Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FwRtCC5Xlxhh16t8kDhHghfMqjs.roa
File:                     FwRtCC5Xlxhh16t8kDhHghfMqjs.roa (raw, json)
Hash identifier:          tfOUxJy8+AuzIGaMSjLmKh9c2rswjz85aG8beI4wp+o=
Subject key identifier:   17:04:6D:08:2E:57:97:18:61:D7:AB:7C:90:38:47:82:17:CC:AA:3B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       9E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FwRtCC5Xlxhh16t8kDhHghfMqjs.roa
Signing time:             Fri 10 Feb 2023 07:45:43 +0000
ROA not before:           Fri 10 Feb 2023 07:45:43 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.198/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:43 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=17046D082E57971861D7AB7C9038478217CCAA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:f3:dc:b2:cf:97:b6:8d:54:07:6e:26:6f:
                    05:54:e3:f1:de:e3:eb:8a:74:f6:82:71:95:28:b3:
                    5a:96:46:bf:dc:f6:36:53:ed:c7:14:17:ad:2f:0e:
                    6f:6f:b9:a6:4e:5e:d7:41:6b:f0:da:a1:25:ca:cd:
                    65:83:2c:a0:44:28:a0:8b:c0:3e:5f:9b:54:cd:cc:
                    f5:6c:4b:f1:ad:f9:db:c8:db:c5:ca:6a:9f:98:f0:
                    8f:fd:d2:21:99:fd:57:05:7c:84:85:b9:df:75:49:
                    3d:ee:c6:a0:42:09:e8:32:46:91:f6:63:77:d9:80:
                    ec:8e:a4:eb:6e:a8:dd:92:1f:7a:6e:4a:d2:5a:d0:
                    99:ec:69:91:b5:84:64:0d:e3:2c:9f:80:b8:b2:85:
                    31:5b:31:48:8d:73:5a:07:1d:87:67:fe:36:d2:0b:
                    4f:14:51:4e:93:44:3a:f1:bb:91:fe:75:f7:5a:f2:
                    e8:a2:0b:04:ab:ee:ef:d5:aa:cc:56:17:92:4c:0e:
                    53:e1:20:9a:e6:3d:14:db:77:f6:9e:96:1e:b7:55:
                    ff:85:37:46:0b:29:e0:84:e6:0a:d3:76:f1:e9:e2:
                    c7:0f:6a:ff:d8:d9:fe:cb:b6:25:71:4b:d5:83:fe:
                    b5:81:5b:33:33:e9:ba:1d:34:49:e0:09:37:a0:19:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:6D:08:2E:57:97:18:61:D7:AB:7C:90:38:47:82:17:CC:AA:3B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FwRtCC5Xlxhh16t8kDhHghfMqjs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.198/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:19:f3:e8:e9:c7:ee:23:fd:74:02:c0:a0:91:2a:d6:59:
         f0:9f:17:7b:7f:a4:2e:e8:90:11:27:72:f7:db:89:5b:1c:35:
         fc:83:db:e4:1b:5a:00:2f:f1:55:e2:0f:cf:b7:c9:dc:1d:16:
         20:ca:d8:b8:d3:18:34:0d:07:de:03:7a:07:b5:70:89:b2:7e:
         ac:53:e9:1f:35:ae:83:de:55:c3:8f:f5:5d:71:ed:33:b7:d5:
         1a:f4:0f:6b:cf:df:0e:f1:44:53:56:c5:a4:37:4b:95:cd:eb:
         20:fa:17:65:9b:49:c0:a6:b3:0c:90:60:cd:b1:a8:a9:01:25:
         fa:ff:25:e3:14:ea:ce:95:85:07:b2:2d:e7:bb:0b:ed:2a:ed:
         fe:6a:d6:8a:18:d9:42:1f:12:14:aa:7d:e9:c5:a7:2d:09:54:
         3d:2d:37:5d:30:c1:b5:1b:b4:19:23:24:9e:34:c7:55:cf:11:
         c3:56:82:10:69:30:96:d8:54:f4:52:3e:c2:2d:86:9e:41:8c:
         d7:9d:de:5f:de:38:e0:81:25:9d:3b:e3:a6:83:a4:b0:8e:7d:
         d9:d3:1a:77:4e:65:9d:5c:3e:ec:f5:0f:cd:83:bb:cc:9e:49:
         99:3d:e7:38:84:cb:92:b3:2c:6e:3d:c5:ff:b3:85:bc:2c:dc:
         3a:ce:63:30
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1NDNaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3MDQ2RDA4MkU1Nzk3
MTg2MUQ3QUI3QzkwMzg0NzgyMTdDQ0FBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg5/Pcss+Xto1UB24mbwVU4/He4+uKdPaCcZUos1qWRr/c9jZT
7ccUF60vDm9vuaZOXtdBa/DaoSXKzWWDLKBEKKCLwD5fm1TNzPVsS/Gt+dvI28XK
ap+Y8I/90iGZ/VcFfISFud91ST3uxqBCCegyRpH2Y3fZgOyOpOtuqN2SH3puStJa
0JnsaZG1hGQN4yyfgLiyhTFbMUiNc1oHHYdn/jbSC08UUU6TRDrxu5H+dfda8uii
CwSr7u/VqsxWF5JMDlPhIJrmPRTbd/aelh63Vf+FN0YLKeCE5grTdvHp4scPav/Y
2f7LtiVxS9WD/rWBWzMz6bodNEngCTegGYFPAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUFwRtCC5Xlxhh16t8kDhHghfMqjswHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9Gd1J0Q0M1WGx4aGgxNnQ4a0RoSGdoZk1xanMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaxjANBgkqhkiG9w0BAQsFAAOCAQEAk9AZ8+jpx+4j/XQCwKCR
KtZZ8J8Xe3+kLuiQESdy99uJWxw1/IPb5BtaAC/xVeIPz7fJ3B0WIMrYuNMYNA0H
3gN6B7VwibJ+rFPpHzWug95Vw4/1XXHtM7fVGvQPa8/fDvFEU1bFpDdLlc3rIPoX
ZZtJwKazDJBgzbGoqQEl+v8l4xTqzpWFB7It57sL7Srt/mrWihjZQh8SFKp96cWn
LQlUPS03XTDBtRu0GSMknjTHVc8Rw1aCEGkwlthU9FI+wi2GnkGM153eX9444IEl
nTvjpoOksI592dMad05lnVw+7PUPzYO7zJ5JmT3nOITLkrMsbj3F/7OFvCzcOs5j
MA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:33 2025 by rpki-client