Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qoL2qQtQEGgOtU8eNbD3cto3QtE.roa
File:                     qoL2qQtQEGgOtU8eNbD3cto3QtE.roa (raw, json)
Hash identifier:          QMc00hnVFagzmu2dy77HT4Dn6Tz35UrcNac4Uh4o2/Q=
Subject key identifier:   AA:82:F6:A9:0B:50:10:68:0E:B5:4F:1E:35:B0:F7:72:DA:37:42:D1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02CD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qoL2qQtQEGgOtU8eNbD3cto3QtE.roa
Signing time:             Mon 20 Feb 2023 08:07:28 +0000
ROA not before:           Mon 20 Feb 2023 08:07:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.14/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AA82F6A90B5010680EB54F1E35B0F772DA3742D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:c2:2e:d0:b0:5f:b8:a1:ef:f5:fc:77:6b:
                    6d:f5:c7:5e:cc:28:82:47:b6:da:08:97:58:21:c3:
                    cf:e4:00:8b:f8:bc:b0:11:eb:28:d4:cf:7b:ce:d8:
                    91:e4:02:98:d9:85:c8:8f:be:2d:a0:e6:be:cf:68:
                    1a:78:16:13:2a:d7:82:73:30:6f:2b:db:25:13:26:
                    0e:42:75:27:f8:cc:d9:a7:8b:df:dc:38:99:60:b2:
                    44:3e:8b:1a:1a:d1:b1:69:0d:2f:67:6b:37:f9:ee:
                    0c:7e:be:d3:2d:31:65:18:36:1a:61:c7:33:cf:90:
                    0d:4a:0b:b9:52:e9:3f:71:60:c2:e3:e4:b7:fe:c5:
                    a2:54:b8:7f:17:99:2c:5c:35:30:e5:48:9a:74:93:
                    95:05:86:a6:dc:86:4c:32:83:bc:64:4e:1b:63:56:
                    b9:a7:1c:be:ed:7a:86:7f:cf:8f:3b:77:90:47:01:
                    a8:f0:4e:57:95:71:08:de:e2:5b:5e:9e:07:52:4f:
                    20:62:93:b8:72:3f:20:f9:f4:29:3f:32:a7:71:ef:
                    81:f1:44:a3:0e:43:f9:b5:e8:dc:e4:7a:9b:7b:58:
                    b8:c4:cf:11:ea:ce:4a:97:bd:41:95:83:7e:b8:ec:
                    5e:37:0a:b6:b9:c8:b8:43:1d:bf:50:49:58:af:3b:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:F6:A9:0B:50:10:68:0E:B5:4F:1E:35:B0:F7:72:DA:37:42:D1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qoL2qQtQEGgOtU8eNbD3cto3QtE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.14/32

    Signature Algorithm: sha256WithRSAEncryption
         15:06:e2:22:16:a7:c0:4b:00:78:96:df:49:50:fc:7a:02:d2:
         69:73:f8:50:2f:1c:08:b1:b8:97:da:5b:7f:65:76:8d:0f:21:
         19:a9:00:29:72:c2:32:d1:99:6b:e3:ee:a2:44:66:14:4f:4c:
         e9:d7:89:9e:e1:dc:ab:89:f1:b6:21:47:df:43:c2:37:32:a9:
         dc:50:60:be:b4:88:3c:91:09:28:2b:dd:9c:a5:6a:33:46:0e:
         4a:8e:57:ed:e8:f0:64:a9:b4:fd:c7:d9:07:19:3f:ca:b1:7b:
         62:4e:02:97:a6:6a:13:aa:28:3d:6f:4c:de:e3:c8:82:8d:6f:
         95:49:45:f9:df:ff:a1:b8:e7:a3:7a:bc:5f:79:76:e7:af:2d:
         d6:b0:88:bc:5a:24:ce:09:77:ee:bd:09:58:fd:51:af:08:75:
         9d:17:d4:f5:5b:ef:a0:19:4d:83:f1:8a:91:4f:ab:55:1c:61:
         8e:4c:a3:31:a4:52:55:48:3e:68:85:95:a8:6c:44:74:d8:b9:
         5a:7e:b2:ac:11:b1:b6:8b:f3:9e:7e:96:b1:8a:43:6d:b8:d0:
         8d:8d:b7:42:9e:fe:38:9c:08:d6:1a:36:01:80:41:a1:ef:11:
         05:a2:f4:ae:63:46:49:69:3f:01:55:d1:dd:66:f1:3b:be:fb:
         e1:af:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:45 2025 by rpki-client