Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CEoc_3uda2Hp4ag_JkCWXybL-24.roa
File:                     CEoc_3uda2Hp4ag_JkCWXybL-24.roa (raw, json)
Hash identifier:          EVCz7w1galT0X+b/dQDM2pa2yOYR3Tw6M1hASIXatkE=
Subject key identifier:   08:4A:1C:FF:7B:9D:6B:61:E9:E1:A8:3F:26:40:96:5F:26:CB:FB:6E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       64
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CEoc_3uda2Hp4ag_JkCWXybL-24.roa
Signing time:             Fri 10 Feb 2023 07:43:35 +0000
ROA not before:           Fri 10 Feb 2023 07:43:35 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.54/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:35 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=084A1CFF7B9D6B61E9E1A83F2640965F26CBFB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:a4:60:ab:6f:21:00:e5:db:ab:90:5c:a9:
                    70:b8:2c:58:e4:6d:ed:d7:8e:ab:ed:d7:a4:bf:91:
                    94:c7:56:06:a9:d7:7a:36:36:d0:b9:d0:bf:57:d5:
                    e7:3e:ca:25:31:4c:46:ea:e5:9d:d0:6b:b0:83:d7:
                    fb:fa:f1:71:ea:ce:a2:cb:7e:c7:6d:ab:cc:99:66:
                    25:a2:25:e2:bb:22:3f:16:3e:2a:cc:0c:dc:e4:e3:
                    9c:a9:7d:39:68:48:be:aa:5e:dd:cb:a8:de:00:c2:
                    b1:f0:db:d9:fa:9f:86:6a:3d:48:92:0e:0e:b4:e0:
                    35:67:d9:76:65:6e:47:c8:80:28:53:5b:31:73:29:
                    46:48:dc:b8:8e:e8:7f:48:ae:ad:9d:6f:10:c1:dd:
                    7a:c0:79:11:4e:71:a9:25:fa:41:45:d0:c8:bf:a7:
                    4f:9a:1e:bf:c2:ef:61:a8:98:5f:3e:76:7a:b6:cf:
                    41:02:4d:e1:15:df:c1:0c:d1:d1:8a:73:a9:94:cf:
                    51:7d:49:d6:e2:43:84:e3:d5:8b:40:20:fc:d8:ba:
                    14:12:7d:83:08:76:e8:eb:fe:04:c2:a9:95:9e:c0:
                    a3:01:1c:79:86:88:51:3a:25:af:62:05:de:62:f8:
                    99:c5:06:a3:a6:73:6b:a6:6c:da:b0:16:26:9f:8e:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4A:1C:FF:7B:9D:6B:61:E9:E1:A8:3F:26:40:96:5F:26:CB:FB:6E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CEoc_3uda2Hp4ag_JkCWXybL-24.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.54/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:8d:82:14:42:f7:90:4d:a8:f6:b3:04:e4:d0:88:ee:21:
         9d:98:4f:89:8e:23:ab:74:04:2b:19:6f:bf:bb:b0:94:7d:8b:
         36:ec:b7:94:78:aa:f0:f8:da:15:cc:41:c8:a0:0e:7a:8d:db:
         0b:3b:03:c2:7e:3d:6a:23:bf:d3:db:a2:a6:51:26:94:87:2b:
         e0:75:ed:51:97:2b:db:81:c8:2d:c9:ee:05:06:3d:b3:ba:aa:
         4a:77:20:86:4c:ab:b9:ac:e8:40:5c:2d:3b:f9:d9:27:cf:3b:
         4d:e8:e4:2a:d0:60:6a:37:ca:0e:4e:bd:dd:39:6a:ef:33:7e:
         5b:75:33:a5:ce:ee:1d:09:9f:86:92:f0:e1:a2:8d:4b:1d:05:
         2e:5c:de:77:a7:82:01:15:bc:73:68:f6:08:f6:8f:42:9b:22:
         a1:48:55:f6:83:fd:41:45:b2:82:71:a0:49:15:e8:dd:63:3d:
         c4:d1:1d:5c:d1:54:59:50:03:59:e8:e1:a0:9f:8b:be:72:4d:
         1b:95:00:01:df:98:b4:40:73:f4:b5:88:27:88:52:c8:c8:cf:
         08:5d:aa:2b:80:e9:76:c4:28:c4:7a:f4:85:c1:a6:9d:46:fc:
         24:97:9c:87:66:fa:8e:2c:6a:e6:e0:fe:e5:24:be:84:d0:67:
         fe:76:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:44:06 2025 by rpki-client