Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cYryI9lIwPSEuH8Cm9RcAz-2lLA.roa
File:                     cYryI9lIwPSEuH8Cm9RcAz-2lLA.roa (raw, json)
Hash identifier:          CQFefVPBE31FtQXEYlzEY2PudgUxwVVJLM0FZhU9838=
Subject key identifier:   71:8A:F2:23:D9:48:C0:F4:84:B8:7F:02:9B:D4:5C:03:3F:B6:94:B0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       40
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cYryI9lIwPSEuH8Cm9RcAz-2lLA.roa
Signing time:             Fri 10 Feb 2023 07:41:20 +0000
ROA not before:           Fri 10 Feb 2023 07:41:20 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.154/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:20 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=718AF223D948C0F484B87F029BD45C033FB694B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:1c:df:89:8d:ad:c2:a5:5c:80:bb:b5:08:
                    80:db:c4:f5:3b:8c:af:6c:52:a8:8b:f7:dc:e7:f8:
                    4f:62:1d:d5:d4:95:bf:3c:15:dc:ee:f2:05:8b:f3:
                    cd:e2:96:2a:67:09:5e:1e:65:42:dd:29:45:c7:de:
                    c1:0e:8d:18:79:ac:19:1b:97:a5:56:ed:8a:dd:5e:
                    0e:81:48:24:96:31:fe:e1:e5:43:97:62:2a:f4:f0:
                    1d:34:13:93:ea:dc:9d:72:eb:2f:4c:86:69:98:32:
                    3b:41:c0:a2:18:76:a0:56:48:3a:ad:8e:8e:53:1c:
                    57:45:45:d5:ff:b6:d4:cd:44:0a:86:d4:d6:1b:31:
                    33:c7:00:c7:06:1d:96:f2:c6:21:63:e3:2f:78:54:
                    d2:6a:2e:3f:e8:4d:99:97:94:73:1a:76:5d:30:2d:
                    59:6c:99:64:a8:86:78:9b:67:35:ff:d4:2d:db:ca:
                    64:b7:ee:87:f7:9d:ae:17:71:88:61:7e:17:47:42:
                    3c:46:de:4f:d1:29:59:f5:fe:99:c0:33:31:a6:e8:
                    e8:23:23:9c:1c:60:66:dd:da:cf:6d:ba:ef:9e:17:
                    4f:d6:a9:88:e8:1c:20:b1:0a:24:c3:7a:b1:ea:70:
                    f9:1e:56:09:e1:37:9d:91:8e:3e:77:67:73:09:dd:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8A:F2:23:D9:48:C0:F4:84:B8:7F:02:9B:D4:5C:03:3F:B6:94:B0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cYryI9lIwPSEuH8Cm9RcAz-2lLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.154/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:b9:60:49:29:9d:cf:69:f8:0a:e1:1d:0b:07:1e:47:28:
         e5:18:47:a3:42:f4:83:d7:e4:2c:42:86:4e:59:1d:49:a8:5a:
         c3:98:e2:1c:16:ee:0c:fb:cc:62:64:2b:9b:72:de:1c:19:49:
         08:ac:72:9e:f3:65:37:b7:8e:b5:57:dc:43:9f:d2:10:15:56:
         cc:70:a5:ad:aa:bf:17:6a:ff:c2:52:81:49:4c:77:e8:53:13:
         36:5f:2a:60:1e:5c:4f:db:f4:09:f5:f8:60:00:21:5d:bf:ca:
         15:cd:4d:29:60:81:98:5c:6c:9b:c6:4f:a2:98:f3:33:d1:4a:
         17:81:77:8e:b6:3c:0e:c0:e7:46:75:26:77:3d:05:b7:73:8d:
         2a:0c:14:8b:e3:9d:02:5d:d2:d6:99:92:ba:21:0c:aa:95:e3:
         e8:be:24:8f:27:89:53:cc:8f:24:c2:ab:0a:52:76:ac:d0:bf:
         b1:1c:d0:19:03:68:f4:d6:82:0a:eb:8a:8c:45:bf:ae:98:8c:
         13:28:49:b6:01:b1:c8:7a:42:86:20:58:a7:bc:cb:54:f8:cb:
         80:e1:a0:08:e1:c0:f1:fe:8a:d1:b9:ae:e0:81:e8:a9:c5:63:
         10:16:1f:83:f1:11:b3:f0:26:e9:0c:32:6e:18:e4:94:5a:07:
         90:41:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:24 2025 by rpki-client