Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5ehx3hQh5ZpB-_Ih40JyOwdwbBo.roa
File:                     5ehx3hQh5ZpB-_Ih40JyOwdwbBo.roa (raw, json)
Hash identifier:          fAoavQGp7FMDeTV4tK47b9yhGrnReuGf9BylNlH7Y0U=
Subject key identifier:   E5:E8:71:DE:14:21:E5:9A:41:FB:F2:21:E3:42:72:3B:07:70:6C:1A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       6A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5ehx3hQh5ZpB-_Ih40JyOwdwbBo.roa
Signing time:             Fri 10 Feb 2023 07:43:37 +0000
ROA not before:           Fri 10 Feb 2023 07:43:37 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.167/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:37 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E5E871DE1421E59A41FBF221E342723B07706C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:c7:b3:bb:30:3a:2a:27:bb:0d:0a:7a:6c:
                    47:6e:ff:d5:47:f9:37:b9:6f:07:72:13:d2:ba:09:
                    57:19:94:2d:e9:5e:5b:dd:c5:2e:f9:b6:93:a2:df:
                    6b:9f:af:6b:b9:7b:a0:b3:90:60:db:30:1f:49:d7:
                    38:18:cf:a5:34:a0:5e:c9:a2:39:ba:99:3a:9a:28:
                    48:1b:ba:46:f3:b6:ac:7b:ed:d6:9a:c3:cc:2e:b8:
                    89:2a:f2:ea:64:9d:ae:ae:14:6e:9a:be:7d:c0:b0:
                    b4:c8:b4:5f:bc:29:d4:37:70:d6:e9:11:15:f4:47:
                    e2:69:f5:f8:92:bc:d5:0c:2d:87:dd:6f:c2:05:25:
                    10:96:70:1b:10:62:5e:55:48:4c:e3:61:77:25:99:
                    61:8d:ed:14:c5:30:27:1d:5e:b2:72:54:69:7f:18:
                    1b:23:b7:2b:7b:c9:d7:0c:e2:4d:fb:a7:12:be:47:
                    42:9b:6f:8e:bd:56:16:c0:48:bd:48:96:2d:27:f9:
                    e8:52:87:b8:50:e0:7e:f7:ba:4e:bf:77:27:f4:e8:
                    c6:ee:21:59:ad:fa:68:0b:29:0c:62:69:37:dd:75:
                    70:d8:50:1e:52:fe:d6:b7:ec:69:8a:86:8c:67:ae:
                    ba:3f:11:70:1d:f0:20:18:27:d5:48:a4:ba:83:13:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E8:71:DE:14:21:E5:9A:41:FB:F2:21:E3:42:72:3B:07:70:6C:1A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5ehx3hQh5ZpB-_Ih40JyOwdwbBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.167/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:61:71:9a:14:9e:a1:23:f5:28:e4:a4:c8:63:42:8f:1c:
         8f:e8:7b:2d:62:0d:9a:ab:78:4c:29:51:bd:0b:12:28:ab:b0:
         ce:d3:f1:bb:5c:07:3d:dc:7e:24:60:b9:5c:33:67:c2:66:cb:
         35:ed:b1:e4:bf:e9:78:4d:8a:e8:5b:21:f4:df:b7:7b:d7:87:
         f7:e9:2a:90:3a:f2:c6:9e:7c:55:0e:fe:4f:26:9d:2b:56:90:
         65:17:51:91:1f:3e:e9:73:4c:14:18:18:e1:49:08:b1:af:87:
         88:6a:71:f2:15:ce:c3:a1:01:d9:d0:78:b7:c6:d6:38:9c:4f:
         4c:4a:f2:0b:a1:6a:a0:cc:c4:12:e8:43:8f:38:17:ed:e8:92:
         b3:12:c6:64:0b:8c:c5:21:65:d7:cd:2f:f1:36:ad:48:f9:fe:
         bd:d2:51:09:fa:22:4d:8a:f4:75:3f:0b:56:41:6e:24:f9:21:
         d8:48:b5:5d:a5:66:0a:a0:8e:23:57:47:20:80:73:da:96:ff:
         1f:10:27:c3:e3:c0:5e:cf:b6:16:94:64:c0:4f:9b:7e:46:5b:
         f8:47:a4:24:19:23:92:50:63:5b:38:db:ed:c0:63:15:6b:aa:
         d0:cb:56:1c:40:0b:7d:b3:f9:9e:61:22:6d:df:14:15:58:c0:
         aa:e2:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:59:24 2025 by rpki-client