Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YyAq09oYB_o4W1WRDJpdNY_ooqw.roa
File:                     YyAq09oYB_o4W1WRDJpdNY_ooqw.roa (raw, json)
Hash identifier:          W9G+yBidjbh3nDezVarspbt8J0ADrbwcvhQ+cNKtwhw=
Subject key identifier:   63:20:2A:D3:DA:18:07:FA:38:5B:55:91:0C:9A:5D:35:8F:E8:A2:AC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0379
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YyAq09oYB_o4W1WRDJpdNY_ooqw.roa
Signing time:             Fri 07 Apr 2023 02:39:16 +0000
ROA not before:           Fri 07 Apr 2023 02:39:16 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.88.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Apr  7 02:39:16 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=63202AD3DA1807FA385B55910C9A5D358FE8A2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:6a:16:78:6d:48:c7:14:32:f5:c7:25:4b:
                    0f:01:e9:c4:e4:9e:19:1b:43:9b:d2:81:f1:c2:b7:
                    4a:e3:ef:ed:ab:5d:60:59:10:84:8e:9a:7a:38:f6:
                    04:fb:a3:c2:b8:a6:1a:cc:5a:54:16:93:0d:1c:82:
                    dc:ff:f8:06:10:52:2e:b6:55:2f:c6:77:fd:93:f8:
                    02:ba:ee:fb:7f:72:0f:fb:58:1c:db:94:95:9d:89:
                    fc:c9:4f:5f:23:50:f1:de:e5:7d:87:6d:f0:19:e6:
                    23:64:32:d1:65:af:bf:53:02:18:e7:25:9f:58:9b:
                    b5:a6:aa:1a:60:94:9d:34:02:5a:0e:e2:23:30:3a:
                    f3:8a:89:fd:d9:d0:0b:45:ed:27:2e:61:2b:f6:54:
                    35:4d:ed:92:91:2b:b5:c9:6d:5a:45:75:66:f2:88:
                    d7:65:6e:ca:34:a4:b8:44:b7:a7:41:b4:1f:48:0e:
                    d9:ab:d4:32:d3:80:f5:40:42:2b:80:c6:74:db:47:
                    43:fe:2e:4d:19:ac:05:db:82:1c:97:a2:36:7b:49:
                    6a:63:6c:35:92:37:b7:66:2c:09:36:83:7c:97:cb:
                    58:da:08:d7:ef:d3:42:92:e5:47:98:91:f8:68:d6:
                    29:aa:b9:3e:d7:9b:ef:1a:c1:d8:d6:81:22:60:29:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:2A:D3:DA:18:07:FA:38:5B:55:91:0C:9A:5D:35:8F:E8:A2:AC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YyAq09oYB_o4W1WRDJpdNY_ooqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:62:81:50:99:78:b8:53:77:32:38:42:e7:67:72:4c:37:91:
         af:33:63:45:38:ea:70:1e:6d:56:d3:1a:5d:ef:32:3a:11:88:
         c5:75:f0:d2:73:1a:16:6d:45:9b:66:a0:c1:9b:52:17:66:7c:
         bc:a1:80:e6:75:22:82:76:57:89:15:73:f4:74:2a:47:27:cb:
         03:07:47:08:f1:a1:0b:3f:cd:76:7b:03:21:68:b1:63:67:2d:
         6b:85:c3:16:54:e3:66:4c:03:0e:b3:46:1b:a8:a6:4a:eb:d6:
         cf:09:a0:c0:4f:c1:ec:e3:c1:73:7a:dd:60:4d:3f:08:d3:0b:
         63:3d:1d:73:07:02:75:f1:a2:12:08:a2:67:a6:0b:14:05:5b:
         bf:dc:61:20:8f:04:dd:88:f6:ac:14:81:d5:98:d9:46:c5:3f:
         49:d9:d5:e4:4b:6c:6b:ab:cb:39:ce:5a:36:e1:ef:f0:d2:ef:
         0e:5f:12:22:21:9f:94:20:c4:54:c6:c5:b1:59:86:15:ac:20:
         3f:7c:ae:a9:07:3c:b3:15:bb:cf:10:32:c8:8e:3b:f6:d3:e2:
         52:01:e6:d6:d8:98:37:b0:17:96:2a:70:3d:97:82:7c:b3:81:
         c3:f1:16:ef:e0:9a:40:00:e9:a9:0e:a2:03:82:52:3c:3b:d6:
         5a:5d:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:25 2025 by rpki-client