Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLS8zNbjdMbpjTM8roq32bhfvqk.roa
File:                     XLS8zNbjdMbpjTM8roq32bhfvqk.roa (raw, json)
Hash identifier:          nrWwibli8Pvy2PWHN6GmS1tjnr8F/B7cyw2Wqq0U0uQ=
Subject key identifier:   5C:B4:BC:CC:D6:E3:74:C6:E9:8D:33:3C:AE:8A:B7:D9:B8:5F:BE:A9
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       6C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLS8zNbjdMbpjTM8roq32bhfvqk.roa
Signing time:             Fri 10 Feb 2023 07:43:38 +0000
ROA not before:           Fri 10 Feb 2023 07:43:38 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.86/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:38 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=5CB4BCCCD6E374C6E98D333CAE8AB7D9B85FBEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:9e:9b:3d:72:ae:07:ab:96:87:6a:4f:e5:
                    b1:4b:11:08:d8:c9:b8:f5:03:ea:b6:4d:82:78:e1:
                    fe:1c:46:0b:96:18:61:b2:6f:cd:ae:48:31:f7:9f:
                    ae:94:52:1e:a9:24:33:d0:de:74:99:6e:51:26:07:
                    98:59:90:71:ba:2e:c0:8a:d9:78:ad:6d:bb:7a:a4:
                    ff:d2:f4:7d:82:ad:3a:9a:d9:de:ab:62:10:c6:14:
                    f1:ea:fb:3a:5d:53:67:67:31:1a:aa:19:d4:7f:75:
                    7c:3b:87:94:70:c6:b2:7c:88:ae:78:29:1d:9e:dc:
                    04:d4:19:24:9a:39:20:5c:90:98:48:eb:90:6e:1d:
                    5c:e5:03:44:64:79:c1:ca:74:7c:f9:0f:56:36:cd:
                    49:b6:5b:35:e2:ae:b6:aa:5e:23:e1:59:51:c9:51:
                    69:c6:0e:f5:5c:1a:16:86:b1:31:fb:e7:62:f5:e4:
                    ae:63:fe:8b:33:5d:9b:5f:99:7a:ef:eb:86:0e:6c:
                    dc:8d:d6:b6:76:6c:ae:33:63:c5:bd:b3:8b:b9:0e:
                    52:1f:a6:eb:f2:41:fa:27:21:11:94:78:c3:0b:79:
                    77:f3:09:96:b0:af:91:07:81:7f:ec:04:92:a3:72:
                    c1:db:95:c2:87:30:6f:05:78:68:c7:bf:b1:5e:f1:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:BC:CC:D6:E3:74:C6:E9:8D:33:3C:AE:8A:B7:D9:B8:5F:BE:A9
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLS8zNbjdMbpjTM8roq32bhfvqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.86/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:d3:4d:01:bd:2d:f8:77:df:ed:fc:ce:e8:a6:89:32:94:
         8e:14:dd:a1:ca:0e:2d:7f:ea:04:28:a7:5c:2b:f1:1c:ce:dd:
         3f:86:8b:e8:db:4e:23:ca:a1:80:a2:f8:d4:57:ba:97:71:8a:
         2c:20:2c:bb:f8:7b:2d:88:5b:d0:58:a9:05:5c:3a:6a:1c:c9:
         91:5f:64:e3:3f:38:ca:ef:0f:30:3f:6d:9e:25:f7:9d:34:ad:
         9c:fc:2e:56:52:01:45:fb:9a:3e:83:00:9a:ff:58:7a:fc:39:
         3e:46:f8:94:fd:7f:0a:64:52:7c:60:7d:42:d8:92:06:be:7a:
         a0:b8:43:e6:54:03:56:f4:95:5c:3d:3b:83:e7:2d:8e:cd:bc:
         1e:95:ca:97:a0:dc:c6:0e:b0:b1:11:7f:fd:68:88:c7:e9:42:
         ed:94:b5:5b:7e:98:ea:80:bf:4b:94:bb:b4:58:74:48:7e:a1:
         66:1b:63:65:fb:e1:8e:a0:27:e6:89:29:eb:3f:e2:7b:42:02:
         1c:97:be:4b:9c:71:19:5f:29:3b:9a:1b:67:f4:d9:33:0d:3e:
         b2:99:10:33:bc:c1:78:cb:24:c0:b9:32:06:62:37:80:69:61:
         b3:e0:5a:64:ce:58:46:06:61:2a:1c:2d:20:c7:97:18:ae:f9:
         d7:b7:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:34 2025 by rpki-client