Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hMGqvejG5Sn7CvymYxMTwFIWLt8.roa
File:                     hMGqvejG5Sn7CvymYxMTwFIWLt8.roa (raw, json)
Hash identifier:          XD//p5Klx4jF3cjBsiktSWIJV/kui/1fAgjGJ2OG/d0=
Subject key identifier:   84:C1:AA:BD:E8:C6:E5:29:FB:0A:FC:A6:63:13:13:C0:52:16:2E:DF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       41
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hMGqvejG5Sn7CvymYxMTwFIWLt8.roa
Signing time:             Fri 10 Feb 2023 07:41:20 +0000
ROA not before:           Fri 10 Feb 2023 07:41:20 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.173/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:20 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=84C1AABDE8C6E529FB0AFCA6631313C052162EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:7d:2a:30:61:ce:80:b5:f0:dc:f9:ab:6c:
                    4c:c3:be:55:c8:31:bc:bb:49:ea:95:9c:9e:44:63:
                    b2:6d:e2:45:c2:61:a2:e9:9a:ac:80:c2:2f:d4:e3:
                    bb:4c:6f:e5:ff:4a:46:b3:c8:1f:99:7e:60:29:60:
                    47:0b:03:94:fd:2d:5c:22:06:c5:3b:9c:77:70:f7:
                    7e:eb:63:04:a3:16:6f:09:8a:15:15:81:68:9a:b6:
                    27:4a:ad:31:b5:29:37:0f:6c:94:a1:6f:32:15:b7:
                    37:51:84:28:f1:6e:14:74:4e:a9:42:c5:ac:61:f6:
                    ef:4f:f7:d7:59:0a:73:ec:75:b0:1a:fb:86:b7:69:
                    04:20:05:22:e5:fa:91:81:46:d7:fc:16:43:ad:b8:
                    56:db:3d:25:b8:c2:0a:0d:f2:cf:02:ba:11:12:91:
                    22:96:12:ce:5a:4f:da:da:02:88:b5:6f:48:26:b8:
                    c0:f6:83:88:51:03:ed:b2:22:08:f5:ed:89:39:75:
                    14:71:d5:3c:6b:b7:58:4a:83:ba:41:eb:c4:01:0e:
                    fc:56:fe:5a:d8:f2:6e:91:06:e3:fe:60:88:c9:0c:
                    a9:34:a8:bd:be:59:cd:ee:03:5b:d1:dd:e2:57:bf:
                    8f:dd:13:d2:85:42:7a:5e:c0:b3:21:62:10:46:86:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:AA:BD:E8:C6:E5:29:FB:0A:FC:A6:63:13:13:C0:52:16:2E:DF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hMGqvejG5Sn7CvymYxMTwFIWLt8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.173/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:ac:17:c7:b2:f9:7a:2a:aa:dd:45:2c:e8:12:d2:a6:40:
         5e:8e:cd:7d:53:1d:f5:bd:ad:95:dc:41:b0:2a:92:a8:53:17:
         53:8e:7e:70:38:8c:9c:1c:f8:12:ad:62:2b:ea:65:52:bc:9a:
         1b:07:b0:0e:9a:ee:b9:9f:5f:a2:33:eb:4e:ff:42:1a:fe:f7:
         d6:7e:1c:c5:db:52:42:7a:fe:1a:b0:30:07:c6:e7:17:05:0c:
         81:24:9d:3c:21:0d:89:a5:00:e8:9c:1f:7c:a8:ac:9b:f1:b3:
         ee:4f:3f:8d:21:ed:ce:17:aa:a1:ab:6e:67:cd:77:12:eb:58:
         48:52:28:d7:d7:e4:c9:f6:96:01:02:26:04:9f:9e:38:0a:ab:
         2c:8c:91:74:0f:86:d3:f5:a3:af:92:99:07:e4:0d:ec:cf:e1:
         86:dc:51:01:00:f1:d1:81:82:e4:aa:b1:62:df:ce:94:35:66:
         d1:a9:f2:43:bc:bc:58:fe:a8:00:0b:54:13:76:fa:d7:68:76:
         b5:d1:4e:c7:4f:4a:87:e8:1b:05:d3:db:4c:c3:c9:4a:a3:aa:
         6c:5f:d8:ae:3b:29:7b:5e:9b:f0:36:ef:d7:5a:c8:a2:c0:02:
         8c:87:e4:e5:e1:20:e6:f3:56:8b:e6:05:4b:8f:24:f6:34:ed:
         da:4b:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:24 2025 by rpki-client