Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TTzk9rnGuxFK5ZlU5r4x6woMkMI.roa
File:                     TTzk9rnGuxFK5ZlU5r4x6woMkMI.roa (raw, json)
Hash identifier:          jXsh9Qw/RslQ5Loxql8XJJwmRlpKhLFoJP69KPF+kDg=
Subject key identifier:   4D:3C:E4:F6:B9:C6:BB:11:4A:E5:99:54:E6:BE:31:EB:0A:0C:90:C2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       2F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TTzk9rnGuxFK5ZlU5r4x6woMkMI.roa
Signing time:             Fri 10 Feb 2023 07:39:09 +0000
ROA not before:           Fri 10 Feb 2023 07:39:09 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.212/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:09 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=4D3CE4F6B9C6BB114AE59954E6BE31EB0A0C90C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:5f:62:f1:c3:15:70:71:d9:41:23:b8:6d:
                    c2:ee:66:1d:3d:5d:59:58:6d:39:42:de:13:b0:c0:
                    57:06:26:64:7b:8e:5b:4c:4d:4b:4b:a9:c1:9a:61:
                    22:01:50:c3:07:e8:b3:80:be:11:47:88:63:1f:ff:
                    77:27:76:7c:43:32:20:84:e2:a0:06:d4:f5:02:cd:
                    2b:d5:35:19:c1:91:7c:38:e6:b2:48:39:e2:ec:c8:
                    1c:0f:84:ea:17:b3:cb:ba:7c:da:a9:9e:f1:33:78:
                    ab:5c:7f:91:96:90:c6:47:34:f6:80:b6:4e:88:26:
                    aa:f8:4b:aa:15:c6:a4:7c:f4:25:64:eb:9e:50:5b:
                    97:c1:16:e5:2d:e8:85:db:d5:3c:39:1c:e2:d5:74:
                    66:71:14:f0:dc:4f:8a:d4:21:f4:ae:24:52:dc:da:
                    5b:68:ae:a1:1a:b9:ad:35:39:89:9f:c5:7d:2a:c7:
                    59:9d:b2:08:af:d8:60:7a:9a:c5:b1:76:a4:5f:f0:
                    ad:4c:e8:e2:a3:68:19:d6:c1:81:98:0f:1b:1e:fb:
                    16:d3:f0:35:f5:fa:ba:d4:e5:4a:81:65:78:6a:7b:
                    6a:3b:a7:3e:8c:32:60:ce:7b:66:03:93:51:b0:3c:
                    62:1e:7e:a0:60:d4:0f:68:ef:18:c0:e5:5b:43:78:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:E4:F6:B9:C6:BB:11:4A:E5:99:54:E6:BE:31:EB:0A:0C:90:C2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TTzk9rnGuxFK5ZlU5r4x6woMkMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.212/32

    Signature Algorithm: sha256WithRSAEncryption
         54:43:00:1c:68:ac:a9:fb:9d:06:2c:8b:23:36:ec:13:39:75:
         19:c5:61:6a:c9:4f:0b:9c:d2:3e:c7:7e:64:8a:2c:3f:9b:6a:
         f4:c2:51:be:37:d1:16:1c:fa:c1:40:88:38:24:f0:60:ad:27:
         54:a6:38:67:e8:36:af:a8:63:58:47:29:ff:00:da:9c:d3:26:
         5f:e5:e4:da:61:52:f6:c5:b9:53:fb:b0:ee:e1:a7:6d:eb:79:
         8e:12:bc:04:74:58:8d:17:84:4f:cf:d4:98:09:07:80:04:cf:
         18:eb:49:ea:59:b7:86:c6:61:93:f0:71:bf:c2:20:e9:06:7d:
         35:b3:1a:e3:73:42:1f:9b:73:07:c9:c3:54:c7:bd:98:a5:b0:
         f5:62:a9:0a:c3:db:1c:88:41:a9:8d:14:48:16:0a:8e:48:55:
         15:68:79:f1:3e:ce:a6:ec:13:64:05:70:65:24:ac:3e:b5:1c:
         b9:77:33:23:22:c6:52:d5:fc:1a:9e:d1:d0:c1:70:2b:84:5f:
         a1:f4:bb:fc:65:f8:fe:4e:db:8c:48:44:af:19:fe:c2:57:ba:
         72:2d:64:11:28:6a:fb:8a:fa:35:27:7f:3e:19:5d:94:d3:ef:
         9a:c1:77:eb:03:bd:b7:6c:05:8a:52:82:90:cd:45:ae:44:0f:
         4d:5b:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:21:28 2025 by rpki-client