Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fx5L9XHWeVszxq9G-uhdBZyMGk4.roa
File:                     fx5L9XHWeVszxq9G-uhdBZyMGk4.roa (raw, json)
Hash identifier:          z3oSvJCP8WeQ9AX0/bxKZFZCzULctHpiXH/RHBmupCA=
Subject key identifier:   7F:1E:4B:F5:71:D6:79:5B:33:C6:AF:46:FA:E8:5D:05:9C:8C:1A:4E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       27
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fx5L9XHWeVszxq9G-uhdBZyMGk4.roa
Signing time:             Fri 10 Feb 2023 07:39:06 +0000
ROA not before:           Fri 10 Feb 2023 07:39:06 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.115/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:06 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7F1E4BF571D6795B33C6AF46FAE85D059C8C1A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:a6:96:b4:c3:2b:c4:be:3d:72:a5:a9:93:
                    40:41:3c:16:35:54:4f:02:fb:f2:8a:39:67:c3:bd:
                    7b:59:4b:17:e4:f0:11:fe:dd:54:b2:b3:9c:01:55:
                    2e:19:ff:ad:d5:13:39:19:e2:28:65:12:e5:43:db:
                    93:a9:5e:9e:b7:aa:d9:ab:8f:94:da:ea:73:21:42:
                    15:63:64:a8:b3:a5:9c:03:36:10:49:d6:80:45:d4:
                    87:43:81:d1:84:f0:ad:c9:c4:11:ed:2a:75:5f:ca:
                    3c:18:dd:4e:cf:b6:1c:da:17:2b:d7:de:6e:01:4c:
                    27:20:91:95:e9:e9:51:39:4c:95:94:63:3c:7b:22:
                    0b:f2:da:0f:ec:ac:55:9e:2e:fd:5d:7f:7d:81:05:
                    21:c1:b9:dc:8c:d2:99:39:e9:55:96:c0:d0:ba:b5:
                    e0:1c:b8:30:cd:5d:fa:af:51:15:49:df:73:e3:eb:
                    9f:6c:79:11:4e:8a:0f:81:8d:40:c7:00:d3:af:1c:
                    1e:0c:d4:aa:0c:2e:05:6b:a9:4b:0c:48:9c:e1:23:
                    a0:82:0a:f7:3f:16:75:1d:0b:25:ba:89:b8:99:26:
                    76:b2:fe:fa:65:e5:fd:47:e0:aa:ef:a3:f0:41:54:
                    2a:85:10:36:04:af:85:61:fa:5c:51:2a:b3:bc:6f:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:4B:F5:71:D6:79:5B:33:C6:AF:46:FA:E8:5D:05:9C:8C:1A:4E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fx5L9XHWeVszxq9G-uhdBZyMGk4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.115/32

    Signature Algorithm: sha256WithRSAEncryption
         70:02:d9:27:6d:9d:f9:92:41:35:2c:1b:28:03:9a:51:d8:4d:
         06:55:cc:83:ff:74:fc:37:2d:12:5a:8e:89:50:cb:62:1f:96:
         9f:bb:ef:35:a9:14:07:6e:b5:ac:35:13:93:01:a6:4f:03:80:
         48:b5:4f:af:ca:1e:95:23:ab:49:f9:a3:01:6b:5c:29:74:97:
         a0:23:2c:24:b9:a0:ea:cf:f3:51:08:7d:43:2e:15:29:00:f2:
         a9:22:c6:32:01:a3:12:3e:e8:15:72:b8:1c:f1:4c:ec:f7:0d:
         96:c0:08:63:de:0e:9a:7a:78:a7:7f:ac:61:25:e0:85:24:b7:
         9f:22:f1:29:7f:94:06:ac:78:3b:71:3e:df:1d:85:2d:86:24:
         21:f3:a0:7c:99:a8:c5:03:69:e2:68:b9:49:20:0b:cb:80:6c:
         cb:f8:c6:48:5a:a0:f8:a0:f5:29:f9:95:e0:08:66:b8:c3:c7:
         b6:09:a8:6b:8c:33:1d:98:58:ba:ef:ab:47:44:03:c7:02:54:
         53:44:4f:df:3d:f9:31:65:dc:31:6a:10:ea:e2:4e:68:42:af:
         64:dd:8a:14:74:ae:53:ed:26:8c:99:51:5e:6a:63:c5:01:4c:
         22:d6:56:ac:14:74:c9:8e:7a:c6:9f:08:d9:ef:80:4c:ac:16:
         bc:4e:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:46 2025 by rpki-client