Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tAFja5V9FPwBHsxt8zUZ9qesxu0.roa
File:                     tAFja5V9FPwBHsxt8zUZ9qesxu0.roa (raw, json)
Hash identifier:          BizJ6recfEXZTjFnhWorsEKdkvsv+FALJQ8FyJfaCUE=
Subject key identifier:   B4:01:63:6B:95:7D:14:FC:01:1E:CC:6D:F3:35:19:F6:A7:AC:C6:ED
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01B5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tAFja5V9FPwBHsxt8zUZ9qesxu0.roa
Signing time:             Mon 20 Feb 2023 07:53:16 +0000
ROA not before:           Mon 20 Feb 2023 07:53:16 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.72/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:16 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B401636B957D14FC011ECC6DF33519F6A7ACC6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:82:9d:bc:cd:8b:78:22:62:96:d0:94:2a:
                    91:11:bb:ed:8b:37:e4:8b:04:50:d6:3f:eb:b8:a1:
                    a2:49:bb:fa:9c:f5:6d:1d:50:e5:ad:fb:01:4e:16:
                    96:07:e6:c3:e7:7d:7a:d9:de:b3:76:00:56:76:a4:
                    95:02:0e:40:cb:59:bd:ec:b6:ef:33:6b:c0:2e:a4:
                    ae:f2:4f:cb:27:75:0c:72:a4:d1:ea:cc:57:f8:c0:
                    99:41:64:11:21:b0:0b:15:a6:fd:6f:79:c9:12:e6:
                    1e:40:8e:b4:bd:66:4d:cf:ef:a5:5b:bf:31:6a:f4:
                    d1:d9:40:ff:19:ad:6f:92:22:15:a0:3f:78:9b:d1:
                    8e:32:34:f1:b5:65:e4:a3:48:81:5b:48:7d:6c:63:
                    d5:80:02:4c:fd:e4:59:d0:23:5c:96:fb:33:0b:69:
                    bb:8f:8e:47:eb:69:6e:88:31:ac:1c:8b:8c:13:c0:
                    51:bb:50:61:46:a4:f7:fd:a6:e2:c9:07:19:22:5d:
                    c2:4e:44:a0:7a:a6:01:ad:8e:cd:1c:cb:14:a1:17:
                    9d:b9:91:f7:90:7a:84:37:bb:c7:44:63:4c:a6:0b:
                    23:26:db:f3:22:ef:53:22:09:58:9e:3a:ea:5e:84:
                    25:01:1c:55:70:e4:ed:db:55:f7:e7:8a:ec:53:08:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:63:6B:95:7D:14:FC:01:1E:CC:6D:F3:35:19:F6:A7:AC:C6:ED
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tAFja5V9FPwBHsxt8zUZ9qesxu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.72/32

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:17:dc:58:0e:04:fb:80:40:c3:73:87:01:36:59:4b:62:
         e7:77:e7:5e:c0:3e:72:a6:19:7e:b2:9d:d1:0f:c6:95:e0:68:
         4b:c3:ba:f7:be:77:36:fd:83:73:c7:0e:20:a6:72:ee:c6:b1:
         4e:0b:6d:69:d5:b5:9f:21:52:50:29:ae:de:ed:62:d6:20:96:
         5e:5c:bb:e6:29:b3:54:36:b9:34:bb:80:45:c8:47:e3:dc:12:
         b2:2c:d6:69:74:c3:f7:81:d5:b4:71:ab:85:b6:01:be:d3:01:
         0a:f1:6c:a8:e3:97:06:eb:6e:59:b1:c5:6d:80:e9:13:a7:6a:
         6e:84:d5:79:07:64:46:00:7c:7a:6d:19:dc:5f:ff:05:65:58:
         cf:f0:dd:80:25:de:e1:63:d6:ab:a5:c2:09:7e:c6:0f:2b:5d:
         c5:07:63:5c:c7:03:e8:c7:c3:d0:31:bb:07:31:15:bd:27:aa:
         6e:a7:90:74:36:9d:7b:92:93:fe:61:68:8d:ec:76:5a:6a:e8:
         23:d4:9a:84:cb:4a:08:ab:45:0b:4f:ef:1e:7c:88:0b:d8:34:
         50:82:a4:ef:0c:c0:97:5c:1c:d5:24:25:7b:f3:89:df:62:0f:
         f2:18:25:fa:e1:06:e3:8a:58:f9:a3:8c:c1:b8:5a:59:fc:82:
         67:0e:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:32 2025 by rpki-client