Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/T30zx3MC9-sE9ugu9uZsQsIuvas.roa
File:                     T30zx3MC9-sE9ugu9uZsQsIuvas.roa (raw, json)
Hash identifier:          tzKDDYHjxF03TOPdAsc4PGWrk/wIR+ssLTXzjg9ouTA=
Subject key identifier:   4F:7D:33:C7:73:02:F7:EB:04:F6:E8:2E:F6:E6:6C:42:C2:2E:BD:AB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0166
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/T30zx3MC9-sE9ugu9uZsQsIuvas.roa
Signing time:             Wed 15 Feb 2023 02:34:19 +0000
ROA not before:           Wed 15 Feb 2023 02:34:19 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.64/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:19 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4F7D33C77302F7EB04F6E82EF6E66C42C22EBDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:3c:e0:60:de:c8:f8:ed:fc:6f:a5:1b:0f:
                    d2:5c:58:02:11:f1:dc:a9:59:30:86:0a:6a:e0:4e:
                    a8:bb:1a:2d:c4:3f:5a:da:67:d6:99:d9:02:4f:c3:
                    9b:da:7f:43:09:fe:14:b3:2f:99:d5:0b:37:5f:a1:
                    5b:bd:83:08:35:67:6f:a8:22:dc:f9:c4:91:15:2a:
                    ec:49:f3:87:4a:f7:47:20:01:c7:ec:0f:27:7f:13:
                    f2:9b:04:d6:d5:c1:41:c7:fc:89:80:ca:37:8d:77:
                    f8:89:2a:03:0f:41:bd:cc:c2:3c:ea:5d:59:24:e7:
                    6d:e4:0c:2c:cb:00:7a:6a:c2:75:9f:37:86:68:22:
                    92:56:40:d7:90:22:80:b4:13:ea:57:57:9f:5f:0a:
                    44:95:44:23:37:ca:4d:ad:b3:51:e4:d9:f0:f3:15:
                    cf:f4:c4:21:ba:1b:5b:67:85:f1:03:7a:36:ee:79:
                    ff:76:e0:e7:ee:f1:b4:21:5d:e5:b0:cd:22:b4:62:
                    c6:ec:2b:15:b3:ff:53:7a:6e:9b:e6:ce:34:9d:98:
                    cd:a4:9e:5b:80:59:eb:30:d7:ad:44:4f:0f:00:d6:
                    0b:17:7b:00:4b:81:a5:58:df:6f:9b:ef:55:94:a9:
                    71:15:39:22:b6:00:ec:97:39:6b:5f:39:87:1a:42:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:33:C7:73:02:F7:EB:04:F6:E8:2E:F6:E6:6C:42:C2:2E:BD:AB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/T30zx3MC9-sE9ugu9uZsQsIuvas.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.64/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:f9:e4:ac:52:7c:20:2f:59:a1:77:d2:ee:15:72:07:49:
         90:49:b9:0e:ae:7c:37:76:98:f8:89:07:ec:d7:26:e9:25:dc:
         19:d3:8d:5a:dd:bf:86:9e:60:80:fb:c4:7f:4e:2c:85:29:c7:
         17:69:2a:ee:68:b7:70:b3:49:84:8e:61:dc:a3:a0:68:56:29:
         ac:11:67:88:d0:d6:f1:17:98:07:41:70:bf:cc:12:f7:c0:5b:
         28:79:06:35:49:1e:ef:96:f0:f5:7d:1b:fe:e4:bc:cc:cc:0a:
         73:4f:a3:39:4c:2f:97:63:cb:65:77:0c:04:ca:bc:5f:4f:3f:
         f1:e4:a8:86:ee:ae:2b:34:6c:f2:67:93:7f:19:68:a0:6a:7a:
         59:e1:db:27:09:2f:be:2c:c3:bf:34:1e:9e:5f:e9:8c:61:c1:
         f1:2b:36:a3:05:26:92:5d:e4:18:61:07:fe:2f:56:d0:d2:77:
         99:b1:44:51:bf:63:ce:96:3a:8b:07:d5:cd:a1:fc:ac:f0:48:
         bc:1b:53:dd:58:5b:fc:aa:7a:4d:e7:d4:5c:3a:25:04:bb:b0:
         0c:e5:89:e6:15:61:59:15:d2:5f:cf:75:61:87:ef:99:d9:3c:
         83:8a:2f:da:ea:40:7c:e8:e1:a4:02:6e:69:37:a6:8f:e8:d6:
         ec:01:69:33
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTUw
MjM0MTlaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGN0QzM0M3NzMwMkY3
RUIwNEY2RTgyRUY2RTY2QzQyQzIyRUJEQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlcjzgYN7I+O38b6UbD9JcWAIR8dypWTCGCmrgTqi7Gi3EP1ra
Z9aZ2QJPw5vaf0MJ/hSzL5nVCzdfoVu9gwg1Z2+oItz5xJEVKuxJ84dK90cgAcfs
Dyd/E/KbBNbVwUHH/ImAyjeNd/iJKgMPQb3MwjzqXVkk523kDCzLAHpqwnWfN4Zo
IpJWQNeQIoC0E+pXV59fCkSVRCM3yk2ts1Hk2fDzFc/0xCG6G1tnhfEDejbuef92
4Ofu8bQhXeWwzSK0YsbsKxWz/1N6bpvmzjSdmM2knluAWesw161ETw8A1gsXewBL
gaVY32+b71WUqXEVOSK2AOyXOWtfOYcaQug7AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUT30zx3MC9+sE9ugu9uZsQsIuvaswHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9UMzB6eDNNQzktc0U5dWd1OXVac1FzSXV2YXMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaQDANBgkqhkiG9w0BAQsFAAOCAQEAp+P55KxSfCAvWaF30u4V
cgdJkEm5Dq58N3aY+IkH7Ncm6SXcGdONWt2/hp5ggPvEf04shSnHF2kq7mi3cLNJ
hI5h3KOgaFYprBFniNDW8ReYB0Fwv8wS98BbKHkGNUke75bw9X0b/uS8zMwKc0+j
OUwvl2PLZXcMBMq8X08/8eSohu6uKzRs8meTfxlooGp6WeHbJwkvvizDvzQenl/p
jGHB8Ss2owUmkl3kGGEH/i9W0NJ3mbFEUb9jzpY6iwfVzaH8rPBIvBtT3Vhb/Kp6
TefUXDolBLuwDOWJ5hVhWRXSX891YYfvmdk8g4ov2upAfOjhpAJuaTemj+jW7AFp
Mw==
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:12 2025 by rpki-client