Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L1nnSb2yXb3DVC3POK65R_-3U8M.roa
File:                     L1nnSb2yXb3DVC3POK65R_-3U8M.roa (raw, json)
Hash identifier:          ea42wbUrUaAm0MgRcoaegoaEPdPJs0eUQca7WrfFUB0=
Subject key identifier:   2F:59:E7:49:BD:B2:5D:BD:C3:54:2D:CF:38:AE:B9:47:FF:B7:53:C3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       83
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L1nnSb2yXb3DVC3POK65R_-3U8M.roa
Signing time:             Fri 10 Feb 2023 07:45:32 +0000
ROA not before:           Fri 10 Feb 2023 07:45:32 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.70/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:32 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2F59E749BDB25DBDC3542DCF38AEB947FFB753C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:4f:9e:57:a3:95:48:b2:fe:6c:99:11:23:
                    bd:f9:6b:20:32:a2:c9:13:b5:39:3b:e2:8c:0e:f1:
                    27:0a:c7:10:cc:43:9f:b8:37:a5:1d:82:dd:24:eb:
                    cd:6b:bd:72:d3:90:cc:81:e2:f1:07:92:63:f8:1b:
                    3a:7e:52:85:78:06:33:59:4e:77:bd:d0:66:c7:ea:
                    0f:16:6a:39:df:f8:be:c6:76:2a:d7:bb:36:6a:80:
                    d2:2b:e7:a7:3c:1a:bd:43:f0:ad:f8:15:7e:4a:0b:
                    7b:63:6b:f1:e5:be:a8:d1:58:8f:a7:57:5e:18:6f:
                    9d:24:9f:47:7f:80:83:0f:d5:54:a9:7b:16:36:fb:
                    10:7e:29:85:33:da:73:ac:77:b2:1b:48:38:64:3a:
                    e6:2e:39:91:77:57:b8:4c:a3:ea:ad:11:16:bb:8d:
                    c8:1e:20:7b:4d:80:4a:8e:aa:7c:4d:c4:79:66:d3:
                    e1:0f:64:fb:98:7a:60:64:f5:67:6d:3b:c3:93:84:
                    30:32:82:46:51:30:d6:02:d6:16:e5:65:81:71:c2:
                    ca:9c:e6:1a:79:92:93:73:6c:91:c5:68:ed:09:36:
                    7c:6a:dc:4c:57:49:4a:8c:c6:db:47:f1:a2:5c:c6:
                    01:e8:78:b2:35:2d:d2:3d:03:0a:bf:26:15:aa:0f:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:E7:49:BD:B2:5D:BD:C3:54:2D:CF:38:AE:B9:47:FF:B7:53:C3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L1nnSb2yXb3DVC3POK65R_-3U8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.70/32

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:81:a4:7f:fb:f4:aa:53:60:f2:c6:2a:b8:ce:c9:12:f7:
         fa:ed:20:c3:22:8f:ea:49:2f:3d:5b:24:18:10:c7:ba:43:20:
         8c:cb:3c:a7:66:1c:38:5b:ff:2c:d0:b1:a4:81:c3:6a:40:e2:
         45:4f:7a:26:45:bc:4a:dd:08:04:5c:92:e8:92:aa:20:9c:52:
         11:ed:f6:97:a8:d6:42:a9:35:22:28:db:30:f3:55:87:d8:e5:
         81:35:80:fc:e8:0e:55:55:42:5b:0a:19:7c:23:8c:01:26:e1:
         d2:2f:b6:39:3e:48:75:f2:16:36:05:0d:45:d6:6e:70:dc:6b:
         01:81:41:b5:d2:6f:3c:d1:2e:1f:ae:24:a7:6e:02:57:14:a2:
         9d:04:2a:8a:6b:19:90:fd:e3:86:d1:3f:fe:71:da:eb:77:68:
         2d:af:a6:a9:e1:39:17:7f:e6:bd:2e:a4:8e:f4:f0:75:e0:26:
         3c:d7:93:1f:09:54:ca:3f:b6:fd:f0:45:87:2c:a4:0a:26:1f:
         5a:d9:3f:a5:01:cf:c2:35:db:b5:5e:b7:6a:6d:17:60:11:4c:
         13:47:cd:bb:bd:ee:5a:b2:01:83:18:15:41:d8:1e:be:0a:e6:
         9a:6b:ce:3e:29:33:3b:a9:f7:0e:5f:35:a0:56:ef:e3:e1:84:
         13:bc:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:38:55 2025 by rpki-client