Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NfEMG8j3aXF6GiVnTCTMzMovQK0.roa
File:                     NfEMG8j3aXF6GiVnTCTMzMovQK0.roa (raw, json)
Hash identifier:          Zlul8OLA15ryIftWm86M16R8s6+Y+Me/offRBF1QpAw=
Subject key identifier:   35:F1:0C:1B:C8:F7:69:71:7A:1A:25:67:4C:24:CC:CC:CA:2F:40:AD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02CA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NfEMG8j3aXF6GiVnTCTMzMovQK0.roa
Signing time:             Mon 20 Feb 2023 08:07:27 +0000
ROA not before:           Mon 20 Feb 2023 08:07:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.214/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=35F10C1BC8F769717A1A25674C24CCCCCA2F40AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:6e:96:d4:47:48:c9:3e:31:72:e1:0c:c6:
                    20:70:e2:c0:d6:53:c3:d3:e0:62:dd:f2:48:46:0d:
                    78:48:08:ae:46:03:d0:07:5b:18:b4:c7:0f:50:83:
                    a8:02:64:df:bb:b4:12:91:2d:66:3b:06:c0:c6:74:
                    92:46:b3:40:fe:be:50:3d:de:50:ac:13:be:47:ab:
                    62:75:39:fa:38:c7:be:0d:ec:6a:46:14:98:f6:fa:
                    6e:d2:02:4c:e4:40:38:b9:53:c7:d3:79:a6:4e:e7:
                    e3:77:f7:84:00:97:37:4f:76:28:d7:3c:36:ee:b4:
                    b8:40:8f:80:33:52:38:41:93:ad:45:98:1a:13:ca:
                    d0:df:13:3c:b6:e1:05:28:34:5a:42:51:12:28:e6:
                    b8:ef:63:dc:57:48:20:41:e9:c2:0b:79:eb:93:da:
                    4b:40:44:6a:4a:17:21:09:b7:2e:8b:91:7c:67:8e:
                    b6:3a:b6:9e:5f:68:7b:a5:fc:75:af:2e:ea:41:73:
                    6f:72:91:60:83:bb:00:99:42:aa:11:ac:4e:3a:fd:
                    f8:62:e9:92:f7:f6:ec:8b:90:08:bf:9d:9d:de:78:
                    22:0c:19:12:b2:e3:bd:4d:d6:9b:a0:c2:1d:a2:00:
                    66:bd:ff:bb:2e:4c:3e:38:9e:a1:aa:2a:ac:d7:8f:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:0C:1B:C8:F7:69:71:7A:1A:25:67:4C:24:CC:CC:CA:2F:40:AD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NfEMG8j3aXF6GiVnTCTMzMovQK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.214/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:95:31:41:5a:8a:d2:5a:48:af:0b:46:32:1e:b8:d7:68:
         7f:eb:90:e6:e1:93:62:58:cf:8a:7d:27:07:25:e2:b1:f1:49:
         c3:1f:53:17:fa:b6:bf:40:9d:68:85:f3:c2:b6:40:c3:40:ff:
         25:e3:93:46:3e:c9:86:bc:ee:56:f2:71:b7:9e:f4:de:1a:ff:
         80:d2:89:9a:5f:97:48:49:d9:2f:fa:0a:ac:7b:0c:e5:95:d9:
         c2:3f:72:38:0f:0f:74:a0:38:7f:b7:c3:f6:6b:0b:8d:aa:73:
         29:47:ba:e9:01:be:71:7a:cc:fd:17:4d:ab:20:50:7e:f7:f4:
         22:8b:a2:2d:6e:6f:e7:0c:ba:9e:a3:bd:c8:15:8c:71:e6:16:
         65:e8:6d:78:06:02:5f:13:26:93:13:f3:32:d7:91:ad:ee:cf:
         8a:80:ed:ba:3a:04:37:28:fd:29:51:0b:20:99:0a:49:54:dc:
         f6:43:ea:47:d1:97:95:48:37:f5:ec:aa:35:b5:2b:ab:32:b6:
         c8:7c:35:8a:38:db:ad:63:4c:a4:8b:e8:87:e8:51:6c:d7:d7:
         6b:b5:ac:b5:91:86:e9:8e:69:4a:e5:a9:ce:34:e1:61:bc:c4:
         61:30:6c:66:38:aa:29:ee:13:cf:b3:f1:1c:1e:d3:ab:84:19:
         bf:77:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:26 2025 by rpki-client