Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
File:                     KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa (raw, json)
Hash identifier:          Ann6oePLKEu6+xd4/JK5jhMtOqz6CFs1QZiRHxBcozE=
Subject key identifier:   2A:F3:25:0F:75:35:91:A1:63:61:BB:72:8D:77:62:31:91:61:2B:43
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       2E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
Signing time:             Fri 10 Feb 2023 07:39:08 +0000
ROA not before:           Fri 10 Feb 2023 07:39:08 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.5/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:08 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2AF3250F753591A16361BB728D77623191612B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:5d:bf:3c:a7:47:f2:f9:2c:d3:aa:7b:5a:
                    bf:47:45:eb:98:d9:5b:aa:a4:3e:02:7f:5c:5d:c7:
                    16:aa:78:9c:22:3a:c2:3b:f2:30:e5:90:59:47:13:
                    2e:24:c6:cb:89:cd:48:74:34:03:91:45:d7:b0:71:
                    30:1c:6c:79:4b:1e:c4:62:63:fc:ed:80:22:50:78:
                    a0:bf:61:e7:a8:4b:5e:35:87:b8:41:78:77:7d:cb:
                    ef:59:08:d4:8f:c2:d4:02:f0:81:d2:77:0e:b5:b1:
                    9a:f8:95:92:5f:fa:85:a7:30:09:a5:35:57:f0:ff:
                    9e:59:72:e6:0a:de:b9:54:3b:09:87:be:ab:82:2d:
                    9e:08:af:86:05:95:e8:3a:6d:2d:c8:99:db:a9:1d:
                    8a:c9:d9:c4:67:78:03:1c:bd:99:24:69:e0:ae:ea:
                    24:88:47:ae:25:d9:0a:fe:89:00:9b:7d:e5:83:cc:
                    3f:03:2c:27:f0:46:1b:ba:75:3e:e3:e7:1b:47:c3:
                    cd:8f:48:db:9b:d0:10:6f:97:34:08:fc:55:e0:22:
                    5a:50:dd:c6:f8:ab:2e:ef:e0:1f:20:72:ce:d0:47:
                    8a:ad:22:cd:88:7b:9d:34:b3:0e:cf:55:15:90:5f:
                    aa:c1:e9:88:a8:3b:a7:b9:33:f5:c7:28:38:55:fe:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:25:0F:75:35:91:A1:63:61:BB:72:8D:77:62:31:91:61:2B:43
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.5/32

    Signature Algorithm: sha256WithRSAEncryption
         03:06:19:31:d8:60:2b:20:99:0d:82:65:dc:77:c9:ec:4f:e2:
         da:1e:b8:e2:29:5e:17:0c:ba:c2:10:0c:f3:dc:25:27:c7:07:
         26:40:98:56:99:60:48:04:3f:bc:82:ed:b1:ba:b8:b7:e4:88:
         6c:a0:27:87:47:02:37:ce:7c:7e:bd:17:8f:17:99:6b:4a:54:
         c2:2d:fc:12:5a:1c:1d:e2:2f:07:18:17:cf:7b:18:1f:5f:82:
         3d:a6:0c:5f:a6:32:8d:de:52:f4:5a:c0:3e:85:17:8d:35:53:
         60:20:1a:ba:b6:66:45:da:b4:de:af:94:ce:c6:56:d4:0c:33:
         73:af:a7:d5:f0:a4:25:77:9b:92:0e:08:f4:a4:5b:2d:b8:20:
         d7:05:d3:e3:c1:37:f7:a0:6b:a3:32:e7:02:88:64:7c:1e:16:
         97:ff:55:ae:b5:57:76:bd:f6:5b:f0:98:9a:eb:49:8a:df:96:
         21:28:ec:db:c6:0b:15:85:8d:e7:4d:77:81:ff:6c:5a:9c:83:
         1e:ca:68:9e:af:52:bc:52:43:59:5c:28:e1:2b:fa:23:7e:2a:
         98:ae:ec:c7:1f:23:c6:2e:85:a9:db:5f:14:b7:7a:be:cf:97:
         e0:52:e1:e8:87:3d:fb:36:63:c4:8c:74:a2:2a:1d:65:af:8b:
         3f:77:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:07 2025 by rpki-client