Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/M-Pg2FexlceRPC2ccYWEaeJtJ2c.roa
File:                     M-Pg2FexlceRPC2ccYWEaeJtJ2c.roa (raw, json)
Hash identifier:          gcg9h9W5sRbsIOGJyGTHRawyBXs/7sDdPnPdeDHDVJk=
Subject key identifier:   33:E3:E0:D8:57:B1:95:C7:91:3C:2D:9C:71:85:84:69:E2:6D:27:67
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F2
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/M-Pg2FexlceRPC2ccYWEaeJtJ2c.roa
Signing time:             Mon 20 Feb 2023 07:57:27 +0000
ROA not before:           Mon 20 Feb 2023 07:57:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.143/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=33E3E0D857B195C7913C2D9C71858469E26D2767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:c3:f0:2a:be:d2:93:9e:bf:4d:1c:5c:6c:
                    3c:82:45:bb:b7:75:e8:c4:de:d8:c1:52:10:54:be:
                    29:a7:01:6d:49:d7:e4:2b:fb:fc:ef:a9:8c:4a:ef:
                    49:c2:be:81:08:18:c1:16:6b:3f:11:f7:5e:39:1d:
                    48:2d:1d:26:a0:13:43:01:5a:15:98:01:32:09:b4:
                    97:a2:9d:fe:5e:a9:d2:22:c6:7b:93:16:49:85:42:
                    7d:9d:f6:11:c1:60:9b:c0:f2:94:ea:2d:77:d0:12:
                    30:b0:76:29:2a:cc:dc:11:4e:1a:f0:eb:58:df:78:
                    a6:62:c6:6f:db:72:35:59:9e:39:ff:71:4e:7e:44:
                    6b:32:6d:bc:45:aa:da:d2:5b:b3:fb:e9:9c:3b:8a:
                    fb:a9:6f:76:9d:b1:2a:2c:bb:60:cb:4a:2a:f8:53:
                    e0:23:aa:37:b7:35:bf:27:63:a4:5b:85:06:d5:95:
                    b0:31:bf:69:4d:e7:95:ad:85:31:e6:5f:b5:e9:85:
                    05:84:b9:1a:7d:d5:db:c8:c4:4d:65:12:d3:09:75:
                    a0:4c:55:dd:48:48:26:88:c1:ab:01:e7:ee:c3:05:
                    98:65:e7:2d:40:36:15:2e:44:e5:48:be:50:52:65:
                    8e:c2:bc:43:0b:08:b6:44:c6:e6:c7:08:eb:68:f8:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:E0:D8:57:B1:95:C7:91:3C:2D:9C:71:85:84:69:E2:6D:27:67
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/M-Pg2FexlceRPC2ccYWEaeJtJ2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.143/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:3f:19:76:6b:c0:eb:b1:d3:d4:31:7a:f1:ff:1f:40:0d:
         b9:a8:94:d3:0c:27:9f:59:bc:20:7f:92:18:06:00:d4:5d:77:
         c9:e0:98:16:ff:24:eb:76:fc:f3:f8:ab:d5:a6:54:0f:bf:f8:
         b4:bf:a7:da:ea:07:e5:cc:e1:0b:77:f3:68:99:ff:9d:bf:fe:
         bc:19:a5:c3:d6:05:2a:28:ad:1f:19:4b:86:92:b8:aa:ec:d0:
         44:0b:e6:d3:aa:4e:5c:bb:44:e4:05:c4:9e:29:38:9c:9e:b8:
         cb:6b:7a:2c:df:8b:43:d7:88:d5:9d:ad:7d:3f:65:68:36:45:
         21:5f:87:d2:62:9e:ac:58:cc:9f:86:fb:95:8d:ab:c4:f5:e1:
         ef:56:9c:40:83:93:ff:29:5c:65:73:bd:76:d9:86:9a:41:77:
         cc:22:25:22:9f:10:47:c1:df:5f:f1:1c:e9:6e:cc:38:1a:cc:
         4c:d2:54:c9:77:7f:47:9a:a2:e5:5a:55:4c:13:96:0f:97:88:
         b9:27:c7:dc:7b:a9:f0:8f:05:06:d4:e7:b1:45:92:30:1f:81:
         2b:a3:85:b2:2b:5e:76:18:e2:fc:0f:ea:b5:f1:7c:26:90:c8:
         82:75:fe:05:0d:c1:e6:a9:80:54:d4:8c:46:bb:75:68:98:c9:
         a7:b1:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:49 2025 by rpki-client