Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GnGz5hIPacuNp8_tMmtkaPfWFYE.roa
File:                     GnGz5hIPacuNp8_tMmtkaPfWFYE.roa (raw, json)
Hash identifier:          cNc14qCtre9yIH69B9d8eIBaVnC1WNfYXkBO2nPCoAs=
Subject key identifier:   1A:71:B3:E6:12:0F:69:CB:8D:A7:CF:ED:32:6B:64:68:F7:D6:15:81
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GnGz5hIPacuNp8_tMmtkaPfWFYE.roa
Signing time:             Mon 20 Feb 2023 08:07:26 +0000
ROA not before:           Mon 20 Feb 2023 08:07:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.249/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1A71B3E6120F69CB8DA7CFED326B6468F7D61581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:05:f3:22:dd:2b:6f:86:c0:c6:9c:73:7d:
                    27:43:13:13:08:43:68:ff:c4:82:c3:86:b7:02:0a:
                    09:0a:8d:9b:b9:57:43:1a:0f:07:7c:44:83:51:9c:
                    e5:01:49:81:ba:47:c8:aa:44:f2:ea:7f:d5:c6:16:
                    01:e7:93:a1:01:39:05:0c:32:56:72:81:e1:f0:c6:
                    29:14:d7:e3:18:5d:a3:dc:f0:be:98:56:42:f0:d6:
                    7d:92:7e:e3:af:cc:03:78:2d:ab:8c:0b:0d:a4:8e:
                    0e:2c:1d:56:9e:70:92:f8:31:14:96:98:06:e9:47:
                    44:cc:92:96:6a:be:78:20:2b:81:35:95:10:10:f1:
                    89:67:06:28:28:a0:6c:6d:d3:3c:24:bc:23:69:19:
                    23:b4:da:98:24:58:ca:22:2c:53:45:1c:f3:ec:dd:
                    6d:25:f5:b4:a4:3a:12:c7:70:7b:88:25:9e:20:f5:
                    20:6a:ca:15:28:37:76:57:e9:1a:72:d9:3f:2e:79:
                    20:b1:6c:56:14:47:30:a8:b4:24:c7:b8:bd:75:47:
                    af:57:8d:5a:44:b9:b6:7c:55:e0:64:ec:14:b0:63:
                    16:c8:2f:b2:13:c0:17:45:61:0d:31:c1:e8:60:68:
                    4e:cd:1b:6d:9a:44:0b:2c:cc:1b:65:03:f7:4a:a9:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:B3:E6:12:0F:69:CB:8D:A7:CF:ED:32:6B:64:68:F7:D6:15:81
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GnGz5hIPacuNp8_tMmtkaPfWFYE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.249/32

    Signature Algorithm: sha256WithRSAEncryption
         78:12:39:dc:7d:c7:4b:68:84:c5:14:9d:8f:6e:d7:7e:ac:bf:
         62:81:c6:9b:93:6b:71:46:e6:e8:70:27:f7:c0:d8:82:6a:a1:
         c9:1b:c5:a2:2e:96:ae:9a:7c:d7:6b:1e:a3:79:bd:83:ed:95:
         11:c3:26:d6:d4:fa:e3:5d:8d:7c:0a:d7:fb:ea:67:98:e8:e6:
         b5:62:3a:86:43:cc:21:fa:67:e6:83:39:b0:8a:95:05:90:86:
         8f:65:9d:83:b4:d0:57:7a:29:70:dd:ca:f6:16:b9:68:27:05:
         45:bb:ab:2b:95:52:e3:60:d0:35:3e:1a:1b:fe:0a:78:83:ca:
         cc:8c:da:dc:1c:7f:e6:37:03:53:0a:52:cf:bf:a6:e4:35:cf:
         d2:12:b2:e7:1a:17:74:68:45:be:d8:22:85:b7:62:ff:35:d2:
         55:16:b7:9b:c8:8e:0b:b6:30:39:ac:f1:ab:ab:44:5a:7c:cf:
         19:2a:3c:9d:a5:b0:6d:14:d3:9c:d5:2d:eb:ee:47:fb:17:49:
         5d:8a:ba:e4:0f:fb:49:c7:7e:75:bc:5b:c1:b2:4f:03:75:cb:
         40:4e:d4:16:90:00:5e:0d:77:2b:24:83:3e:b4:80:e3:5d:0c:
         f9:8a:2b:b1:02:11:47:e4:1e:64:b4:05:1c:aa:e4:b9:a6:97:
         4e:07:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:17:41 2025 by rpki-client