Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gQCOwavOstqU26c5KLTE5LCSKF4.roa
File:                     gQCOwavOstqU26c5KLTE5LCSKF4.roa (raw, json)
Hash identifier:          BlIJRNwlj1tMKVyEgHsuk1W5SAslOjL05NDoGJLfOg8=
Subject key identifier:   81:00:8E:C1:AB:CE:B2:DA:94:DB:A7:39:28:B4:C4:E4:B0:92:28:5E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F9
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gQCOwavOstqU26c5KLTE5LCSKF4.roa
Signing time:             Mon 20 Feb 2023 07:57:30 +0000
ROA not before:           Mon 20 Feb 2023 07:57:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.252/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=81008EC1ABCEB2DA94DBA73928B4C4E4B092285E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:13:9d:60:e6:41:6c:01:0e:e8:0f:30:23:
                    3c:f2:d0:01:fd:4d:77:d5:48:00:d9:c5:40:34:bf:
                    ff:85:b6:81:69:ad:1e:9a:45:1b:5d:b8:a1:41:56:
                    28:5a:40:76:59:0a:04:45:de:a0:13:cc:d4:3a:97:
                    38:b0:83:bb:3a:91:83:11:ae:28:e3:f8:24:98:dd:
                    60:e3:6e:f2:38:e7:58:26:d4:14:d7:2f:2e:7d:fe:
                    f4:3e:df:bd:f4:de:26:6e:18:9b:48:cd:40:40:67:
                    85:de:71:58:86:55:7a:9f:e0:6e:65:07:50:9f:8b:
                    2d:a0:be:54:0b:62:49:b7:30:d5:31:7b:e6:39:cc:
                    3b:b4:5a:7e:14:73:1e:22:39:45:3f:48:6a:dc:9e:
                    89:6c:cc:7d:76:03:1a:28:13:f8:e2:97:53:c1:c2:
                    7b:70:f9:d8:37:0e:dc:19:2e:58:13:5d:4e:62:4c:
                    33:8d:d2:65:5d:fe:a1:7e:ae:ac:72:f3:12:a6:3e:
                    17:e1:c5:e9:3a:91:88:52:9c:66:58:71:77:f5:95:
                    a2:d3:f5:16:fe:69:9b:43:d7:47:4c:f5:fa:f0:bc:
                    e4:6a:d7:53:8c:5f:07:7e:a6:0c:73:cb:77:70:8f:
                    cf:61:dd:ef:d1:00:41:e8:8c:ab:d9:9d:0a:80:d7:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:00:8E:C1:AB:CE:B2:DA:94:DB:A7:39:28:B4:C4:E4:B0:92:28:5E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gQCOwavOstqU26c5KLTE5LCSKF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.252/32

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:bc:c2:95:94:16:61:69:0c:bb:7b:f0:cb:6e:c3:68:ff:
         84:f8:29:d9:46:ee:b9:bd:7b:3e:26:4c:e3:c7:8c:95:78:70:
         3e:66:bc:45:85:eb:6f:02:7a:38:af:2a:95:57:d6:74:5d:43:
         e0:74:f0:d4:11:4d:d8:0f:9f:a2:03:90:22:ed:9c:7e:ae:7e:
         0a:fd:be:fb:7b:6d:19:50:4f:d0:c3:9e:fd:8c:c7:d8:c4:6e:
         6d:5e:b2:e9:16:3e:6a:c7:84:3d:a6:76:7c:19:db:3f:71:12:
         da:7b:d4:22:26:93:45:c8:40:4c:55:c6:b3:b8:ab:b1:b2:f5:
         80:6e:a5:ce:b3:31:1e:f4:2d:f1:e7:cd:fd:14:4f:05:94:3f:
         9b:d8:7d:2c:cf:83:39:93:60:00:fa:c5:11:57:a5:5b:02:c4:
         5c:16:bf:a8:0a:6d:0a:16:90:6d:dc:94:d9:f5:9c:80:c9:ce:
         3b:4d:f5:1a:76:f1:92:31:eb:cb:60:88:31:26:e5:69:71:7a:
         45:68:62:48:6b:a3:29:00:a1:cf:d4:57:4c:49:a9:d8:b5:5c:
         05:d6:49:9a:64:b9:44:11:19:f7:0a:87:77:cc:bf:81:e3:f6:
         19:52:1f:71:ad:b5:6a:fa:74:c2:c9:8c:f7:0a:ac:7f:84:4f:
         e0:39:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:28 2025 by rpki-client