Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/44vyVz9bJ6-LyFvUt6484ww-FQM.roa
File:                     44vyVz9bJ6-LyFvUt6484ww-FQM.roa (raw, json)
Hash identifier:          dDkBT2uTUyABpby7pH2SCa8lcDC7B13WutzWzAfTzDU=
Subject key identifier:   E3:8B:F2:57:3F:5B:27:AF:8B:C8:5B:D4:B7:AE:3C:E3:0C:3E:15:03
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       5D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/44vyVz9bJ6-LyFvUt6484ww-FQM.roa
Signing time:             Fri 10 Feb 2023 07:41:33 +0000
ROA not before:           Fri 10 Feb 2023 07:41:33 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.179/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:33 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E38BF2573F5B27AF8BC85BD4B7AE3CE30C3E1503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:fc:45:ac:a5:f0:68:37:1c:a3:0f:85:21:
                    b9:86:6c:65:85:ef:7a:e6:c3:f8:57:72:6f:09:55:
                    c6:7d:f1:5b:81:e9:b0:38:01:86:d1:ce:62:ba:7e:
                    b0:8d:05:20:2c:dd:de:a8:a2:63:39:e3:8f:47:cf:
                    21:ea:fe:7d:22:d7:90:77:6f:54:d4:de:83:f2:31:
                    49:d3:53:1a:d0:7e:6f:cd:ec:3c:80:c5:45:75:05:
                    d4:5b:6f:38:77:31:43:47:33:d9:61:a8:85:39:b9:
                    e7:c2:41:e3:55:90:b1:62:5c:c6:fc:97:4e:1e:b4:
                    e6:c0:f0:9a:1c:87:05:a9:82:09:c0:67:78:1f:5c:
                    d0:19:3c:1c:af:be:77:db:36:73:3f:e8:b9:16:3a:
                    c6:8f:4a:68:ab:7c:f5:9b:ae:0f:e8:27:88:65:e0:
                    f0:a0:70:f7:23:a8:05:a5:fe:fa:56:ec:4e:28:aa:
                    2a:c4:1e:e6:7a:80:5c:05:0d:71:64:56:30:19:83:
                    4a:ef:67:f1:0b:82:1b:b2:8c:99:c4:d4:53:8a:a8:
                    93:44:70:c7:77:93:11:ce:4b:93:ed:d9:a2:2f:10:
                    f6:50:0d:d2:d2:3a:cb:4f:78:65:5a:7b:c3:ad:65:
                    ed:ff:bd:72:44:0d:eb:a1:72:8d:8c:fb:0b:69:41:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8B:F2:57:3F:5B:27:AF:8B:C8:5B:D4:B7:AE:3C:E3:0C:3E:15:03
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/44vyVz9bJ6-LyFvUt6484ww-FQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.179/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:3e:ff:ae:78:92:85:36:2b:d5:5c:54:69:b8:34:26:78:
         a1:67:9a:33:8c:22:cc:ee:f5:2b:a2:97:ca:6b:72:01:33:c7:
         7a:da:1b:da:db:d3:f0:95:0d:e5:8a:82:fd:34:8d:43:ea:1a:
         08:0c:a3:cc:7e:0a:58:07:75:f4:5b:d9:5f:d7:84:0b:fc:a0:
         47:f5:ea:16:34:83:8b:0f:0b:54:28:d2:a5:ef:11:da:4d:53:
         67:e5:79:3d:f6:57:09:f3:3f:ad:5c:ea:19:7a:14:38:7f:3f:
         b3:d2:76:94:da:3a:8b:10:b1:99:ef:67:de:fb:e1:bf:1e:91:
         7a:0f:41:03:be:1d:0e:07:dd:f3:54:88:ad:c0:23:62:81:3f:
         0d:17:02:62:dd:09:49:b7:b2:5f:06:23:d9:0e:0d:b6:f0:ff:
         78:f8:34:bd:ea:e2:a3:6a:38:f9:c2:45:cc:c4:76:8a:9a:18:
         c8:5e:2c:17:b2:93:b0:98:df:47:3c:9d:9d:2d:63:9f:da:4a:
         9b:b6:97:ab:6a:fd:df:c8:26:15:b3:a7:33:d0:c4:2b:d8:cc:
         c1:bd:a9:58:d9:4f:88:fb:e2:73:96:a0:5d:e3:47:9a:27:cf:
         56:18:65:5e:45:4f:36:f0:a3:91:b4:81:8e:1b:38:81:1f:8f:
         65:43:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:21:32 2025 by rpki-client