Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KGm_08r5zcvLPwsVqy19dSlHna8.roa
File:                     KGm_08r5zcvLPwsVqy19dSlHna8.roa (raw, json)
Hash identifier:          z+XPQxSXYYmOvgwQnouQOPOjvxdPEvsmEJBtnykzZ8E=
Subject key identifier:   28:69:BF:D3:CA:F9:CD:CB:CB:3F:0B:15:AB:2D:7D:75:29:47:9D:AF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02D5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KGm_08r5zcvLPwsVqy19dSlHna8.roa
Signing time:             Mon 20 Feb 2023 08:07:31 +0000
ROA not before:           Mon 20 Feb 2023 08:07:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.205/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2869BFD3CAF9CDCBCB3F0B15AB2D7D7529479DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:5d:39:95:59:eb:bb:53:1c:7c:6c:1d:fb:
                    b7:c7:93:c9:60:79:26:e1:59:e3:ba:9c:cb:c4:01:
                    a8:f0:5d:6b:39:7e:6e:e8:2f:54:2b:97:29:04:95:
                    aa:c5:e3:dd:0d:62:e3:c2:81:2a:82:22:05:f6:82:
                    78:5f:a5:d2:00:20:60:6d:b3:6b:73:11:81:c5:e3:
                    74:60:6d:35:3e:02:f5:b6:00:68:04:f9:7e:cd:a4:
                    d8:63:19:db:33:e4:dc:2b:5e:3f:a0:63:4e:53:62:
                    a5:03:50:89:78:59:56:d6:9f:0c:7d:18:99:2b:8f:
                    bd:66:91:7e:db:a5:05:22:25:7a:7a:76:ee:b8:44:
                    08:61:58:13:97:97:fd:83:c2:35:d6:5f:3c:51:ba:
                    3d:15:d2:b4:41:b0:53:70:8d:c9:53:f9:69:c3:be:
                    b4:90:45:97:85:d7:d7:05:fe:92:69:17:8f:c4:ba:
                    ae:ac:78:4a:a5:38:75:3f:b2:15:cf:24:b2:83:cc:
                    dd:31:b2:b2:e3:df:ba:eb:a3:6d:e4:bb:09:e6:04:
                    67:3e:7b:61:6a:fe:0a:02:e7:b1:a6:96:9e:cc:3b:
                    cd:81:7b:ed:2a:96:a2:d3:f7:1c:fd:82:c0:51:e3:
                    23:22:f4:7c:85:86:7b:94:62:68:84:20:da:d3:86:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:BF:D3:CA:F9:CD:CB:CB:3F:0B:15:AB:2D:7D:75:29:47:9D:AF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KGm_08r5zcvLPwsVqy19dSlHna8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.205/32

    Signature Algorithm: sha256WithRSAEncryption
         92:65:f7:40:7c:9d:26:f6:92:32:87:ec:d3:51:e2:66:a0:78:
         bf:2e:74:3e:4a:5c:9b:db:50:c7:a2:4e:c9:ec:b6:94:79:5c:
         26:e6:25:04:48:db:37:a5:ce:38:66:00:54:a3:ff:4b:5f:38:
         57:47:bb:34:ea:59:fe:32:3c:78:3b:82:18:24:d2:57:e1:72:
         03:e4:50:ee:70:a9:6c:ab:3b:ce:27:20:ee:81:21:7d:93:7f:
         1b:de:80:e1:d7:f7:c3:15:34:20:1d:6e:9c:0d:eb:da:2a:23:
         ca:79:b5:35:18:dd:2d:aa:2c:43:46:9a:50:33:c8:62:49:71:
         31:20:c7:6f:2a:c7:85:19:1d:e1:e7:79:5b:3b:29:75:5b:e4:
         ff:fe:1f:0e:4e:91:c4:e2:3a:ba:8c:fe:5e:25:4a:49:38:be:
         98:c7:4d:39:94:5e:5b:bd:35:42:4b:85:5e:ea:c3:cb:c4:0d:
         3a:7d:88:43:c6:99:70:58:cc:82:72:b3:5d:de:86:26:1e:82:
         19:1c:f0:5b:fc:9d:26:fb:d8:08:f5:bd:38:35:36:85:b2:7d:
         95:c7:f7:91:1e:f5:d3:c8:40:52:d7:72:33:b4:fe:76:04:25:
         11:a9:d3:d3:b3:1b:19:7a:23:79:80:b9:9d:15:b3:eb:4b:b5:
         41:31:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:43:51 2025 by rpki-client