Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aTEyO7xrILP2ncRiwTyDeD1Uq9w.roa
File:                     aTEyO7xrILP2ncRiwTyDeD1Uq9w.roa (raw, json)
Hash identifier:          w7dgWpL0lkXyfdICBLw2+K9dsLchmJVP9OP5U3LdYVU=
Subject key identifier:   69:31:32:3B:BC:6B:20:B3:F6:9D:C4:62:C1:3C:83:78:3D:54:AB:DC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       97
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aTEyO7xrILP2ncRiwTyDeD1Uq9w.roa
Signing time:             Fri 10 Feb 2023 07:45:40 +0000
ROA not before:           Fri 10 Feb 2023 07:45:40 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.16/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:40 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=6931323BBC6B20B3F69DC462C13C83783D54ABDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:90:13:17:28:3e:23:d9:e3:7a:d8:5c:de:
                    85:ac:39:32:8f:68:a9:69:a6:e2:81:c6:51:43:fc:
                    b1:de:fc:4d:ca:8c:27:40:f8:8f:dc:d4:56:34:cd:
                    14:90:93:84:97:66:10:4d:d0:df:f1:10:ea:9d:48:
                    95:f9:e2:16:b6:cd:7d:dc:8e:d7:ba:b2:dc:e7:10:
                    e5:de:a9:a0:0c:e1:c5:5e:7d:a6:51:b0:ac:99:4d:
                    39:cf:ee:53:96:db:da:2a:cd:9b:a1:d1:e8:75:d0:
                    fa:69:bc:77:f3:2e:4e:0a:f6:4b:23:b8:0e:73:14:
                    f3:cf:34:58:e0:1a:aa:a1:d1:65:19:7e:9b:80:2a:
                    f1:b3:0f:10:87:b5:31:bf:c8:82:78:44:6b:3c:2a:
                    07:38:de:b1:a0:29:d9:ec:fe:0e:fe:65:a5:35:f7:
                    61:73:97:cc:88:76:91:b4:e0:25:8f:22:4d:3c:c9:
                    f9:ab:12:88:aa:c0:d4:2b:5e:da:3e:c8:7b:2e:ca:
                    62:32:40:ea:d9:3f:2a:73:5a:66:72:55:a8:e0:c0:
                    cc:17:4b:dc:ef:95:a9:2d:b0:7d:71:79:84:5f:40:
                    81:c9:4f:48:ee:94:22:c8:bd:5d:96:a4:7e:f1:63:
                    95:90:56:ec:94:d6:d0:37:9d:0b:8d:7f:b2:49:8e:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:31:32:3B:BC:6B:20:B3:F6:9D:C4:62:C1:3C:83:78:3D:54:AB:DC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aTEyO7xrILP2ncRiwTyDeD1Uq9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.16/32

    Signature Algorithm: sha256WithRSAEncryption
         69:13:40:03:6e:06:f6:0a:d8:50:c0:93:61:06:fb:5c:e4:ac:
         40:46:1e:af:85:a3:83:35:bc:8b:9c:5e:eb:5e:11:38:9a:bc:
         38:12:7d:68:28:d3:cd:0a:a9:18:3e:2e:b9:5c:13:a3:af:2d:
         b7:9f:a7:82:a0:50:ea:88:ba:ba:ad:f7:0e:f9:fc:d5:27:51:
         c2:83:a7:07:9a:db:50:35:4c:60:cb:1c:2b:10:77:29:f8:bd:
         e8:54:d8:0f:ec:71:2c:fd:0f:95:e3:20:56:58:7e:ab:07:1f:
         b2:f4:4a:07:37:68:58:7f:d4:54:cb:c8:2a:65:69:b0:9b:16:
         84:b4:38:dd:a4:1c:ca:e2:c9:50:d8:0f:42:47:8e:71:b8:42:
         ab:88:57:05:3a:f4:fd:9a:cf:17:25:cb:88:43:c4:4d:2e:97:
         5c:11:8a:4e:fc:d7:24:93:11:23:5b:6a:ca:1d:fe:f2:6e:9a:
         21:f2:65:16:a0:ea:48:38:f8:23:4f:7c:27:2e:fa:52:5a:93:
         f2:9f:6d:0b:77:38:20:aa:e7:e6:3c:da:64:a5:80:7e:7e:9c:
         a7:1e:07:13:d0:29:d7:9d:64:6b:7a:b8:bc:8e:69:4b:e5:94:
         ae:39:2f:7f:fb:32:45:c3:20:37:b5:c1:14:f6:44:ed:44:c7:
         d1:3d:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:19:23 2025 by rpki-client