Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
File:                     Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa (raw, json)
Hash identifier:          n/4W2Z59XkuyrAU6G8O0mwLlbI61cGelNxgWlV5IktQ=
Subject key identifier:   67:2F:46:83:B6:C7:AF:E9:26:79:41:F3:EE:87:B8:3C:3D:BB:F0:E5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01EA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
Signing time:             Mon 20 Feb 2023 07:57:25 +0000
ROA not before:           Mon 20 Feb 2023 07:57:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.125/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=672F4683B6C7AFE9267941F3EE87B83C3DBBF0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:f9:bc:e6:c6:38:b5:39:03:3a:57:7c:d0:
                    5c:7e:91:c6:8c:96:8e:3e:ab:a0:1e:9a:31:91:b4:
                    58:1a:ac:f2:af:f5:2b:c4:88:f5:2f:b0:37:95:b8:
                    d6:d1:85:98:47:8a:a7:8a:84:00:0b:90:eb:d7:f4:
                    57:9e:27:a2:9c:55:66:d3:2e:20:63:a1:23:70:64:
                    35:a0:d8:21:c1:58:61:ad:20:ce:7e:15:2c:84:28:
                    f7:9a:12:3a:46:af:cd:dc:44:fd:6c:cb:f6:fa:b4:
                    63:12:91:47:6e:65:0f:87:26:03:8c:8e:44:fd:a5:
                    94:dd:c4:cf:99:6d:78:23:46:8a:8b:79:97:5f:f3:
                    cb:dc:6d:1b:88:61:c2:eb:bf:42:b9:1d:41:1a:2c:
                    7b:f3:38:5a:0c:97:79:b2:d2:98:71:c8:16:50:b9:
                    9c:86:bd:52:82:0c:41:24:f1:05:aa:00:aa:60:68:
                    3d:b5:f1:63:ce:ea:e6:a9:b1:a7:f4:1c:de:ef:f6:
                    b8:1a:5c:69:26:a3:61:f2:79:ce:33:c7:5a:69:12:
                    29:bb:a6:2d:3e:16:9a:65:df:8d:b5:8a:b7:14:bf:
                    9b:e7:8a:c1:b8:dd:af:20:36:e1:3e:cc:19:ab:9f:
                    cf:87:be:b3:cb:ac:32:bd:42:09:54:0d:97:ae:62:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:46:83:B6:C7:AF:E9:26:79:41:F3:EE:87:B8:3C:3D:BB:F0:E5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.125/32

    Signature Algorithm: sha256WithRSAEncryption
         36:55:d5:f3:75:28:e6:fa:99:0f:75:43:0d:b4:62:ca:1f:72:
         63:aa:ae:fd:a2:f8:3e:b0:a7:1f:b3:fc:69:12:ce:2d:72:62:
         66:6f:b0:20:aa:a7:cb:fb:8a:4b:ca:d3:b6:b0:f3:09:9b:bc:
         44:c5:aa:8a:35:4c:30:71:87:80:76:e0:80:f2:df:6b:83:85:
         4b:42:15:01:be:d6:54:79:75:95:44:84:71:e0:53:5b:54:97:
         42:8b:78:c2:8b:53:0c:1b:4e:91:53:90:10:fc:5b:92:09:90:
         18:e7:2a:f6:e6:8b:93:d8:d2:42:00:c4:ba:61:58:90:2e:0d:
         9a:14:8b:4d:74:ce:1a:72:53:1c:18:f9:ef:b5:45:08:f3:95:
         43:5b:78:3e:cf:ac:eb:17:c1:93:23:fc:94:15:00:c8:17:0b:
         8f:e5:05:84:14:27:c5:a4:05:38:56:d6:cb:ef:cf:99:8c:28:
         e0:b9:7b:b5:40:09:1e:5a:87:40:60:a2:3b:eb:59:83:b7:4f:
         2c:57:5e:1d:4f:5d:96:53:a6:8f:93:c2:20:45:ea:68:84:a9:
         7e:1d:62:93:ca:9f:cb:a3:78:54:4a:5c:28:96:3a:4e:04:f3:
         15:b1:b0:46:b5:0f:2b:56:59:99:04:2c:98:58:d6:9f:f4:b7:
         c3:e7:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:07 2025 by rpki-client