Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56ow5fxTfUJd5mtAxolBumzSJLE.roa
File:                     56ow5fxTfUJd5mtAxolBumzSJLE.roa (raw, json)
Hash identifier:          iFX6ioMgvwNeHULgO9zzASmyJcrboy0X+vZsK9NBcRs=
Subject key identifier:   E7:AA:30:E5:FC:53:7D:42:5D:E6:6B:40:C6:89:41:BA:6C:D2:24:B1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       4E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56ow5fxTfUJd5mtAxolBumzSJLE.roa
Signing time:             Fri 10 Feb 2023 07:41:26 +0000
ROA not before:           Fri 10 Feb 2023 07:41:26 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.15/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:26 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E7AA30E5FC537D425DE66B40C68941BA6CD224B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:5e:e4:ab:e0:39:1d:f1:26:29:62:7a:04:
                    e4:07:5a:e0:d5:34:c4:4c:ef:92:0d:8a:39:ac:9b:
                    77:cf:98:6a:55:0f:03:7d:95:e2:ad:33:7d:55:c3:
                    8b:6b:42:44:67:0a:c4:a5:21:82:74:e1:3f:b1:be:
                    64:ab:52:cf:e7:ee:85:05:a5:96:56:02:6c:26:0c:
                    db:7b:33:d9:60:0f:66:4b:c8:7e:22:b2:1d:4b:63:
                    03:41:2c:41:ac:bf:42:af:21:a2:3a:b7:70:f8:06:
                    ce:9c:ad:97:bf:92:d4:5e:36:06:b0:95:d0:57:dc:
                    f0:1f:9b:b2:d9:e4:ab:fb:31:69:1e:a6:f9:fe:db:
                    a6:99:36:04:e1:fc:88:d2:1a:67:37:ba:5a:96:69:
                    dc:04:12:13:7c:5d:cb:bd:21:eb:13:22:42:8d:3f:
                    e3:80:9c:18:f6:4d:45:93:9a:46:db:b6:09:7d:8c:
                    43:8e:00:a3:92:9c:3f:f5:d6:49:eb:76:da:28:07:
                    67:ab:c2:32:f1:e2:f5:df:23:f1:5c:f9:85:17:30:
                    5e:9e:e1:de:ff:0e:c2:20:91:ac:58:3f:45:1e:fd:
                    84:5f:12:74:93:e6:68:71:cf:2e:0c:dc:b1:d2:cb:
                    53:e2:ce:ba:a9:e5:44:30:54:a3:86:f3:ea:40:32:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:30:E5:FC:53:7D:42:5D:E6:6B:40:C6:89:41:BA:6C:D2:24:B1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56ow5fxTfUJd5mtAxolBumzSJLE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.15/32

    Signature Algorithm: sha256WithRSAEncryption
         08:45:86:bb:bf:7b:30:df:df:19:38:bd:c7:0c:c9:23:3c:01:
         ea:90:80:bc:f5:ae:40:be:7c:b8:e4:fa:f5:79:23:17:34:27:
         ff:36:f1:fb:b1:2b:e8:79:2c:8b:60:15:81:32:bc:28:d6:77:
         9a:c4:71:78:23:22:54:9c:bc:1e:77:74:5c:b4:5e:2d:fa:b2:
         7e:3f:25:e2:54:f1:6b:95:ee:a4:85:d5:aa:9f:0f:b4:1e:fd:
         03:c2:50:50:40:71:50:fa:1f:0f:18:b9:8c:84:e4:60:e6:a6:
         43:bc:8e:0f:52:9f:39:d2:b7:d0:e3:ae:55:3c:9f:87:a2:b0:
         aa:22:a0:2e:59:6a:20:6c:49:67:fb:a4:c3:93:5c:77:cd:35:
         70:f1:0a:b9:1a:7c:51:4a:0b:f6:bd:b8:02:63:ad:0b:82:a7:
         fe:cd:4e:79:40:bc:82:b6:28:b5:f8:d8:3b:ff:be:2d:33:91:
         fb:9d:32:98:fc:4c:ce:c5:00:18:e4:4f:9f:27:41:02:18:93:
         67:af:cd:e4:e6:8c:fd:0a:c8:95:c9:0e:f9:a4:0a:ab:68:aa:
         93:a9:cf:21:71:1f:c8:44:78:74:6e:ef:75:74:41:b0:04:15:
         76:65:e6:aa:fa:9e:43:d8:7b:92:97:ec:1d:47:05:2b:b8:3c:
         d8:a7:82:1c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIzMDIxMDA3
NDEyNloXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoRTdBQTMwRTVGQzUzN0Q0
MjVERTY2QjQwQzY4OTQxQkE2Q0QyMjRCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALSxXuSr4Dkd8SYpYnoE5Ada4NU0xEzvkg2KOaybd8+YalUPA32V
4q0zfVXDi2tCRGcKxKUhgnThP7G+ZKtSz+fuhQWlllYCbCYM23sz2WAPZkvIfiKy
HUtjA0EsQay/Qq8hojq3cPgGzpytl7+S1F42BrCV0Ffc8B+bstnkq/sxaR6m+f7b
ppk2BOH8iNIaZze6WpZp3AQSE3xdy70h6xMiQo0/44CcGPZNRZOaRtu2CX2MQ44A
o5KcP/XWSet22igHZ6vCMvHi9d8j8Vz5hRcwXp7h3v8OwiCRrFg/RR79hF8SdJPm
aHHPLgzcsdLLU+LOuqnlRDBUo4bz6kAyKZ8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTnqjDl/FN9Ql3ma0DGiUG6bNIksTAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzLzU2b3c1ZnhUZlVKZDVtdEF4b2xCdW16U0pMRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgABMAcDBQDK7FoPMA0GCSqGSIb3DQEBCwUAA4IBAQAIRYa7v3sw398ZOL3HDMkj
PAHqkIC89a5Avny45Pr1eSMXNCf/NvH7sSvoeSyLYBWBMrwo1neaxHF4IyJUnLwe
d3RctF4t+rJ+PyXiVPFrle6khdWqnw+0Hv0DwlBQQHFQ+h8PGLmMhORg5qZDvI4P
Up850rfQ465VPJ+HorCqIqAuWWogbEln+6TDk1x3zTVw8Qq5GnxRSgv2vbgCY60L
gqf+zU55QLyCtii1+Ng7/74tM5H7nTKY/EzOxQAY5E+fJ0ECGJNnr83k5oz9CsiV
yQ75pAqraKqTqc8hcR/IRHh0bu91dEGwBBV2Zeaq+p5D2HuSl+wdRwUruDzYp4Ic
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:21:04 2025 by rpki-client