Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Neb1ORciTvfCCe5zm6FmavVXkJY.roa
File:                     Neb1ORciTvfCCe5zm6FmavVXkJY.roa (raw, json)
Hash identifier:          gCzUnb0X/36kb8Nf+Ekb3u+Jy5OntDqKtO0MS5kxIw4=
Subject key identifier:   35:E6:F5:39:17:22:4E:F7:C2:09:EE:73:9B:A1:66:6A:F5:57:90:96
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0199
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Neb1ORciTvfCCe5zm6FmavVXkJY.roa
Signing time:             Mon 20 Feb 2023 07:50:59 +0000
ROA not before:           Mon 20 Feb 2023 07:50:59 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.50/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:59 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=35E6F53917224EF7C209EE739BA1666AF5579096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:33:6d:3f:43:5b:7a:1d:9f:e4:ca:4b:64:
                    89:7b:a5:7a:0b:cf:34:73:37:14:b3:1f:af:8c:d4:
                    94:19:16:07:49:60:09:c3:85:87:49:50:d1:b0:59:
                    86:c9:33:63:62:ab:28:27:b3:40:20:dc:fd:89:f9:
                    74:1e:3b:c5:f6:e8:dc:76:55:3f:d7:a7:c3:d9:1e:
                    a0:71:dc:58:00:3c:6b:bc:93:e8:db:6e:b2:aa:bf:
                    a6:3b:54:42:4d:35:05:73:16:8b:a2:64:dc:e6:ea:
                    18:73:2a:d4:cb:18:f4:6c:7b:e4:24:0b:16:0b:2b:
                    a2:c7:5e:ef:c0:f8:93:18:9f:1b:56:35:d9:f8:d2:
                    ac:c1:83:9b:3f:17:2d:ea:43:bb:b8:82:58:99:f9:
                    2d:47:1a:02:ae:f6:cf:d6:54:98:e2:a1:72:11:59:
                    c3:8d:e0:39:f9:6c:c5:22:62:16:2d:24:22:da:4c:
                    92:b3:b8:da:69:ef:e4:eb:2e:82:46:a6:60:6f:70:
                    95:19:67:df:61:e0:cd:22:be:7e:d8:cc:dc:68:d1:
                    4d:99:ce:c0:0c:01:79:cc:4b:72:c6:cd:98:8b:25:
                    5a:86:56:e4:34:58:1e:76:f0:e1:69:82:50:18:b2:
                    94:c8:dd:b9:75:50:5d:ae:b8:d9:f6:dd:fe:03:8d:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:F5:39:17:22:4E:F7:C2:09:EE:73:9B:A1:66:6A:F5:57:90:96
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Neb1ORciTvfCCe5zm6FmavVXkJY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.50/32

    Signature Algorithm: sha256WithRSAEncryption
         08:db:36:53:2e:f7:8f:35:40:fa:e0:5a:32:69:88:97:fc:63:
         d3:84:eb:72:0a:af:b6:f9:98:dc:d0:d5:dd:90:62:fe:4c:2f:
         e3:5e:8d:15:29:c2:ab:4f:a3:73:a9:89:e8:91:c2:f6:e7:8a:
         f5:0e:cb:52:f7:a5:37:a3:77:96:ee:92:e1:ff:21:a3:2c:ec:
         cf:30:47:82:e4:1d:87:21:cc:81:9b:78:18:38:5f:e4:94:cf:
         17:20:28:08:b8:34:ad:3d:61:40:32:7c:75:5c:1d:21:c1:90:
         49:1a:81:3a:12:de:94:16:aa:44:98:7e:6f:85:31:20:b5:19:
         2c:69:14:20:5f:85:e0:49:81:bb:66:ab:35:49:aa:a1:38:6c:
         89:29:8d:fc:0a:dd:ac:a8:33:af:3e:97:3e:d0:bc:5b:83:33:
         a0:55:9d:8f:9a:45:47:12:ae:c6:ba:91:76:06:9d:df:d8:a6:
         c9:91:5d:59:d0:14:b4:24:84:68:16:97:af:20:10:2e:fb:bd:
         de:0c:14:a6:e9:2b:63:f0:c4:c1:bc:4c:ed:fc:64:2a:9a:0d:
         13:3f:03:07:16:f3:ac:c6:1e:b2:ff:3e:ea:ca:28:f4:6e:b3:
         63:07:06:a1:c3:91:76:c1:3e:6e:82:c0:36:62:e1:27:fa:c9:
         81:24:72:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:05 2025 by rpki-client