Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcBsV75r_UdAYkYG0JkVmd6QRpo.roa
File:                     GcBsV75r_UdAYkYG0JkVmd6QRpo.roa (raw, json)
Hash identifier:          uDThl0Ug0j51u0jXtpEetwlRx4XTRyLtS7uVD4B3bGw=
Subject key identifier:   19:C0:6C:57:BE:6B:FD:47:40:62:46:06:D0:99:15:99:DE:90:46:9A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       26
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcBsV75r_UdAYkYG0JkVmd6QRpo.roa
Signing time:             Fri 10 Feb 2023 07:38:58 +0000
ROA not before:           Fri 10 Feb 2023 07:38:58 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.217/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:38:58 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=19C06C57BE6BFD4740624606D0991599DE90469A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:84:30:98:31:a4:85:9a:c6:2d:9f:27:b2:
                    99:56:82:90:d2:c5:fd:62:91:0e:bd:65:ab:f7:bf:
                    eb:03:73:0c:1d:a1:01:b5:85:9e:d9:f7:61:58:68:
                    28:b5:d1:0b:91:06:82:32:f5:22:52:0b:f0:9a:dc:
                    fa:f9:84:c7:3e:e2:1f:75:d4:cb:d1:5d:0b:fc:ba:
                    fb:d7:98:3a:f9:d0:82:44:05:ea:f5:c6:7d:39:fb:
                    19:cf:3d:3b:57:77:5b:c4:3b:10:31:e3:b0:39:a9:
                    6b:85:7c:eb:9a:3c:2c:83:55:39:e1:99:c9:3b:de:
                    67:38:12:e7:f7:23:92:cb:3a:70:e1:e8:0f:99:e5:
                    b9:7e:45:59:c1:ca:61:14:85:5e:d3:34:c4:fb:c2:
                    ac:9d:61:a4:a9:10:7e:b2:4e:11:1c:4b:48:6d:2a:
                    c2:9d:49:98:3e:d5:e4:0c:9e:ac:7c:1e:29:c4:46:
                    79:75:54:83:0b:08:4b:12:6b:ce:f7:97:a8:ff:86:
                    4a:6b:73:f9:91:f6:80:7d:db:a7:7c:1c:ca:f9:4d:
                    ff:68:40:07:d7:67:02:5e:fd:13:2f:3e:ed:d1:41:
                    b2:5c:bc:c0:49:14:e8:a8:23:8c:1c:d9:2a:6c:75:
                    cd:36:37:97:79:85:4f:6f:2a:14:37:de:79:5b:66:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:6C:57:BE:6B:FD:47:40:62:46:06:D0:99:15:99:DE:90:46:9A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcBsV75r_UdAYkYG0JkVmd6QRpo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.217/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:0e:71:be:95:81:80:ab:ed:b2:b2:13:ca:4d:9c:ae:6d:
         19:8e:2e:1d:3e:f0:e6:de:c8:a0:c0:52:34:f4:9a:11:7e:48:
         d3:56:62:7f:43:19:89:c3:5c:e5:53:58:73:1b:bb:47:b9:31:
         f8:e9:86:33:3d:73:14:bf:08:27:25:6f:75:ab:2f:c4:45:1f:
         a1:3c:07:87:a8:4b:a5:96:96:44:62:02:a7:4b:5b:89:24:9f:
         32:db:f3:5a:b6:90:9d:c0:95:ef:f1:9b:4f:43:f8:06:a7:bb:
         e7:50:0c:17:cd:ae:f4:10:7c:8d:ce:bc:4c:1c:7e:e5:8b:e9:
         44:d0:6a:6f:97:0d:85:10:86:41:00:90:cb:13:56:cb:b6:d4:
         39:02:fb:18:d2:cf:3e:05:4b:2e:9b:d2:10:e8:d7:09:e0:36:
         e3:38:45:88:b5:3e:b3:0a:85:98:c9:e3:25:2c:d1:34:2c:24:
         b6:39:d2:a8:71:23:bc:43:c6:60:2b:bb:df:ad:31:fa:ce:fb:
         c7:77:84:15:0d:8f:14:d3:41:81:71:a3:58:b2:ac:de:2e:28:
         dd:c0:9a:d1:bf:be:02:3a:5e:74:97:f6:4b:37:1f:f4:ea:12:
         94:9b:97:fc:08:e4:08:02:6e:59:5a:5b:8b:63:f6:ff:e2:f5:
         6d:c0:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:33 2025 by rpki-client