Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/q18Wc4J80wRZKc9MuiMsh4g1A6g.roa
File:                     q18Wc4J80wRZKc9MuiMsh4g1A6g.roa (raw, json)
Hash identifier:          WJvDAfOPedZ5ZaLoIFxjcta89NLlIjh5wIPbFmjbKRg=
Subject key identifier:   AB:5F:16:73:82:7C:D3:04:59:29:CF:4C:BA:23:2C:87:88:35:03:A8
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01DB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/q18Wc4J80wRZKc9MuiMsh4g1A6g.roa
Signing time:             Mon 20 Feb 2023 07:55:28 +0000
ROA not before:           Mon 20 Feb 2023 07:55:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.64/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AB5F1673827CD3045929CF4CBA232C87883503A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:6a:e5:06:9f:7c:9f:1d:98:45:7f:3f:b1:
                    50:7d:0b:59:3b:c6:df:88:d5:96:eb:45:3e:91:7c:
                    c6:62:48:13:34:b5:23:34:8e:96:a3:bd:63:dc:c7:
                    b5:07:da:36:e1:fa:5c:fe:6f:5b:70:56:7e:aa:12:
                    a6:6d:61:08:d7:29:67:d6:11:a4:70:fc:22:89:47:
                    b1:b7:01:55:18:f9:04:0e:61:26:30:f8:9a:38:9c:
                    ca:82:b7:80:79:3d:ea:da:7a:10:44:22:6c:e5:f3:
                    ee:33:15:d1:2c:a7:c0:f7:10:64:8e:10:d7:cc:0f:
                    ff:91:75:c3:29:b3:f8:ed:15:65:1a:9f:df:e6:b0:
                    de:21:10:68:1e:04:bf:42:f5:eb:8f:5e:d5:38:c2:
                    2b:00:b1:3f:89:26:60:f7:12:16:6d:70:89:2d:70:
                    a0:02:d0:d8:89:b2:5c:65:a2:f9:5a:02:b6:93:b9:
                    ab:d6:5b:71:73:9f:dc:f0:34:e9:d2:77:99:01:69:
                    ab:de:c1:bf:1a:06:5e:92:79:08:14:85:3f:3b:ae:
                    20:64:4c:7c:eb:4f:15:c7:5d:65:a7:70:09:d7:52:
                    56:71:58:ee:de:81:4a:ee:cd:24:7f:19:68:3f:71:
                    a5:a7:2a:a6:eb:e4:cd:6f:bf:e4:98:30:df:38:3d:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:16:73:82:7C:D3:04:59:29:CF:4C:BA:23:2C:87:88:35:03:A8
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/q18Wc4J80wRZKc9MuiMsh4g1A6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.64/32

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:4c:1e:29:51:af:f7:b5:e5:c8:3a:b7:96:27:ab:fe:d0:
         85:36:59:ce:3f:c7:3d:06:56:75:5f:6b:43:3e:4a:50:57:41:
         6b:e3:0f:ee:22:bc:d5:f8:88:b4:4f:c5:5f:52:7c:c3:8f:94:
         51:67:92:7a:cb:fc:f3:14:5b:bf:61:e8:89:e8:16:a7:3c:6f:
         2e:30:02:76:6e:80:38:e4:df:96:64:74:3c:e4:58:25:e2:42:
         e9:3c:62:ac:09:11:0d:62:91:6c:0b:f1:fd:7f:1d:d4:f3:88:
         c1:6f:67:6a:f4:cb:4c:f6:44:2d:94:52:bf:aa:7d:e3:84:6e:
         d1:fa:a5:f8:5e:5d:71:e6:9c:e0:f0:4c:92:73:fc:9d:1e:52:
         82:fb:a7:2a:75:d1:19:46:46:4c:9c:3a:31:4b:26:7a:12:7a:
         d7:cf:2c:fe:56:83:4e:c5:b0:92:45:aa:b4:bd:94:14:5a:2c:
         84:8a:70:5c:23:93:46:1e:10:03:60:31:95:76:1d:2a:a4:a0:
         b8:df:b5:86:af:88:24:23:73:b3:cb:8a:58:26:eb:1c:01:95:
         ea:73:27:a2:e5:85:b1:26:06:31:be:97:83:b2:5a:7e:b1:49:
         f0:a8:ae:8a:41:d9:df:a5:89:9b:f3:86:bd:f5:ec:25:a2:26:
         00:db:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:41 2025 by rpki-client