Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cMvFNyCfc0_1InsBghECDSyMKN0.roa
File:                     cMvFNyCfc0_1InsBghECDSyMKN0.roa (raw, json)
Hash identifier:          LiNu6XlHrGFJkM+oxiVd2zs/uVtmVMhhvm06ZYJ3rHA=
Subject key identifier:   70:CB:C5:37:20:9F:73:4F:F5:22:7B:01:82:11:02:0D:2C:8C:28:DD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02BA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cMvFNyCfc0_1InsBghECDSyMKN0.roa
Signing time:             Mon 20 Feb 2023 08:07:21 +0000
ROA not before:           Mon 20 Feb 2023 08:07:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.228/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=70CBC537209F734FF5227B018211020D2C8C28DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:57:68:7d:4d:c4:61:7f:a8:84:eb:02:9c:
                    aa:c7:ce:a4:99:2a:8d:b0:23:30:27:da:f4:53:56:
                    9a:09:3b:98:ae:e5:1c:ef:64:b7:6f:65:50:37:75:
                    65:c7:68:41:8b:0b:77:46:a2:9e:28:23:84:da:8f:
                    2a:07:2d:82:db:0c:cd:1e:26:ad:3a:ba:5a:7e:de:
                    1b:41:d9:bc:20:0d:58:a5:a5:05:04:38:2b:ec:60:
                    78:6d:b1:38:1c:8b:fd:fb:79:3d:01:4b:37:7a:7f:
                    5d:c6:3c:67:93:fb:81:4e:57:c7:5b:88:9b:e5:91:
                    24:a5:9a:8e:3a:4d:c0:d0:16:f4:46:48:25:77:0c:
                    03:0c:6a:2b:2b:7e:a0:23:09:f6:9f:1f:f6:6d:0f:
                    7d:70:93:1c:9a:88:7c:23:f4:ac:0e:67:38:d9:d4:
                    81:ed:c2:37:a9:49:e0:fa:88:c6:6f:f5:01:d1:9e:
                    29:a8:64:cf:79:87:45:ef:09:c8:e8:04:e7:61:16:
                    b0:c5:cb:23:d1:69:ac:eb:33:ff:d3:e4:0a:61:6f:
                    76:28:bd:1c:06:77:b7:30:99:ad:ae:dd:04:9e:76:
                    6a:fe:06:17:6a:66:a7:7d:c7:bd:e3:8f:56:1c:a5:
                    77:8c:e5:60:3c:f9:7e:f8:46:1f:bd:00:ab:79:20:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:C5:37:20:9F:73:4F:F5:22:7B:01:82:11:02:0D:2C:8C:28:DD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cMvFNyCfc0_1InsBghECDSyMKN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.228/32

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:4b:c4:79:25:cc:9e:b2:57:f6:dc:41:3d:e1:72:c5:89:
         71:97:0e:c4:15:f4:c6:98:ae:9c:7a:48:49:d1:fb:60:bc:ff:
         cc:53:89:00:0f:e2:0d:8d:76:f2:cb:2f:64:6f:cd:e0:c9:0a:
         a5:59:fa:09:cf:ec:12:52:32:a6:97:5b:69:b9:a6:4a:5f:7b:
         ea:33:f1:d9:85:ee:7f:06:8d:69:ce:b4:42:41:27:8b:f1:28:
         e2:ff:7c:1c:4e:0d:34:45:37:1c:d1:54:9d:13:dd:e2:49:51:
         61:ec:d1:c8:23:a8:b9:3f:d7:81:2d:4e:be:6b:a2:66:62:a8:
         59:54:df:f9:d9:2f:c0:c7:be:ff:7c:4e:00:9e:0e:be:e9:18:
         8d:2c:15:c1:4a:0a:93:64:71:49:d3:44:9d:29:2b:2c:26:8a:
         cb:f7:7f:c4:ca:cf:83:9f:ba:72:55:07:bf:f8:d8:a7:cc:06:
         57:53:56:36:e0:e5:a7:47:2c:90:82:b0:39:1e:79:5b:8f:8d:
         09:f2:02:be:cb:e4:ea:d2:a2:5d:77:0f:fb:33:48:33:58:98:
         5d:ba:29:dd:eb:01:3c:99:68:d5:81:e8:6e:e4:b1:5e:cc:c5:
         78:05:74:96:d4:56:cb:2c:f3:fc:7c:63:f5:51:8d:5e:5b:cf:
         d8:c0:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:16 2025 by rpki-client