Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zua-DID_kUzqIX3HcWekCqSxClI.roa
File:                     Zua-DID_kUzqIX3HcWekCqSxClI.roa (raw, json)
Hash identifier:          w1Q4EWRL7hLUq7iV675IjNjb0S+1VI05Z5A26XuC3YE=
Subject key identifier:   66:E6:BE:0C:80:FF:91:4C:EA:21:7D:C7:71:67:A4:0A:A4:B1:0A:52
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       51
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zua-DID_kUzqIX3HcWekCqSxClI.roa
Signing time:             Fri 10 Feb 2023 07:41:28 +0000
ROA not before:           Fri 10 Feb 2023 07:41:28 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.152/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:28 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=66E6BE0C80FF914CEA217DC77167A40AA4B10A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:79:62:9c:8a:51:43:17:bb:94:8b:fb:3b:
                    9d:c5:0d:37:16:5d:b9:78:92:22:e2:22:e9:f0:16:
                    02:5a:9a:42:1f:b1:12:71:93:b6:ef:b0:fb:ab:2b:
                    33:cd:15:08:ee:cd:e4:4b:09:6d:cf:95:1e:a8:d3:
                    f6:9b:1b:39:f7:75:63:c6:2c:25:28:9a:0b:cf:3c:
                    54:95:6d:5d:3c:5f:9d:99:5f:44:7b:ee:49:68:61:
                    1d:6d:4b:46:3b:b9:61:03:7a:bb:5a:47:88:78:cb:
                    fc:c4:2e:d9:e5:79:4a:3b:0e:af:df:0f:5c:20:4a:
                    37:d0:f7:9c:5e:6b:e3:73:52:5e:e4:62:21:7b:00:
                    88:97:f8:7a:06:95:d0:10:4f:29:ce:61:b9:85:eb:
                    43:c7:7d:45:5e:0e:54:0d:71:42:0c:d6:76:a2:de:
                    7f:6c:13:d5:e4:73:ea:79:81:9f:11:3b:59:45:e0:
                    2d:25:ea:4a:70:cb:4b:e3:4c:75:47:f9:18:6c:77:
                    28:c1:20:96:06:ec:e5:d9:04:ad:0f:f4:ce:8d:af:
                    61:ee:7b:a4:7d:51:fc:3b:b1:ff:73:9a:74:cf:f5:
                    af:2d:6d:87:c7:df:b1:80:df:a0:e1:ab:57:64:53:
                    0a:a6:98:4e:a2:8d:12:69:41:ec:d8:03:93:02:12:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:BE:0C:80:FF:91:4C:EA:21:7D:C7:71:67:A4:0A:A4:B1:0A:52
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zua-DID_kUzqIX3HcWekCqSxClI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.152/32

    Signature Algorithm: sha256WithRSAEncryption
         85:48:55:bc:94:41:a3:21:24:54:0a:90:c8:dd:e8:1e:61:eb:
         f8:8b:cb:82:ba:9d:d0:99:2b:98:d1:ce:a9:83:0c:ed:ef:c4:
         7a:d6:6b:b2:5c:ea:6b:91:09:23:70:3a:a2:23:7b:5f:42:f4:
         7e:12:51:92:fc:62:df:c4:1b:9a:e2:de:13:60:ac:41:c7:60:
         93:8e:aa:af:ad:4f:45:e7:b2:36:71:e1:1f:e8:20:eb:31:56:
         88:32:a6:6a:46:83:9b:ea:2d:c7:f7:7a:77:1c:90:d6:b0:45:
         56:31:c5:16:35:58:0a:08:69:38:ee:83:f9:7f:71:4a:5a:82:
         65:41:63:20:ac:a1:ad:6e:ac:1b:7d:67:cc:f7:93:11:43:cd:
         60:9e:6e:6d:9d:26:30:a9:c0:47:e0:9d:91:1d:fb:9f:b5:d5:
         6d:58:cb:f1:dc:17:aa:ff:64:d4:09:82:8c:b7:bc:f9:de:74:
         4b:f2:07:4c:af:e2:e0:18:4e:be:d4:2a:a2:1a:a6:46:07:8c:
         e4:36:1a:d0:e8:9a:e1:b5:93:2f:da:18:0f:3f:94:5a:b8:52:
         74:2b:32:df:8c:83:60:dd:ba:cc:fc:fa:b2:75:4e:02:b9:bb:
         f3:29:ae:8d:7d:43:aa:1d:a1:9c:d3:25:95:79:4c:ac:1d:49:
         6d:1d:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:19:16 2025 by rpki-client