Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PNCIlxtS3AbrmYIvwAfY-JmKv1Y.roa
File:                     PNCIlxtS3AbrmYIvwAfY-JmKv1Y.roa (raw, json)
Hash identifier:          ymRG8n9XNhec6k37iic5++3/LGGeAuxqj2EaJ51ZvcM=
Subject key identifier:   3C:D0:88:97:1B:52:DC:06:EB:99:82:2F:C0:07:D8:F8:99:8A:BF:56
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0190
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PNCIlxtS3AbrmYIvwAfY-JmKv1Y.roa
Signing time:             Mon 20 Feb 2023 07:50:56 +0000
ROA not before:           Mon 20 Feb 2023 07:50:56 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.79/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:56 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3CD088971B52DC06EB99822FC007D8F8998ABF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:9b:ef:24:07:e7:7e:78:57:c4:be:75:0c:
                    67:e6:1a:49:d4:9f:03:81:2f:54:ea:41:b3:ef:44:
                    b3:19:0d:c5:fa:50:f5:e2:bd:1b:62:ea:36:22:dc:
                    7b:18:a5:87:1d:ce:11:2b:d9:39:76:26:a1:84:64:
                    e8:81:57:82:bd:6f:c8:ae:6f:d4:1f:e7:6c:de:2f:
                    0f:f3:03:e2:28:cd:ef:62:b0:0b:15:c0:16:d8:ad:
                    dc:69:01:c1:e4:62:8e:e8:bd:ea:43:f4:a9:0b:26:
                    b3:7d:c8:69:4f:d8:b9:c7:07:7c:e0:01:a7:b9:d9:
                    18:d0:ce:da:c0:1b:bc:1a:75:0e:68:fc:93:ce:3a:
                    06:50:ca:74:0a:b8:df:49:51:4f:1c:d3:16:44:8e:
                    8f:f1:46:1e:54:bb:eb:0b:b0:c1:a5:ad:88:f3:1a:
                    c5:22:82:47:6c:d3:e0:e7:6c:7b:48:60:b8:6b:59:
                    3c:41:7d:bf:11:a0:20:40:f1:bc:ea:af:07:0c:f4:
                    57:c6:5a:d3:ef:db:62:c7:6a:bf:5e:39:ec:c3:77:
                    b1:9b:17:04:fe:4f:c8:3f:82:9e:c3:7e:c7:6c:f2:
                    ff:b6:48:7b:ea:15:69:02:e6:9c:5d:86:6e:27:76:
                    ad:31:4c:88:3f:f1:fa:16:9b:3e:1d:23:d6:9a:16:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D0:88:97:1B:52:DC:06:EB:99:82:2F:C0:07:D8:F8:99:8A:BF:56
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PNCIlxtS3AbrmYIvwAfY-JmKv1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.79/32

    Signature Algorithm: sha256WithRSAEncryption
         29:00:1f:24:ea:43:19:29:70:37:17:e4:1f:f6:f5:71:8e:d0:
         50:34:73:8f:6c:62:d5:a5:05:2a:e0:97:af:f9:97:76:85:6a:
         4c:92:d3:93:8e:2f:13:c5:b5:d7:7e:06:ef:34:bd:43:43:c6:
         e7:c9:f1:de:c3:8e:5a:d6:79:b5:5a:e8:04:b0:bf:09:bc:5f:
         44:91:3b:60:0f:15:ad:38:77:52:a8:d4:f2:35:7b:b2:93:f9:
         17:8e:dd:2c:09:ac:85:55:43:79:7f:3d:7c:92:7a:dc:f3:e6:
         16:f2:67:6f:da:0e:c9:c7:8c:63:0d:18:52:6b:e0:2b:99:37:
         60:74:b5:c4:29:92:6c:19:f6:5e:99:d4:6e:93:9c:9c:7b:9a:
         58:a3:83:66:2d:04:7a:ce:ca:49:bd:e6:c3:a0:94:9d:bf:f5:
         83:f6:01:c7:94:49:ee:91:ab:18:fd:ca:35:dc:34:42:a3:d2:
         6e:0d:5d:41:5c:8b:9b:ef:bb:9c:e8:de:2b:6f:6c:eb:a6:22:
         7b:7e:22:fc:a4:ec:e5:8a:c4:92:4c:0d:5e:ed:ec:36:0c:4d:
         97:8f:c5:9b:25:04:db:2b:6f:2f:5e:2b:66:1f:f3:a8:0c:c5:
         25:91:db:ff:f3:09:da:1f:2d:62:53:bd:94:84:0f:22:5f:3d:
         ed:86:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:20 2025 by rpki-client