Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2ahc4a1sZFM5_Q34nrX8_lKNkDw.roa
File:                     2ahc4a1sZFM5_Q34nrX8_lKNkDw.roa (raw, json)
Hash identifier:          FirYzEpEj7Tdtm2RYUfeN2AFekaktxMHAy074Fet7mI=
Subject key identifier:   D9:A8:5C:E1:AD:6C:64:53:39:FD:0D:F8:9E:B5:FC:FE:52:8D:90:3C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       3E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2ahc4a1sZFM5_Q34nrX8_lKNkDw.roa
Signing time:             Fri 10 Feb 2023 07:41:19 +0000
ROA not before:           Fri 10 Feb 2023 07:41:19 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.47/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:19 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=D9A85CE1AD6C645339FD0DF89EB5FCFE528D903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:5e:94:57:99:49:f0:82:2b:bc:9c:a0:d1:
                    ce:8e:9c:2c:b6:56:75:12:97:f3:ee:42:c6:bd:81:
                    a2:08:f4:14:a9:c8:a7:41:8e:c4:76:00:9f:88:f4:
                    3c:d6:75:7e:0d:06:44:74:8b:93:0b:09:d5:86:01:
                    56:0e:71:32:74:eb:a5:bb:66:4d:39:70:e6:0c:34:
                    a4:b3:0a:3b:36:e3:b0:8a:3b:8a:63:a3:99:64:c1:
                    6a:95:a4:0d:85:0a:cf:8f:dc:e6:81:d4:8c:99:55:
                    87:b5:6b:9a:c7:e9:e6:fa:04:7b:09:e9:6e:0f:5f:
                    59:3b:26:9e:51:55:b5:c0:35:39:de:d6:5f:14:5b:
                    b6:57:66:5a:76:dd:4b:00:6e:75:41:f4:a7:07:9f:
                    bd:8d:09:f9:ab:b9:0a:b9:55:59:59:36:d7:c6:aa:
                    5f:19:70:50:ea:a5:73:a9:4b:61:02:d2:e0:12:21:
                    90:e4:b5:00:70:c4:08:73:39:b9:f6:51:d0:7f:23:
                    ad:bd:17:b6:10:b4:56:0d:6f:cf:71:c8:f4:23:ea:
                    14:56:ef:a3:be:8c:7b:b3:bc:6c:aa:c0:e0:3c:5d:
                    1f:67:5f:84:53:0c:76:de:fd:9e:3d:df:d4:67:ac:
                    df:19:8e:72:27:06:6f:3d:4a:03:be:3b:5f:ce:eb:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A8:5C:E1:AD:6C:64:53:39:FD:0D:F8:9E:B5:FC:FE:52:8D:90:3C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2ahc4a1sZFM5_Q34nrX8_lKNkDw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.47/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:40:57:60:50:42:23:b4:9a:36:d3:de:3e:b5:cf:96:74:
         2f:05:8a:e1:2e:94:4c:01:2e:e1:f5:26:d2:0f:2f:ed:d3:ae:
         3f:3c:ce:ff:9b:b8:1e:cd:55:3c:82:ca:61:aa:fe:27:ba:83:
         0e:14:fa:8f:0a:94:47:c2:69:da:3c:4a:c3:bb:d7:1d:b3:90:
         65:cd:24:05:cc:87:1c:0a:2c:29:50:d1:0c:f3:3f:17:44:ff:
         5d:4a:b2:67:43:99:1b:1f:fc:f9:ba:b7:fa:c2:01:c5:f6:1c:
         30:cc:c2:00:3a:79:30:db:90:13:07:d1:6c:ab:55:ee:0c:41:
         22:0a:c8:62:f6:aa:b1:88:21:47:dc:7d:8e:9e:96:be:8d:d4:
         11:9c:32:0e:64:7e:d4:98:44:6c:7a:0c:ae:a1:b1:a8:0e:a6:
         56:61:67:01:cf:f3:9a:05:00:bf:9c:c1:bd:04:1f:2d:12:50:
         70:c7:ac:59:41:19:48:8f:8f:a2:f5:54:c3:46:7a:b5:5d:50:
         64:22:40:46:88:d5:9d:ab:71:6f:08:c1:d3:fe:db:d1:d1:a6:
         3f:57:a7:55:a2:c5:52:6c:db:bb:a8:4a:6e:5b:7a:f8:5c:78:
         5b:ac:1c:48:fd:c0:0c:2e:db:28:8f:23:7c:15:bf:d4:0a:98:
         45:c2:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:12:53 2025 by rpki-client