Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EuI2F7z6sk8uknwzVKXLIi2LyHs.roa
File:                     EuI2F7z6sk8uknwzVKXLIi2LyHs.roa (raw, json)
Hash identifier:          I4WpmhOT5ZgRfub2LNAmX7bMYkjyQX463C4bexI/pow=
Subject key identifier:   12:E2:36:17:BC:FA:B2:4F:2E:92:7C:33:54:A5:CB:22:2D:8B:C8:7B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       57
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EuI2F7z6sk8uknwzVKXLIi2LyHs.roa
Signing time:             Fri 10 Feb 2023 07:41:31 +0000
ROA not before:           Fri 10 Feb 2023 07:41:31 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:31 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=12E23617BCFAB24F2E927C3354A5CB222D8BC87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:2e:2f:6c:7e:2d:fc:f8:e9:e7:2b:57:5e:
                    17:49:a9:04:c9:23:6f:8a:08:55:28:4b:03:55:95:
                    e6:9d:3f:e9:c8:3d:60:69:df:f0:ee:ed:b2:05:c2:
                    dd:bd:87:ae:47:80:44:bc:0e:a7:16:fd:aa:ee:36:
                    32:45:d9:f8:8d:d8:c2:9c:7a:92:60:44:a0:98:4e:
                    4c:6a:8c:0b:95:c6:58:18:33:9e:eb:14:e5:84:cb:
                    61:f6:88:40:90:30:3e:9f:75:83:77:4f:e8:39:0c:
                    f3:b1:97:aa:55:f3:b8:f4:ed:61:30:aa:04:0c:88:
                    e3:a3:ee:a6:00:ff:31:04:eb:ea:06:79:85:4a:86:
                    50:51:22:0c:66:5e:72:9a:71:e4:92:94:aa:04:54:
                    a8:23:35:f6:7e:6b:1e:69:76:2e:fa:29:93:36:96:
                    39:7b:52:02:76:c8:ec:08:2a:24:44:64:86:a8:ab:
                    47:63:85:35:b7:c6:72:a2:47:8e:20:95:16:a6:75:
                    d7:47:ca:f2:b6:84:0c:e2:6c:cc:62:cb:92:e6:a8:
                    db:b5:56:cf:96:63:88:a7:0c:f4:c8:22:ba:5a:e8:
                    5b:2e:73:b0:d0:d4:cc:5d:ba:b8:60:43:e4:94:ee:
                    14:67:c3:92:41:82:6c:ab:c4:bb:1c:21:e0:c5:8a:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E2:36:17:BC:FA:B2:4F:2E:92:7C:33:54:A5:CB:22:2D:8B:C8:7B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EuI2F7z6sk8uknwzVKXLIi2LyHs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.30/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:ac:5d:53:ef:cf:de:dc:9e:c8:1d:cf:cb:c1:26:3f:0b:
         25:ef:37:c6:98:e9:cf:7d:cd:23:69:c3:02:b4:6d:0a:08:fe:
         82:cb:12:0b:81:93:bb:5b:c6:77:49:77:65:20:3e:5a:c5:a4:
         b6:b2:4a:a2:48:21:3c:01:9d:23:d4:94:59:67:ab:ed:7f:59:
         04:5a:b3:2d:4c:da:be:09:0d:28:58:27:ff:10:24:1a:70:43:
         f4:d0:cd:28:7b:3e:e7:60:ee:54:f5:0e:3a:03:db:8c:5b:6c:
         03:44:04:36:4e:93:5c:e6:0b:f5:b9:84:f1:23:74:77:e6:cb:
         72:3c:32:ef:4a:8a:14:ee:66:b0:9f:64:50:4c:86:29:7f:ad:
         bc:f1:80:9e:3c:7d:b5:09:fd:07:03:61:38:b6:5f:ef:17:1f:
         2b:7c:a5:2d:45:5d:3c:68:18:e8:71:0c:e5:35:9f:df:cd:8a:
         9d:9f:81:6f:f7:ed:ed:16:73:cf:c3:16:b5:4d:34:5c:f6:70:
         00:1e:d7:48:41:67:bd:f9:07:08:d1:06:55:b4:45:bf:2c:89:
         6d:91:ea:84:a5:76:28:67:e3:66:8e:1e:6d:86:8c:8d:0a:c4:
         b8:13:04:a5:a1:14:ad:ab:76:a1:c9:f4:cf:dd:b0:2e:52:d6:
         ec:1a:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:21:03 2025 by rpki-client