4c:e0:a5:fc:b0:d4:6c:c0:
                    c5:57:31:c7:91:cf:75:18:9b:3e:fc:e0:ea:56:2b:
                    78:f3:7d:65:a7:8e:04:ce:77:5a:5e:aa:a7:fb:92:
                    d0:a5:fb:96:07:5f:31:61:df:8f:37:30:23:4c:d0:
                    53:2e:84:ae:b6:83:96:94:63:c2:81:0e:c0:ec:f9:
                    b3:e9:50:e0:57:d6:b9:8b:4a:9c:40:21:66:f9:59:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:B2:A6:3F:CB:9D:3A:4B:70:6A:35:26:EB:81:0A:56:CA:61:88
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvKypj_LnTpLcGo1JuuBClbKYYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.157/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:4d:a4:b9:44:39:ba:d3:f4:61:fb:ba:9e:1f:81:47:7c:
         94:1d:7a:c9:0f:c1:df:e8:5f:86:35:e0:c7:76:27:a6:14:32:
         e1:82:93:e5:e5:04:ba:1d:a6:c2:39:6c:09:c2:2b:ef:94:cd:
         7d:0e:8e:e3:9f:9f:f3:b5:47:2a:f6:4e:81:26:ec:8c:6f:dc:
         8a:64:da:75:e0:1d:b2:24:90:c1:54:9e:4c:b0:54:12:56:95:
         44:72:d9:88:d0:44:bb:88:bd:71:eb:41:75:80:d5:52:7f:62:
         fd:0f:42:61:24:b0:7e:66:38:74:c3:99:66:c5:e4:46:77:f5:
         5d:9a:35:bf:0f:3d:e9:fd:b0:6d:6e:30:98:35:c7:ac:48:dd:
         fb:13:95:43:0a:e3:0d:1f:da:f8:d1:9d:4e:e6:c6:af:b4:97:
         0d:71:09:6c:c9:ad:97:af:3e:0a:d0:8e:39:82:09:72:45:55:
         52:6e:de:c8:64:35:f7:b9:e7:d6:13:5d:66:e8:68:a5:24:24:
         f1:60:0c:86:2d:6b:8f:88:ce:22:8f:f9:5d:e9:bb:f9:11:ab:
         67:10:ff:94:4c:64:7d:6c:f8:e8:db:84:f9:26:7f:91:8c:3e:
         89:9b:55:4d:4b:a9:f7:06:76:e1:95:52:72:a5:6f:6a:64:88:
         5a:20:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:58 2025 by rpki-client