Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/npgB_GCw9LfB2imyIx4QJB3mH6M.roa
File:                     npgB_GCw9LfB2imyIx4QJB3mH6M.roa (raw, json)
Hash identifier:          uSxNl3bjsGHnFzvI0T6kySRxjAOXhBjRuPkVxeZpdQw=
Subject key identifier:   9E:98:01:FC:60:B0:F4:B7:C1:DA:29:B2:23:1E:10:24:1D:E6:1F:A3
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       31
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/npgB_GCw9LfB2imyIx4QJB3mH6M.roa
Signing time:             Thu 13 Apr 2023 09:54:30 +0000
ROA not before:           Thu 13 Apr 2023 09:54:30 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        90.149.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: Apr 13 09:54:30 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9E9801FC60B0F4B7C1DA29B2231E10241DE61FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:44:ad:70:16:75:06:d9:2f:4d:17:f0:9c:
                    64:82:50:da:d8:cd:ff:46:d2:48:d1:05:c5:43:e9:
                    e1:fa:e5:b4:a5:99:0f:8e:8a:9d:9b:ec:57:ec:68:
                    98:df:e0:d7:a6:9a:30:0d:7a:b5:d6:57:2d:0a:e8:
                    df:06:81:b0:5d:2b:6c:ef:9d:da:b6:cc:37:1a:cb:
                    e7:ce:2a:e9:da:0e:08:e8:47:b2:ee:c4:f3:9b:12:
                    8d:19:85:14:27:bc:70:a8:71:7e:99:9b:51:c2:a6:
                    1e:b3:23:56:f6:4e:b8:5e:e8:a1:f0:8b:32:9f:98:
                    80:2a:10:dc:6c:71:1d:58:ca:37:5f:fa:8c:a8:4c:
                    c3:7e:26:f0:6a:c1:da:1d:0b:bb:70:8e:be:64:84:
                    16:51:d4:a5:91:a8:b7:e9:38:14:1c:40:1f:8e:9a:
                    0c:b3:3d:ce:b0:79:7e:38:5a:d7:4b:07:36:e1:c1:
                    3c:76:15:fc:16:86:37:6f:c9:88:54:83:75:14:e5:
                    61:a5:f5:7b:f8:7a:28:78:4a:5e:eb:6b:f3:ac:4a:
                    88:c9:78:a0:49:ae:02:7a:38:d1:56:e1:cb:11:e4:
                    2a:ae:29:a3:f4:3e:08:d0:f2:74:8a:79:2f:b2:be:
                    07:70:61:ec:55:f5:9e:bf:f3:e3:4e:cc:20:48:dc:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:01:FC:60:B0:F4:B7:C1:DA:29:B2:23:1E:10:24:1D:E6:1F:A3
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/npgB_GCw9LfB2imyIx4QJB3mH6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:bd:83:d1:d2:0c:b3:c7:25:45:54:4f:0d:be:53:3b:85:
         33:96:e0:d0:ed:48:67:6c:be:e6:47:a8:fa:ad:ec:58:9a:eb:
         81:40:5a:89:3e:7f:8b:29:73:b1:f3:3b:b2:54:10:d0:19:d3:
         4e:cf:a2:e2:cd:44:e9:ee:f9:9e:ab:5b:0c:2a:5a:c2:7c:4c:
         53:f6:02:fe:b0:70:1b:dc:7c:78:2d:13:6c:b4:2e:98:9c:dc:
         d6:dc:1d:26:f6:ea:e7:43:ce:a2:13:fa:00:a5:c5:69:09:24:
         48:92:b9:b1:96:88:60:4b:d1:28:c0:47:44:39:4b:88:4a:1b:
         e4:66:d2:12:c0:12:a6:c2:06:67:ff:8a:b7:8a:28:e6:e0:eb:
         b7:64:2c:94:5c:e0:3a:f1:08:8b:00:55:8f:79:4d:a2:f0:c2:
         f2:69:3b:30:e5:65:62:56:44:05:d0:76:3e:58:30:cd:55:b8:
         34:96:17:55:46:30:97:19:ed:d3:37:f0:6b:f3:70:05:78:5e:
         b5:10:2b:59:a1:63:80:87:be:81:e6:b9:45:22:55:57:16:60:
         b5:16:65:0f:a5:01:4d:67:48:c6:40:4c:fa:f7:43:fd:44:47:
         d0:2f:fc:f7:52:7e:05:d7:2d:5b:dc:b9:06:9a:08:38:a7:2e:
         b0:58:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:30 2025 by rpki-client