Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LvEC_d8yCG7jBtFpkKrE7_VgMLQ.roa
File:                     LvEC_d8yCG7jBtFpkKrE7_VgMLQ.roa (raw, json)
Hash identifier:          utK+ONrxru6LajdQDNRfZtC7FLsHsDmziO+Ls8WYBoY=
Subject key identifier:   2E:F1:02:FD:DF:32:08:6E:E3:06:D1:69:90:AA:C4:EF:F5:60:30:B4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01BF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LvEC_d8yCG7jBtFpkKrE7_VgMLQ.roa
Signing time:             Mon 20 Feb 2023 07:53:20 +0000
ROA not before:           Mon 20 Feb 2023 07:53:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.95/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2EF102FDDF32086EE306D16990AAC4EFF56030B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:15:97:2b:6f:1a:a8:78:51:31:91:ae:78:
                    e5:b9:da:a7:92:66:ad:bf:f4:5b:73:c9:0d:5c:5f:
                    48:48:64:09:34:3c:fa:c9:28:a6:6b:84:ab:e4:9f:
                    de:5e:64:8f:25:e3:bd:f7:89:35:0d:c3:16:ac:e0:
                    b7:3d:54:b9:98:0b:e9:2b:58:61:8c:3b:5b:97:d4:
                    1b:f1:59:e0:67:32:49:db:f7:48:86:55:1d:1a:e2:
                    6e:82:c1:b5:3b:1a:8b:a4:5f:87:d4:4c:22:ed:d4:
                    f1:72:ba:83:0c:db:ce:99:9a:f5:d8:0f:da:9e:e6:
                    d4:89:d7:a2:bd:5a:fc:4c:a4:43:1a:2e:90:c9:03:
                    97:e8:ec:72:26:33:32:e7:0a:a1:b2:c1:c3:7b:1e:
                    67:a4:a6:26:cc:6e:36:18:05:b7:00:ec:e8:ec:c3:
                    b9:65:f5:44:75:fa:67:fe:08:79:01:2c:68:c5:e3:
                    e3:ea:98:35:d5:45:20:69:57:d2:42:39:82:b2:1c:
                    29:46:89:66:af:7a:4a:2d:09:c6:db:12:5c:a5:b8:
                    90:8d:c7:54:19:8f:5b:86:f3:0f:44:b2:41:a2:52:
                    67:16:f3:82:64:7c:33:b3:24:91:08:6f:9b:d1:a4:
                    d7:85:5c:ef:7b:98:17:af:2b:86:b2:bd:1b:95:fb:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:02:FD:DF:32:08:6E:E3:06:D1:69:90:AA:C4:EF:F5:60:30:B4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LvEC_d8yCG7jBtFpkKrE7_VgMLQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.95/32

    Signature Algorithm: sha256WithRSAEncryption
         65:55:0e:af:f1:2f:e3:4a:fd:32:67:0b:e3:3b:b6:39:a2:14:
         c7:e3:49:6a:60:fc:cf:a5:98:fa:95:f2:2d:58:19:aa:80:db:
         80:38:a1:15:17:23:3a:00:82:c5:9c:5c:19:8d:42:1d:bf:c5:
         07:ca:e0:0f:f5:42:bb:ce:e8:91:17:04:ad:a3:c0:86:63:36:
         95:cb:a5:9f:d5:87:e8:a3:33:d0:c8:22:01:92:99:ca:8a:ca:
         ee:20:14:3c:76:bc:b7:ca:2d:34:67:5f:48:5b:cf:de:8f:42:
         9b:a6:48:83:e3:c5:5c:9c:70:97:a8:e9:ed:30:7f:48:4f:db:
         b0:a0:f3:03:42:80:25:30:5d:d2:63:84:92:51:da:96:69:12:
         dd:ed:61:03:ab:e1:17:48:13:c3:ae:e1:e8:a8:39:26:61:75:
         79:10:7b:13:3d:b1:a1:47:54:62:55:5b:70:6f:bd:be:64:0f:
         ff:6e:a4:83:25:0c:f6:e8:ab:58:78:33:67:8c:ef:35:c5:36:
         31:94:8a:98:0a:46:e3:0e:d6:d2:60:03:3d:dd:4e:30:1b:05:
         88:a4:00:9a:59:3c:21:7f:ea:99:ca:54:d7:90:6d:87:9f:76:
         5e:4b:b4:3e:ba:b8:f5:46:8e:0d:fd:35:d0:30:7c:18:51:1a:
         4e:11:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:10 2025 by rpki-client