Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0wF_rd5yW7TOFx6Mb3bFBO8FqKc.roa
File:                     0wF_rd5yW7TOFx6Mb3bFBO8FqKc.roa (raw, json)
Hash identifier:          hA8Wki0ha9ugtZ0kOzo9AWe5FUANHr0wTgANMnuwDLM=
Subject key identifier:   D3:01:7F:AD:DE:72:5B:B4:CE:17:1E:8C:6F:76:C5:04:EF:05:A8:A7
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       2C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0wF_rd5yW7TOFx6Mb3bFBO8FqKc.roa
Signing time:             Fri 10 Feb 2023 07:39:08 +0000
ROA not before:           Fri 10 Feb 2023 07:39:08 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.203/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:08 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=D3017FADDE725BB4CE171E8C6F76C504EF05A8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:7e:db:c8:8d:3a:f5:28:c6:e0:93:26:50:
                    fd:72:e1:96:ba:a3:90:c1:9a:08:34:64:54:f2:67:
                    f5:eb:7d:c6:d1:10:0f:b2:4c:64:a1:72:03:60:52:
                    f0:12:0c:46:ec:ef:37:de:79:6a:e7:6a:50:f6:91:
                    bd:f4:da:a0:ef:3e:55:e0:4d:f8:19:76:22:eb:83:
                    49:26:c5:db:62:e2:2f:e4:1f:56:23:2a:a9:df:c3:
                    d8:7f:b5:15:93:6f:0b:bb:d6:a3:b5:6e:91:93:c3:
                    74:6d:72:ae:1f:85:dc:76:f5:ec:8a:a6:47:41:65:
                    09:3a:ab:d0:12:47:0b:c1:8e:19:d8:c2:a0:7a:6a:
                    ad:55:b2:9b:b6:37:e8:97:33:dd:38:91:11:91:56:
                    b3:7c:49:29:05:2b:c5:4c:f5:72:79:5b:ed:c2:2b:
                    69:4d:20:40:78:9c:dc:bb:e0:08:f2:ef:51:4d:64:
                    80:b8:4a:b8:3a:62:49:92:8f:20:ec:b0:4d:e9:a1:
                    16:a4:94:2b:02:01:08:66:41:95:d1:99:ca:13:0a:
                    36:00:af:da:71:27:fc:cd:38:43:69:a9:93:91:42:
                    ff:17:40:e0:53:3b:a2:e6:2f:2d:fe:50:f2:a5:ee:
                    b5:0c:57:c5:54:10:94:cd:2d:81:46:f0:a0:4b:ec:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:7F:AD:DE:72:5B:B4:CE:17:1E:8C:6F:76:C5:04:EF:05:A8:A7
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0wF_rd5yW7TOFx6Mb3bFBO8FqKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.203/32

    Signature Algorithm: sha256WithRSAEncryption
         82:14:fe:59:f8:0f:67:b2:d7:ca:9e:7c:1d:98:54:f2:df:80:
         ad:49:b7:8a:38:bd:cd:66:10:fe:12:94:10:6d:ff:c2:9c:dd:
         a9:f9:ba:56:1b:15:d8:7a:e5:00:21:8f:31:cb:44:e5:38:f9:
         8a:d9:6b:56:d1:4d:86:44:a0:df:e0:91:d9:66:0e:63:87:73:
         d2:b6:08:fe:84:52:2a:59:aa:04:f3:e5:65:61:c5:1c:e8:ba:
         05:7c:bc:f9:81:f0:59:58:d8:16:38:a6:6c:ff:6c:2c:55:aa:
         8f:f4:35:b4:2a:9f:b3:70:6f:36:30:a0:25:95:eb:96:ed:0a:
         95:0c:79:cf:43:1b:2c:3a:59:8b:95:9c:f1:66:44:de:54:5d:
         9d:55:c9:65:5c:ac:78:d3:17:04:53:2c:73:e3:d8:21:a2:47:
         95:a1:7f:03:09:97:e2:1b:16:ef:4f:69:6d:13:d9:59:a0:97:
         1a:56:b5:4a:47:6e:2f:2a:16:ba:9d:b1:a1:c7:75:5b:4c:00:
         3b:59:ab:8f:f9:c6:b8:d7:f7:76:cf:91:c0:a1:20:38:6d:e9:
         37:a9:ef:c9:7c:00:96:8d:0f:fb:78:e8:2a:a9:9b:b4:76:6d:
         ab:32:78:a5:e4:18:99:a1:96:b6:1e:50:c1:f9:ef:e8:eb:ca:
         f4:c4:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:37:06 2025 by rpki-client