Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/N6Zso_sCYaY-eLvu3X1-_8ASsz4.roa
File:                     N6Zso_sCYaY-eLvu3X1-_8ASsz4.roa (raw, json)
Hash identifier:          jHkYquSuAtwWbERIiTfi5mFCchxsqo2dhgGXWbLxeFU=
Subject key identifier:   37:A6:6C:A3:FB:02:61:A6:3E:78:BB:EE:DD:7D:7E:FF:C0:12:B3:3E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       3D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/N6Zso_sCYaY-eLvu3X1-_8ASsz4.roa
Signing time:             Fri 10 Feb 2023 07:41:19 +0000
ROA not before:           Fri 10 Feb 2023 07:41:19 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.97/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:19 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=37A66CA3FB0261A63E78BBEEDD7D7EFFC012B33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:e3:33:d2:3d:96:cd:10:d9:66:44:8a:37:
                    57:c8:af:d8:c3:6d:d3:e8:77:61:0a:e4:a6:b6:ec:
                    f5:fe:fa:14:9d:a8:c3:39:ff:50:3e:97:21:dd:db:
                    c4:2f:91:c6:49:9f:0b:39:12:1a:c5:41:73:f9:8a:
                    bd:df:28:57:63:fd:3a:01:59:a6:fc:8d:71:a3:68:
                    7f:46:3f:25:ce:ed:50:45:df:fb:dd:8f:cd:5b:36:
                    a2:23:48:3b:75:fb:3c:2a:4d:b3:ec:f3:70:99:a2:
                    9d:08:4f:ea:fc:df:fd:30:08:0c:02:2b:3d:aa:e5:
                    e4:0b:8e:5c:b5:ec:ae:22:0f:21:86:0f:e9:90:df:
                    48:76:12:e8:6d:3a:35:dd:77:12:c7:a7:57:fe:ca:
                    02:f7:b3:b6:00:32:23:33:ad:6e:6e:bc:35:5b:85:
                    8c:38:89:59:c8:9d:53:1f:46:41:8b:b6:b3:5e:06:
                    79:0e:8e:9c:a2:0d:14:20:0b:80:03:6e:5e:73:96:
                    e5:e6:24:7b:a8:c1:7e:5b:26:d3:c2:ec:a6:b7:c4:
                    c3:2c:13:ae:fb:6e:5c:bf:ea:d8:38:95:d0:ec:46:
                    3e:0e:c7:61:f6:ea:66:59:82:8c:ca:20:8e:72:ae:
                    39:20:92:ae:54:f5:fc:b9:fd:6f:3e:3c:a6:fb:d3:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:6C:A3:FB:02:61:A6:3E:78:BB:EE:DD:7D:7E:FF:C0:12:B3:3E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/N6Zso_sCYaY-eLvu3X1-_8ASsz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.97/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:17:0e:db:1e:de:31:29:9d:bf:56:69:95:5c:cd:56:7a:
         26:be:8d:64:43:b2:d6:4c:9b:bd:38:72:67:a5:9e:a2:cc:30:
         39:f1:7a:bc:36:d4:cf:08:30:68:0f:22:d2:f9:cd:41:ae:90:
         e6:37:89:21:d0:91:e2:d5:73:89:48:db:0d:44:c1:b3:1e:ef:
         f7:df:08:8b:cc:88:3a:6c:df:71:ef:4a:60:0f:55:01:c7:ea:
         28:0d:c3:eb:85:c3:c3:b7:f4:42:b2:a3:20:45:d7:1b:e1:0e:
         a2:00:16:f7:ae:8d:b8:ed:54:7c:4f:f0:b9:fd:ef:8e:fd:b7:
         cf:b4:b2:9e:0c:76:b7:f6:16:d3:30:d2:5f:17:28:d2:ee:f6:
         a3:e0:1b:55:f3:37:11:b0:ae:72:af:8e:85:96:b6:f1:8d:ab:
         60:3d:d9:56:d2:fa:be:3f:28:13:f6:03:81:e4:89:4e:dd:09:
         fe:4e:74:be:a8:a4:2e:49:d8:6a:60:27:c9:70:a8:8c:b9:73:
         70:6e:52:e9:c0:81:46:06:e9:73:ba:eb:34:06:2a:aa:78:59:
         25:5b:12:f5:dc:78:4f:fd:d6:aa:7e:18:f4:b8:a0:9e:7b:a6:
         fc:52:dc:94:75:bb:b6:93:f6:6a:df:57:db:e6:63:f4:8a:17:
         98:3a:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:14 2025 by rpki-client