Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yLBcgu5WaS1nPEWEBAQzY5dI0bo.roa
File:                     yLBcgu5WaS1nPEWEBAQzY5dI0bo.roa (raw, json)
Hash identifier:          avoymBstf7N+NxWCJuUBmPcHz7InzuYxDM5OwJ2HjG4=
Subject key identifier:   C8:B0:5C:82:EE:56:69:2D:67:3C:45:84:04:04:33:63:97:48:D1:BA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0246
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yLBcgu5WaS1nPEWEBAQzY5dI0bo.roa
Signing time:             Mon 20 Feb 2023 08:01:26 +0000
ROA not before:           Mon 20 Feb 2023 08:01:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.216/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C8B05C82EE56692D673C4584040433639748D1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:75:e0:24:f3:75:67:6b:f3:ad:7e:21:c6:
                    a1:e1:e7:68:a9:c1:eb:63:31:1b:f6:63:05:6b:ae:
                    4a:2b:7b:06:5a:07:c2:12:28:a3:33:22:d6:7b:30:
                    d7:d4:d2:1f:e2:b6:72:c9:0b:00:06:13:00:76:60:
                    18:16:6e:8d:dd:02:df:74:19:34:48:8f:a3:86:8b:
                    63:3d:31:8e:1c:da:d8:ec:5a:25:d7:d1:fd:dd:d3:
                    0a:f1:88:90:14:4e:1c:81:0a:9a:cc:99:e6:45:cc:
                    00:37:2f:27:3e:70:34:4c:83:34:25:45:f0:a2:c6:
                    10:cf:25:b5:57:91:e0:9d:0e:15:35:dc:d2:67:da:
                    a4:d4:67:23:9b:6b:57:7d:0c:88:9c:8f:16:78:1f:
                    80:2e:f3:ef:48:be:4b:5e:e1:52:9a:89:8b:07:66:
                    fa:13:02:23:3f:e0:5b:1f:2e:e3:79:1a:60:d5:7d:
                    b1:85:3b:a9:36:12:0c:a0:cc:d0:cb:ad:8b:ce:11:
                    4f:de:ed:6a:43:0f:17:b6:1a:86:50:cd:25:5c:79:
                    52:91:3a:28:39:ce:b3:8a:fa:72:bc:4a:05:ed:ff:
                    46:99:12:43:0e:51:8d:f2:89:11:f3:85:6c:21:1c:
                    67:e8:bd:70:96:02:b4:1d:27:1e:8e:fc:c9:ea:89:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:5C:82:EE:56:69:2D:67:3C:45:84:04:04:33:63:97:48:D1:BA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yLBcgu5WaS1nPEWEBAQzY5dI0bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.216/32

    Signature Algorithm: sha256WithRSAEncryption
         83:33:0c:a6:02:72:a7:40:1a:4a:d6:8d:1e:24:8e:23:a6:36:
         67:08:8e:31:b7:27:b8:81:20:fc:71:a8:a9:df:c5:d5:56:4b:
         97:05:fa:33:cd:b9:66:92:47:a9:dd:60:05:55:2b:3e:a5:2a:
         f9:e1:1a:51:0f:d7:ac:74:21:e6:1e:61:70:0c:52:aa:a5:94:
         97:07:91:08:4c:20:85:96:fe:7d:f3:20:05:07:92:ce:f7:43:
         0f:8c:c5:74:85:20:55:ba:de:c2:c4:e7:cd:c2:76:02:08:a4:
         8c:ad:41:a1:f9:ef:ac:87:7b:fc:45:39:87:84:0d:ae:ab:95:
         cc:a4:dd:9e:f2:56:b3:9f:52:8c:40:cb:47:c6:ff:05:7f:fc:
         bc:84:42:0b:7b:3b:b5:d7:09:4e:3c:93:99:b5:f6:cf:9d:77:
         a8:dd:14:8d:fd:26:41:b1:25:a4:32:13:23:07:a3:4e:71:cd:
         7c:94:87:42:1f:fb:e5:5a:39:e1:2f:76:f6:8d:a4:20:8c:3b:
         d9:1e:43:4f:5e:bb:2f:bf:87:9c:bf:01:55:5a:8c:fd:0d:9c:
         ad:a1:d5:7c:3f:5e:90:d2:d3:49:dd:4a:34:c4:98:f2:fb:91:
         74:2b:12:3b:6b:de:19:c9:e0:e2:dd:ed:72:e4:77:e5:5c:85:
         3c:28:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:24 2025 by rpki-client