Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hxYR_XMPlAPUj196NQktvI7w_gw.roa
File:                     hxYR_XMPlAPUj196NQktvI7w_gw.roa (raw, json)
Hash identifier:          Kb17niSvLHkmV7g4r0r2S8+N1DDpmJwdXaSGbdWo+hI=
Subject key identifier:   87:16:11:FD:73:0F:94:03:D4:8F:5F:7A:35:09:2D:BC:8E:F0:FE:0C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       014C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hxYR_XMPlAPUj196NQktvI7w_gw.roa
Signing time:             Wed 15 Feb 2023 02:28:29 +0000
ROA not before:           Wed 15 Feb 2023 02:28:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.38/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=871611FD730F9403D48F5F7A35092DBC8EF0FE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:bc:b0:ae:7d:05:e8:35:2c:54:e0:4f:fb:
                    2b:53:b1:9d:dd:27:e1:44:3d:42:39:24:f7:d6:96:
                    d8:2e:7e:15:1b:4d:b3:6e:67:e0:0d:ee:4e:8a:2d:
                    59:0d:2d:82:fd:df:1e:1f:96:7f:c1:d1:f8:62:01:
                    56:9e:2e:0d:bc:9a:a4:12:37:a0:60:e3:3e:62:3c:
                    be:bf:d8:4e:8a:8c:33:4e:91:3d:cc:05:1c:cd:f9:
                    9f:5b:fa:7b:26:bd:55:32:8d:3a:1c:34:26:0f:42:
                    cf:b3:47:58:a6:e8:65:ae:b7:c0:84:96:10:d2:39:
                    bb:34:0f:21:d2:c1:4e:aa:03:aa:26:35:97:4d:e3:
                    a2:c9:39:90:a1:5d:75:00:70:8a:e9:09:04:88:55:
                    03:96:4e:e5:87:95:3c:8a:30:ca:19:2f:e6:04:69:
                    99:8e:44:68:c7:6f:f5:60:28:a8:c8:b8:2a:c2:f9:
                    e4:4e:a5:85:ca:da:5e:ca:7e:7a:ab:2e:4a:d7:a3:
                    fc:06:18:c8:17:19:73:07:33:98:13:f8:19:a9:3e:
                    76:c7:19:7e:7a:51:96:eb:01:fc:e4:ac:3d:c5:c6:
                    d2:c9:6b:51:90:7b:ad:c0:9d:95:37:49:3b:bd:37:
                    ce:87:99:35:69:bb:68:d4:b5:1b:f6:af:02:11:33:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:16:11:FD:73:0F:94:03:D4:8F:5F:7A:35:09:2D:BC:8E:F0:FE:0C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hxYR_XMPlAPUj196NQktvI7w_gw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.38/32

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:c1:56:a1:62:b7:ca:a7:90:08:05:4a:23:60:e0:a5:da:
         28:d7:72:cc:fb:7c:8b:88:20:55:47:0d:1c:d3:3b:7f:96:6c:
         71:88:12:56:2f:8c:85:44:66:9c:e5:d1:69:d3:b4:aa:6d:c5:
         73:2d:a5:3b:c8:e4:8e:fd:d8:f6:f0:82:4d:79:34:c5:84:2d:
         74:05:a9:8f:ee:09:10:8e:2f:06:cd:e4:14:e0:59:ab:60:28:
         60:c7:7f:3a:22:9d:79:d0:75:d6:2a:7b:ed:f7:49:ef:b8:1a:
         e6:44:e2:f3:b7:e8:e6:cf:b7:bf:d6:cf:08:52:9e:49:40:c0:
         f4:29:ce:8c:6b:17:47:d5:26:a5:a8:64:8f:25:4a:c8:5c:48:
         11:9d:df:90:42:7b:98:57:73:d1:8c:20:67:ca:2c:2d:e6:d7:
         06:d3:8b:09:c2:80:da:8d:fc:fb:ad:76:bf:4b:af:ef:82:1d:
         a9:46:a2:47:57:ef:38:da:c9:ea:07:ea:85:1e:a9:30:c2:df:
         6d:cd:ed:93:1d:5b:21:7a:19:a1:fa:24:c2:55:32:d9:09:17:
         a5:84:3c:40:54:12:d2:89:c0:8d:70:fa:00:7b:3b:c6:b9:31:
         82:9d:37:89:9d:b4:f0:df:24:fa:c3:11:17:2c:40:bb:e8:b0:
         2a:a8:b8:9f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTUw
MjI4MjlaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg3MTYxMUZENzMwRjk0
MDNENDhGNUY3QTM1MDkyREJDOEVGMEZFMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEYrywrn0F6DUsVOBP+ytTsZ3dJ+FEPUI5JPfWltgufhUbTbNu
Z+AN7k6KLVkNLYL93x4fln/B0fhiAVaeLg28mqQSN6Bg4z5iPL6/2E6KjDNOkT3M
BRzN+Z9b+nsmvVUyjTocNCYPQs+zR1im6GWut8CElhDSObs0DyHSwU6qA6omNZdN
46LJOZChXXUAcIrpCQSIVQOWTuWHlTyKMMoZL+YEaZmORGjHb/VgKKjIuCrC+eRO
pYXK2l7KfnqrLkrXo/wGGMgXGXMHM5gT+BmpPnbHGX56UZbrAfzkrD3FxtLJa1GQ
e63AnZU3STu9N86HmTVpu2jUtRv2rwIRM3AVAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUhxYR/XMPlAPUj196NQktvI7w/gwwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9oeFlSX1hNUGxBUFVqMTk2TlFrdHZJN3dfZ3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaJjANBgkqhkiG9w0BAQsFAAOCAQEAEsLBVqFit8qnkAgFSiNg
4KXaKNdyzPt8i4ggVUcNHNM7f5ZscYgSVi+MhURmnOXRadO0qm3Fcy2lO8jkjv3Y
9vCCTXk0xYQtdAWpj+4JEI4vBs3kFOBZq2AoYMd/OiKdedB11ip77fdJ77ga5kTi
87fo5s+3v9bPCFKeSUDA9CnOjGsXR9UmpahkjyVKyFxIEZ3fkEJ7mFdz0YwgZ8os
LebXBtOLCcKA2o38+612v0uv74IdqUaiR1fvONrJ6gfqhR6pMMLfbc3tkx1bIXoZ
ofokwlUy2QkXpYQ8QFQS0onAjXD6AHs7xrkxgp03iZ208N8k+sMRFyxAu+iwKqi4
nw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:09 2025 by rpki-client