Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mbzCEzMtSWU67qA0euaMTBkwRtc.roa
File:                     mbzCEzMtSWU67qA0euaMTBkwRtc.roa (raw, json)
Hash identifier:          x2KUVNZCVVr8U/a9ipZMiMjsRtHVOoHbYq+DVhW8KgY=
Subject key identifier:   99:BC:C2:13:33:2D:49:65:3A:EE:A0:34:7A:E6:8C:4C:19:30:46:D7
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mbzCEzMtSWU67qA0euaMTBkwRtc.roa
Signing time:             Mon 20 Feb 2023 08:07:20 +0000
ROA not before:           Mon 20 Feb 2023 08:07:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.78/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=99BCC213332D49653AEEA0347AE68C4C193046D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:a3:98:1d:95:72:ec:ba:0f:18:f7:17:cb:
                    68:68:e8:5c:f5:13:a8:24:b2:80:56:19:30:30:a2:
                    3b:4c:83:50:ee:43:db:f4:dc:07:a1:a3:ac:1c:47:
                    16:a3:36:68:3c:23:55:ce:c7:36:8c:41:dc:9f:96:
                    c7:af:e7:a5:94:e4:8d:51:40:3f:19:d6:d9:4b:64:
                    83:c8:50:be:6d:aa:c3:bc:25:48:d6:47:5d:d6:2d:
                    53:38:3b:19:8c:4a:ea:3c:ca:7d:66:ff:b6:ca:ea:
                    53:df:71:a7:f9:4d:fe:3b:3c:c8:21:b6:fb:c2:90:
                    6e:b9:82:1a:67:6c:72:1c:a9:f1:cc:75:bd:84:d8:
                    14:06:14:02:ed:e3:91:56:ad:df:ac:40:8b:e2:76:
                    f3:30:42:4b:cb:1c:64:1b:a6:d7:94:6a:4b:28:46:
                    ba:82:4a:4d:d2:a0:57:84:f3:f4:ba:8a:f7:02:ae:
                    e8:c9:f0:68:d0:c8:42:c8:c0:76:69:7f:a4:84:a7:
                    8f:b0:8b:f3:8e:99:17:15:08:93:4e:71:c2:dd:e1:
                    4f:5a:ee:c8:5f:73:4a:65:da:38:d7:f8:85:23:54:
                    94:f6:a6:65:49:9a:f6:8e:be:2b:84:52:f3:3e:f9:
                    c6:d4:9d:fa:93:42:5d:b4:fa:cb:2b:d4:67:c7:05:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BC:C2:13:33:2D:49:65:3A:EE:A0:34:7A:E6:8C:4C:19:30:46:D7
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mbzCEzMtSWU67qA0euaMTBkwRtc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.78/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:ef:09:46:a3:3b:91:af:be:ff:28:7b:42:a0:8b:b9:88:
         2d:ce:b6:96:c5:ad:89:75:37:72:64:2e:da:ac:7d:2f:a5:81:
         0a:2b:85:72:77:e3:db:fb:61:bb:aa:fe:01:f3:10:90:74:98:
         5b:c5:01:79:b2:2d:ff:fc:9b:6d:5c:6e:fb:ee:b7:0a:0f:82:
         a0:35:32:e6:0e:e6:9d:f1:0b:b3:98:fb:59:f9:6e:50:25:2e:
         01:08:be:0a:7c:6b:3b:31:a5:1e:d0:58:64:e6:77:2f:76:06:
         1f:2c:18:e5:d9:a4:92:87:46:1a:d6:33:0a:6f:6a:46:5f:47:
         d4:9a:79:33:53:6e:97:97:cc:63:f6:f0:8b:e8:25:dc:87:a7:
         3c:aa:82:75:e6:a6:d0:0e:97:88:b9:6d:8d:bf:1a:5d:80:4d:
         1d:72:72:14:b7:90:1b:29:7a:80:39:56:b1:38:7d:9c:6e:af:
         3e:15:b9:6c:cf:d5:98:87:5a:6c:3e:44:1e:12:66:1c:33:81:
         ca:0f:3b:18:8a:58:48:44:ef:06:be:96:01:2d:59:52:39:ad:
         43:d2:fa:71:ba:fd:9a:d6:bc:4f:55:ce:59:58:d7:5c:88:ab:
         3c:86:85:03:dd:74:04:84:fd:1c:d1:4a:d6:91:0c:38:2b:1b:
         17:af:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:00 2025 by rpki-client