Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gK-90vEJQpZwah-KNMexxUVffYs.roa
File:                     gK-90vEJQpZwah-KNMexxUVffYs.roa (raw, json)
Hash identifier:          MALNxAO+nVwy9YBU/9DovwdytuLyZ7MTiNrQsfeKW1g=
Subject key identifier:   80:AF:BD:D2:F1:09:42:96:70:6A:1F:8A:34:C7:B1:C5:45:5F:7D:8B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       7A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gK-90vEJQpZwah-KNMexxUVffYs.roa
Signing time:             Fri 10 Feb 2023 07:43:43 +0000
ROA not before:           Fri 10 Feb 2023 07:43:43 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.192/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:43 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=80AFBDD2F1094296706A1F8A34C7B1C5455F7D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:7f:a5:64:fb:ca:95:9a:f8:2e:01:67:3e:
                    d5:c4:7f:b3:1c:30:91:56:d2:ff:e9:da:1f:20:55:
                    9c:b5:70:b1:bb:f4:86:be:89:c9:dc:7e:0f:16:81:
                    29:8b:83:4b:1c:19:8a:24:6f:00:31:6c:00:f5:53:
                    ab:09:23:48:19:d1:1e:4b:e8:64:0a:fa:50:f2:12:
                    41:23:ef:30:8c:81:61:1f:66:b3:fb:37:55:3c:12:
                    50:1f:f0:4a:d7:96:6c:da:3f:1a:42:d0:3c:c3:3b:
                    4d:97:5a:06:ed:e1:5f:a9:65:32:88:ea:2d:52:aa:
                    9f:f7:f5:7b:c0:bb:0f:97:51:2c:dd:18:8a:73:cd:
                    96:e9:93:86:26:ee:4f:94:49:77:52:d2:97:2b:7c:
                    e5:f1:6e:35:12:64:fd:37:39:bb:65:b1:7b:7e:7f:
                    87:20:ff:4a:4a:38:bf:9a:93:3a:1e:c2:66:79:ac:
                    4d:1e:dc:03:12:0a:3b:cc:bf:98:a2:f2:db:ec:68:
                    b9:a1:b6:64:f7:04:c4:42:62:bb:fc:8e:5c:04:ac:
                    1f:30:3e:7b:cc:d6:d7:44:55:5d:c3:71:b3:31:91:
                    a9:8f:6e:d4:10:93:d4:29:79:8b:f6:33:98:5c:9f:
                    3c:54:e9:3e:33:8f:b9:4e:b2:76:71:55:67:24:e4:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:BD:D2:F1:09:42:96:70:6A:1F:8A:34:C7:B1:C5:45:5F:7D:8B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gK-90vEJQpZwah-KNMexxUVffYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.192/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:40:9a:4f:16:e4:c3:08:35:86:2c:89:9a:d5:b0:46:96:
         07:be:77:6f:9b:78:e6:a4:ed:ea:de:04:0a:33:97:46:3a:0a:
         08:23:76:d8:6f:36:ee:ad:3f:0e:69:14:59:6c:ea:59:09:85:
         6b:8e:a7:7c:92:c1:12:69:d7:83:a6:99:50:8d:df:84:e7:0c:
         8e:3d:14:ad:06:4b:99:f6:43:ee:38:cf:08:e6:53:86:6c:74:
         d9:de:3b:b0:8d:8d:1c:f8:e3:1e:15:c1:13:75:be:dc:b8:fd:
         7b:32:84:ee:38:26:25:60:2c:49:47:8e:d1:dd:06:aa:0f:af:
         b9:d0:a8:f6:23:ec:4c:3b:3b:90:88:30:ce:e7:1c:23:aa:cc:
         29:e7:33:d4:c3:74:0c:0d:f1:c2:4e:39:75:af:53:93:06:01:
         24:52:be:28:67:be:fa:16:ea:40:f0:4c:a0:12:12:74:31:9c:
         c8:9d:6e:ed:df:01:ab:5d:22:b9:d7:22:17:2d:0b:f9:4a:8c:
         c2:da:ee:b1:c1:14:59:ac:5b:d2:9e:e1:46:5c:b4:a1:df:13:
         a2:68:da:93:d3:f3:18:cf:13:6f:7a:2e:12:a2:3d:d5:22:34:
         29:0c:eb:7c:7c:cf:a0:2e:44:a8:1d:78:f6:2f:58:78:e0:47:
         0b:0e:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:23:36 2025 by rpki-client