Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hqzkG_d7taSV7BRtceFqz3MaOPE.roa
File:                     hqzkG_d7taSV7BRtceFqz3MaOPE.roa (raw, json)
Hash identifier:          tfd3vAut4LDH7+4+iHSEH4n3e9vVTvLboLwBncre/oI=
Subject key identifier:   86:AC:E4:1B:F7:7B:B5:A4:95:EC:14:6D:71:E1:6A:CF:73:1A:38:F1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       A7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hqzkG_d7taSV7BRtceFqz3MaOPE.roa
Signing time:             Fri 10 Feb 2023 07:45:46 +0000
ROA not before:           Fri 10 Feb 2023 07:45:46 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.44/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:46 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=86ACE41BF77BB5A495EC146D71E16ACF731A38F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:f2:e3:6d:45:3e:50:5a:79:03:3d:51:2c:
                    f5:54:f7:93:72:9e:e6:6e:b1:3c:91:66:b7:e4:e5:
                    14:a2:17:27:36:f1:dd:07:8e:0a:a9:f2:49:03:85:
                    ee:de:f6:99:7b:8b:7a:64:2f:66:7b:a5:85:4f:c2:
                    72:97:ff:37:3a:37:a2:93:31:85:8f:da:0c:c8:19:
                    0a:7d:8f:c0:5c:01:15:e4:ee:67:e3:f0:7f:8c:d9:
                    84:3f:8f:e1:5a:43:48:30:38:0f:ec:70:b9:33:cc:
                    e7:1d:18:62:b8:2e:9c:8f:c7:94:2a:cb:b6:cf:ea:
                    c6:60:0c:74:14:e5:9b:c7:92:8a:9d:9c:96:37:6a:
                    08:f5:11:24:31:f6:85:7e:c2:c8:18:4d:1a:05:ab:
                    4f:20:b4:4f:50:ba:99:a8:e1:e6:cc:e9:2a:01:5a:
                    56:f3:16:10:77:b7:65:dd:9d:a1:71:ba:74:53:e5:
                    56:30:7e:2b:be:cb:72:ab:2f:f5:83:24:24:eb:17:
                    c8:a3:d9:3a:31:a1:79:dc:0b:a2:0f:4c:59:e1:10:
                    90:5f:01:35:bf:34:9d:3d:3a:19:26:f5:6a:c1:a1:
                    96:1e:56:63:24:c9:bf:f5:f7:64:f9:8a:ab:de:af:
                    d5:70:d2:29:27:ed:60:1a:e5:b4:2e:72:e3:d9:4e:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AC:E4:1B:F7:7B:B5:A4:95:EC:14:6D:71:E1:6A:CF:73:1A:38:F1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hqzkG_d7taSV7BRtceFqz3MaOPE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.44/32

    Signature Algorithm: sha256WithRSAEncryption
         02:91:d3:8f:5a:a1:f6:ee:eb:0d:ad:0a:9a:14:10:b3:48:5a:
         bd:cb:40:14:63:45:9a:8b:a4:b3:f5:98:6a:69:67:1a:8a:c7:
         69:08:77:f1:b8:95:64:57:53:a1:11:f4:18:81:24:ee:57:f4:
         02:4a:8b:9c:74:26:1f:bb:40:8f:b6:b0:a5:3c:26:a5:5f:f0:
         e3:79:28:a5:7a:2a:f3:f1:85:0c:41:c8:72:54:1f:01:ab:c3:
         4c:fd:bd:ba:00:44:5f:e7:cd:fc:23:95:06:ef:3a:64:14:e6:
         94:f3:4f:8a:4a:a2:8c:a6:68:18:de:31:fa:fd:14:36:96:92:
         be:3b:a6:07:78:17:ef:1a:c9:54:ca:4f:43:16:14:a7:96:21:
         12:f4:32:4b:44:46:87:7e:e3:fa:de:9b:1b:4d:6b:d2:1d:9d:
         e5:b3:5a:b4:f7:53:4b:13:23:db:38:02:fd:b8:a0:04:e3:ca:
         3a:1e:01:3a:55:b4:eb:54:bb:1a:34:9b:47:bb:ad:6a:d3:b0:
         17:ae:02:53:72:82:d7:2e:9d:00:57:fb:b3:43:76:11:fc:1c:
         c6:01:7d:cb:41:1d:dd:fa:c4:a2:a7:79:c9:f8:3b:cc:b9:23:
         62:5a:b6:ed:b1:10:af:28:1c:91:17:9d:96:a3:be:b2:da:73:
         38:76:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:40 2025 by rpki-client