Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
File:                     FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa (raw, json)
Hash identifier:          BNaQK0c8yf00FRfxXDxLlOd0/ZwfslWYrRurqNJ+bCw=
Subject key identifier:   17:25:DA:B0:D7:38:B9:DD:95:C1:DA:BE:2F:5B:1D:68:4B:6A:47:78
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02CF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
Signing time:             Mon 20 Feb 2023 08:07:29 +0000
ROA not before:           Mon 20 Feb 2023 08:07:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.219/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1725DAB0D738B9DD95C1DABE2F5B1D684B6A4778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:e7:fe:a1:af:9e:df:f3:7a:9c:86:3d:12:
                    78:c8:ff:e4:0b:1f:d7:45:7d:20:84:4b:2b:79:82:
                    bb:51:d0:58:77:8b:56:ac:6b:42:a8:94:12:ab:66:
                    0e:90:0a:cd:a5:69:eb:99:11:60:19:7c:6b:04:59:
                    69:47:c5:6e:1d:3f:17:08:87:5a:ed:6b:73:9d:3e:
                    2d:f2:66:74:5a:7d:6b:75:7e:03:d7:8e:2a:c0:ac:
                    0f:b2:b1:39:33:77:5c:64:81:35:a9:1f:ae:f4:1d:
                    3b:b4:2c:0a:78:51:35:8e:a4:ba:ab:cf:91:96:13:
                    26:b4:6b:0a:fe:e8:35:0a:80:d0:48:6c:1c:0b:36:
                    a1:7a:99:72:9d:55:8a:39:ee:8e:57:f7:c1:f9:57:
                    a3:e4:c0:b9:52:96:cb:73:2e:c2:ab:06:ea:65:13:
                    93:14:38:17:7a:df:87:44:0d:00:d8:fa:5d:9b:80:
                    92:18:e2:62:c3:10:89:23:f2:7c:f3:a8:51:87:6f:
                    dc:ee:16:3c:b6:3c:83:92:09:8f:7b:b3:fc:41:ba:
                    f7:8d:15:9c:57:88:3c:ba:f9:26:0d:15:9d:48:a5:
                    f1:d9:f2:81:8c:a5:5b:d1:88:bb:b0:f3:7c:d5:c8:
                    34:7f:de:53:ea:02:66:d4:5a:68:92:bb:f6:d3:52:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:DA:B0:D7:38:B9:DD:95:C1:DA:BE:2F:5B:1D:68:4B:6A:47:78
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.219/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:64:27:46:1b:f1:f1:26:58:12:5e:e3:0e:9d:75:eb:01:
         76:00:8c:a8:c0:78:28:da:d0:96:61:c0:27:97:4f:65:a4:11:
         9d:7f:a1:c5:e1:f4:17:25:30:00:4e:bd:12:41:aa:8b:cc:b9:
         3c:24:f1:50:4d:7a:1e:4f:53:80:a8:75:cc:c0:00:ec:5e:8b:
         8d:20:09:3c:b5:37:41:9f:49:e3:b5:7d:5d:41:1d:62:50:c9:
         06:59:fb:a3:fc:82:d8:e2:90:fc:ed:0e:ef:76:4a:19:12:58:
         47:c1:33:a0:8b:d1:fa:97:68:82:9d:2b:fd:14:68:56:1b:25:
         39:03:db:c7:e2:0e:a1:81:ae:bd:7e:cd:20:d2:34:51:29:35:
         3d:dc:eb:1a:d3:5c:59:ae:1d:d0:76:6e:c7:06:34:24:b8:c1:
         78:e8:c8:79:49:54:80:99:f5:5f:c7:75:7d:27:8e:74:56:52:
         20:e2:ab:ce:22:08:47:e1:65:5d:58:dc:65:14:6f:9d:ae:44:
         3e:88:d4:6c:35:af:29:de:78:a7:72:9d:7d:82:e5:ee:90:c7:
         d4:a5:a6:88:64:99:61:18:c8:2f:45:2a:e4:90:a8:4a:7f:5c:
         ca:97:69:a5:c7:0a:09:70:61:7e:f1:81:55:f0:e7:36:f3:ec:
         f7:2b:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:53 2025 by rpki-client