Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E_ofXZ3Bv0wGBUuhnPKC79VcTxg.roa
File:                     E_ofXZ3Bv0wGBUuhnPKC79VcTxg.roa (raw, json)
Hash identifier:          PWnSZTD46k5hNidDInTqntAeZ1Vvi/gLmWgswXql5kE=
Subject key identifier:   13:FA:1F:5D:9D:C1:BF:4C:06:05:4B:A1:9C:F2:82:EF:D5:5C:4F:18
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       95
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E_ofXZ3Bv0wGBUuhnPKC79VcTxg.roa
Signing time:             Fri 10 Feb 2023 07:45:39 +0000
ROA not before:           Fri 10 Feb 2023 07:45:39 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.183/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:39 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=13FA1F5D9DC1BF4C06054BA19CF282EFD55C4F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:08:b8:c1:f4:55:4f:ff:0e:d9:19:35:78:
                    34:06:d2:79:54:91:3d:28:57:ad:9c:b3:b4:a0:20:
                    06:17:d0:91:4a:8d:ad:a3:dc:c1:fd:12:91:8b:91:
                    84:91:42:0f:1d:d0:35:2f:93:33:a6:f0:c4:dd:ac:
                    cb:96:51:32:9b:88:d2:dd:bb:ea:4f:8e:0d:af:e8:
                    97:8f:05:5f:6d:2a:a5:ae:40:5f:ce:2e:97:84:22:
                    e1:76:bb:0a:00:86:78:17:18:1e:74:84:20:8a:c4:
                    76:b5:9e:cb:e3:9b:14:63:35:f3:1b:f0:46:90:c8:
                    d6:7f:72:ca:8f:30:91:dc:2d:fe:42:30:71:8e:78:
                    bb:4c:a9:93:29:8d:08:ed:de:db:06:2b:56:b9:2b:
                    08:85:8e:73:2f:8f:c5:66:79:5e:dc:8e:03:14:ef:
                    9c:3e:40:d7:db:51:8a:bd:aa:17:59:1a:21:c7:29:
                    5f:e7:32:da:94:99:29:fc:2c:f5:6f:fe:91:b5:5a:
                    27:31:c7:85:41:0e:25:d1:57:5f:b3:d2:45:05:d2:
                    cb:04:26:60:38:e3:81:3d:0b:da:0d:5d:17:c9:54:
                    10:6f:50:c2:53:7e:39:ff:dd:d5:e5:04:bb:ba:85:
                    42:79:59:9d:8b:3a:4c:b7:f2:98:53:97:82:c7:1b:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:1F:5D:9D:C1:BF:4C:06:05:4B:A1:9C:F2:82:EF:D5:5C:4F:18
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E_ofXZ3Bv0wGBUuhnPKC79VcTxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.183/32

    Signature Algorithm: sha256WithRSAEncryption
         06:91:2b:a7:72:cd:54:4a:c7:65:e8:2e:22:be:8c:da:f1:62:
         f3:e7:02:b7:73:0f:9c:94:5a:d9:27:bd:ee:e0:6d:0f:03:ec:
         d8:76:9d:83:87:cc:75:31:ba:78:87:39:8b:68:23:11:95:1e:
         56:66:8d:91:3a:71:ae:9d:7d:e2:ec:3c:4e:93:a7:97:29:43:
         00:82:9e:b8:b8:03:e2:fc:be:b6:ea:b0:8b:a3:ed:a6:22:41:
         b6:f8:96:63:89:5a:b2:34:ea:cf:08:16:4a:19:4a:4c:63:30:
         70:a2:a6:6a:73:39:d1:0a:e4:c9:8b:bb:11:14:51:e8:66:09:
         63:5b:bd:af:38:4e:2b:b5:60:7f:e5:3b:fe:3e:9c:79:0a:d5:
         69:b0:ca:06:a0:1c:b3:16:d1:99:fb:a8:49:62:ef:b2:8e:1f:
         fd:bc:15:5f:c6:e0:1a:5a:e8:4f:35:da:13:3e:35:58:30:42:
         2f:83:22:01:a4:ff:c1:6f:cc:80:c3:a3:3e:6e:a7:5f:29:cc:
         a9:f5:e8:cd:23:58:26:bb:42:80:3b:ce:ab:c7:96:61:a4:83:
         d4:e9:20:51:ac:9f:3c:3a:ae:8b:20:a1:b5:23:f4:4c:80:3e:
         30:05:3f:1d:f1:3e:16:ef:1e:98:d8:3b:96:fb:1d:83:57:4c:
         73:06:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:09:51 2025 by rpki-client