Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P2kZ804tmp5yvb8bh87ppDElRPQ.roa
File:                     P2kZ804tmp5yvb8bh87ppDElRPQ.roa (raw, json)
Hash identifier:          DU8culFKxE72BwAXovK44koOAXKfg4ZLL+0jctAl8jg=
Subject key identifier:   3F:69:19:F3:4E:2D:9A:9E:72:BD:BF:1B:87:CE:E9:A4:31:25:44:F4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       A1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P2kZ804tmp5yvb8bh87ppDElRPQ.roa
Signing time:             Fri 10 Feb 2023 07:45:44 +0000
ROA not before:           Fri 10 Feb 2023 07:45:44 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.66/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:44 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=3F6919F34E2D9A9E72BDBF1B87CEE9A4312544F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:24:00:d6:dc:64:fd:4c:40:56:46:da:ce:
                    3d:64:e0:69:bb:61:10:87:5c:67:bc:90:46:92:db:
                    3e:30:69:b1:60:e1:9d:63:f1:16:84:bd:78:8a:a9:
                    2b:07:85:ae:d9:d3:a5:c9:67:f6:ef:df:95:bb:c2:
                    90:4f:83:b8:3e:b1:3b:76:d1:31:45:d8:67:8f:7b:
                    80:55:27:60:1f:f0:94:a5:89:8b:c7:43:8b:88:5a:
                    3a:81:f9:28:a9:43:c2:99:02:39:e9:a0:c2:db:ee:
                    a5:67:13:d4:9a:ba:cd:d3:ea:bc:a8:5d:13:cb:5f:
                    29:28:d8:80:c0:57:0b:e7:46:07:f5:d7:75:43:89:
                    9e:5a:36:c3:60:0a:83:a4:9c:1e:d7:39:7f:2d:b3:
                    08:77:aa:a8:df:8c:75:4c:92:dd:b0:10:ae:1e:ac:
                    23:5e:9e:f2:68:72:e3:7c:22:e1:53:2f:99:a0:5b:
                    cc:c8:b5:86:4e:b2:08:bd:94:6a:63:37:44:e6:30:
                    d8:07:10:03:4a:89:6f:b6:e5:aa:f8:f2:31:ef:d4:
                    d5:59:f2:ad:b3:c5:3c:6d:59:ab:da:9d:c3:1f:ca:
                    1c:e2:fb:5e:89:40:8a:be:76:b7:0d:c5:7b:ab:32:
                    5e:9b:be:bd:55:15:2d:bf:a6:3a:d5:fc:fb:cf:20:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:19:F3:4E:2D:9A:9E:72:BD:BF:1B:87:CE:E9:A4:31:25:44:F4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P2kZ804tmp5yvb8bh87ppDElRPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.66/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:ee:9a:16:ce:8c:da:24:0b:59:fc:a1:4e:89:d6:ae:88:
         67:48:89:f2:8d:91:a2:67:8b:c5:db:e7:0b:7d:80:2c:91:c2:
         5c:82:5e:6f:bf:6e:c3:d5:d7:c5:a8:24:1a:16:44:49:55:50:
         1e:cc:6c:8d:3d:19:54:b7:82:cb:a3:5e:96:4d:c1:f8:6f:55:
         f2:a7:42:5d:76:91:23:6d:f0:2c:fd:f2:ba:e5:31:3b:fc:29:
         a7:ed:e7:f4:11:2f:29:5c:76:cf:05:59:d1:6b:a0:30:94:94:
         9f:5f:b3:0e:88:a7:aa:fc:3e:e0:f8:7b:7e:b1:83:8f:46:d2:
         b4:a4:f9:29:82:8d:19:0c:1a:1e:09:5c:54:42:e7:79:18:aa:
         47:8f:e4:5b:6d:9b:cd:da:0f:da:81:2e:43:9b:bf:9d:17:6e:
         bf:70:5b:48:62:d4:de:5b:c7:6d:db:f1:17:60:64:f1:22:c2:
         f1:7f:e6:68:fd:73:ca:1a:a5:38:fe:36:87:59:d8:44:84:6e:
         35:e6:e2:70:ec:f8:97:a7:f3:76:87:ce:f4:4d:28:06:a9:62:
         d5:3f:9a:cd:d9:19:56:06:92:73:0b:fd:77:19:ed:f2:dc:c7:
         d2:da:bc:4e:b0:20:ad:5e:b1:c3:11:00:82:e1:cd:ac:8c:23:
         4d:85:bc:a9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1NDRaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGNjkxOUYzNEUyRDlB
OUU3MkJEQkYxQjg3Q0VFOUE0MzEyNTQ0RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsYiQA1txk/UxAVkbazj1k4Gm7YRCHXGe8kEaS2z4wabFg4Z1j
8RaEvXiKqSsHha7Z06XJZ/bv35W7wpBPg7g+sTt20TFF2GePe4BVJ2Af8JSliYvH
Q4uIWjqB+SipQ8KZAjnpoMLb7qVnE9Saus3T6ryoXRPLXyko2IDAVwvnRgf113VD
iZ5aNsNgCoOknB7XOX8tswh3qqjfjHVMkt2wEK4erCNenvJocuN8IuFTL5mgW8zI
tYZOsgi9lGpjN0TmMNgHEANKiW+25ar48jHv1NVZ8q2zxTxtWavancMfyhzi+16J
QIq+drcNxXurMl6bvr1VFS2/pjrV/PvPIEK1AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUP2kZ804tmp5yvb8bh87ppDElRPQwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9QMmtaODA0dG1wNXl2YjhiaDg3cHBERWxSUFEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaQjANBgkqhkiG9w0BAQsFAAOCAQEADqnumhbOjNokC1n8oU6J
1q6IZ0iJ8o2RomeLxdvnC32ALJHCXIJeb79uw9XXxagkGhZESVVQHsxsjT0ZVLeC
y6Nelk3B+G9V8qdCXXaRI23wLP3yuuUxO/wpp+3n9BEvKVx2zwVZ0WugMJSUn1+z
Doinqvw+4Ph7frGDj0bStKT5KYKNGQwaHglcVELneRiqR4/kW22bzdoP2oEuQ5u/
nRduv3BbSGLU3lvHbdvxF2Bk8SLC8X/maP1zyhqlOP42h1nYRIRuNebicOz4l6fz
dofO9E0oBqli1T+azdkZVgaScwv9dxnt8tzH0tq8TrAgrV6xwxEAguHNrIwjTYW8
qQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:36:51 2025 by rpki-client