Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SdmiBnalZLlrZqh7-DCkpG0-6Rw.roa
File:                     SdmiBnalZLlrZqh7-DCkpG0-6Rw.roa (raw, json)
Hash identifier:          Yu7MdbR+CE/+EFm9o7wWNz5DbfH/GYgFIr//QEt/dEs=
Subject key identifier:   49:D9:A2:06:76:A5:64:B9:6B:66:A8:7B:F8:30:A4:A4:6D:3E:E9:1C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02DA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SdmiBnalZLlrZqh7-DCkpG0-6Rw.roa
Signing time:             Mon 20 Feb 2023 08:07:33 +0000
ROA not before:           Mon 20 Feb 2023 08:07:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.10/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=49D9A20676A564B96B66A87BF830A4A46D3EE91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:d9:e5:97:f2:71:e2:51:45:09:ac:da:b3:
                    50:05:72:1f:87:e0:5a:2e:1d:28:d8:c2:f7:f5:e4:
                    08:61:a5:b6:57:4a:55:37:a9:aa:b3:24:56:5d:db:
                    55:c4:12:77:04:89:33:d2:f1:a0:f2:64:4e:1f:99:
                    8a:c3:a3:33:24:3e:ba:85:73:69:02:d5:38:6d:5d:
                    35:be:aa:a1:8b:9c:60:52:1d:5b:4c:28:d6:f9:f0:
                    19:d4:c0:63:11:07:d1:c0:1d:65:c7:84:b6:0e:c4:
                    9f:a1:60:b3:73:ee:9c:38:d8:22:f6:3c:a2:d4:b9:
                    36:79:af:d7:d7:c5:88:fd:c0:b5:11:8a:4a:c9:f0:
                    84:18:0f:c7:e4:ee:50:14:89:76:19:3b:f6:82:2c:
                    95:c6:8f:15:f6:7b:fd:ac:0c:ea:20:10:b6:25:35:
                    ac:bb:27:ee:1c:21:25:c1:41:cb:93:98:75:88:1c:
                    91:4d:6a:28:f7:f5:96:c4:66:e6:36:35:3c:35:bc:
                    b2:81:2b:03:be:b2:a1:ae:ce:f7:a2:83:c5:6a:b7:
                    e2:2e:4b:e0:be:b3:e0:fe:96:b5:c6:38:45:ad:f5:
                    62:f0:2c:d5:96:70:b0:0c:ce:29:74:e3:d9:fb:01:
                    d3:b7:bf:a5:dc:d6:4f:37:eb:9e:53:e1:6b:6d:73:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D9:A2:06:76:A5:64:B9:6B:66:A8:7B:F8:30:A4:A4:6D:3E:E9:1C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SdmiBnalZLlrZqh7-DCkpG0-6Rw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.10/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:ca:3d:bd:f2:25:1a:8a:29:e7:21:e1:a7:a4:63:6f:69:
         df:1b:39:98:5c:6e:58:75:e5:c3:83:56:49:f7:e3:6f:a4:2d:
         00:d2:84:c6:93:28:18:51:db:43:c2:21:95:d0:55:17:4e:f5:
         ba:b2:8d:c7:9d:01:c4:ec:0f:f3:8e:2b:b7:4e:cb:13:36:d5:
         94:08:48:47:94:4c:53:df:20:21:35:3e:f1:cd:cc:59:4d:8c:
         28:15:05:67:41:03:82:10:b3:2b:7d:e0:23:56:78:78:bd:0d:
         e0:8e:92:86:8e:21:d8:c3:4f:8c:74:c1:32:5e:6c:fc:e7:53:
         0e:4a:81:a4:81:ac:96:d4:7a:aa:f5:78:19:09:c6:18:2c:82:
         58:b2:6d:a1:5a:cc:f2:5a:a7:42:60:eb:56:55:c4:e2:03:e1:
         f4:d0:da:51:7f:4b:43:57:d1:fe:55:40:55:be:25:7a:f3:d4:
         3a:55:34:aa:cb:6b:eb:b9:47:63:dc:2c:68:ff:87:b3:f1:27:
         c6:24:3f:e6:72:01:9b:9d:24:e7:a9:81:47:71:bc:ad:f2:49:
         92:97:6c:cd:94:4b:a9:00:81:15:e2:58:59:fc:ec:8d:d7:97:
         50:31:74:bf:ef:b5:95:4f:12:2c:92:82:52:4c:b7:ee:da:f4:
         ef:96:ba:f3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA3MzNaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5RDlBMjA2NzZBNTY0
Qjk2QjY2QTg3QkY4MzBBNEE0NkQzRUU5MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ+dnll/Jx4lFFCazas1AFch+H4FouHSjYwvf15AhhpbZXSlU3
qaqzJFZd21XEEncEiTPS8aDyZE4fmYrDozMkPrqFc2kC1ThtXTW+qqGLnGBSHVtM
KNb58BnUwGMRB9HAHWXHhLYOxJ+hYLNz7pw42CL2PKLUuTZ5r9fXxYj9wLURikrJ
8IQYD8fk7lAUiXYZO/aCLJXGjxX2e/2sDOogELYlNay7J+4cISXBQcuTmHWIHJFN
aij39ZbEZuY2NTw1vLKBKwO+sqGuzveig8Vqt+IuS+C+s+D+lrXGOEWt9WLwLNWW
cLAMzil049n7AdO3v6Xc1k83655T4Wttc5EZAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUSdmiBnalZLlrZqh7+DCkpG0+6RwwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9TZG1pQm5hbFpMbHJacWg3LURDa3BHMC02Uncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcCjANBgkqhkiG9w0BAQsFAAOCAQEAZq3KPb3yJRqKKech4aek
Y29p3xs5mFxuWHXlw4NWSffjb6QtANKExpMoGFHbQ8IhldBVF071urKNx50BxOwP
844rt07LEzbVlAhIR5RMU98gITU+8c3MWU2MKBUFZ0EDghCzK33gI1Z4eL0N4I6S
ho4h2MNPjHTBMl5s/OdTDkqBpIGsltR6qvV4GQnGGCyCWLJtoVrM8lqnQmDrVlXE
4gPh9NDaUX9LQ1fR/lVAVb4levPUOlU0qstr67lHY9wsaP+Hs/EnxiQ/5nIBm50k
56mBR3G8rfJJkpdszZRLqQCBFeJYWfzsjdeXUDF0v++1lU8SLJKCUky37tr075a6
8w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:43:27 2025 by rpki-client