Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxRGRG9_L7HhvX_Fcl2iRkjlbRs.roa
File:                     FxRGRG9_L7HhvX_Fcl2iRkjlbRs.roa (raw, json)
Hash identifier:          YX2VE1uVG1yTFmRZOTDDo2tP3O7OmkEoPRz0y00xf10=
Subject key identifier:   17:14:46:44:6F:7F:2F:B1:E1:BD:7F:C5:72:5D:A2:46:48:E5:6D:1B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       4F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxRGRG9_L7HhvX_Fcl2iRkjlbRs.roa
Signing time:             Fri 10 Feb 2023 07:41:26 +0000
ROA not before:           Fri 10 Feb 2023 07:41:26 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.74/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:26 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=171446446F7F2FB1E1BD7FC5725DA24648E56D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:f8:00:61:78:b9:87:a2:11:ff:5e:12:aa:
                    53:6a:6b:2e:76:79:37:1b:55:10:df:25:17:94:30:
                    38:89:40:20:49:a5:58:5c:a3:c4:80:1f:29:32:ea:
                    de:70:3c:4c:d6:70:e2:e6:7f:af:20:8e:c1:e7:32:
                    75:58:6d:3d:f1:85:a0:15:4f:7d:97:49:6d:f3:93:
                    95:ac:4f:e8:08:d7:d4:0e:b4:93:e6:80:c7:06:4d:
                    96:57:64:89:f0:ab:2d:4b:87:bb:fe:67:eb:fe:ef:
                    33:e1:43:15:1f:98:1a:ce:f8:b9:3a:33:82:70:4a:
                    60:c0:23:fa:8f:c0:5b:64:29:65:f5:66:cf:cd:6d:
                    17:4e:62:ba:57:f7:85:a1:e0:04:52:7e:e1:6a:67:
                    e6:83:7a:0d:6f:3d:d7:40:82:af:dc:52:29:3c:0a:
                    0b:80:25:3f:04:e6:c8:f8:bb:2b:dc:20:f4:75:58:
                    7a:78:a7:6f:c4:c6:fb:c5:6e:6a:7a:40:84:b6:97:
                    14:67:e6:ad:c5:20:dc:f1:8b:e7:dc:14:ac:89:12:
                    70:61:2f:f2:d4:d4:28:60:a5:a7:6e:56:ab:0b:4e:
                    7c:56:88:71:82:b6:a9:ee:cf:23:69:86:66:cf:bc:
                    ae:5b:34:ff:8c:41:db:be:3a:f0:a9:f8:b4:bd:3b:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:46:44:6F:7F:2F:B1:E1:BD:7F:C5:72:5D:A2:46:48:E5:6D:1B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxRGRG9_L7HhvX_Fcl2iRkjlbRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.74/32

    Signature Algorithm: sha256WithRSAEncryption
         95:04:ad:01:24:45:3c:b8:d0:f9:bf:97:b9:f9:30:be:13:cf:
         8e:30:4f:ed:10:9b:5a:ed:73:9b:43:91:01:99:8f:93:eb:04:
         bc:77:16:a3:09:44:63:78:5c:78:90:70:07:58:27:0c:6f:22:
         e4:35:4e:2d:10:b9:85:b3:67:11:68:ea:8c:ec:3d:11:be:ba:
         7f:a0:7b:4b:ee:05:52:41:b2:1f:00:f0:18:8c:8b:77:cf:16:
         2e:f0:40:2f:48:d1:d0:99:1f:25:7a:69:89:a2:47:54:cc:ec:
         21:fc:fd:88:aa:21:fd:84:98:6d:9d:e3:42:0c:51:2f:12:ea:
         f8:10:fe:4f:00:66:84:6f:7d:df:c3:9f:15:07:a5:db:b8:d2:
         a6:e8:7a:88:82:fc:57:03:83:8b:22:31:e6:57:36:71:67:4e:
         ec:72:e4:26:9c:70:1e:b8:d5:73:d7:67:64:45:aa:ca:0e:ed:
         96:24:04:6b:c6:09:02:ff:fe:be:98:a6:ff:85:13:46:5e:3a:
         ad:f5:91:cd:5c:a8:26:0b:9f:94:5f:19:52:78:d3:64:ff:79:
         87:6a:4e:23:76:cb:b5:46:c0:16:8a:01:72:12:c1:23:a7:3e:
         95:10:c2:ee:07:81:66:ee:c1:5a:0f:71:51:86:61:72:54:67:
         89:bb:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:51 2025 by rpki-client