Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qgbLkwyt2WdPZYLFfTsRVAAnKX0.roa
File:                     qgbLkwyt2WdPZYLFfTsRVAAnKX0.roa (raw, json)
Hash identifier:          BPU++XNDLPbihHCCc7yFOkhodAkXz6W7gOoO58kSEjk=
Subject key identifier:   AA:06:CB:93:0C:AD:D9:67:4F:65:82:C5:7D:3B:11:54:00:27:29:7D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       7B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qgbLkwyt2WdPZYLFfTsRVAAnKX0.roa
Signing time:             Fri 10 Feb 2023 07:43:44 +0000
ROA not before:           Fri 10 Feb 2023 07:43:44 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.1/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:44 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=AA06CB930CADD9674F6582C57D3B11540027297D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:e9:cb:78:a4:1b:a2:a5:2d:f8:28:34:06:
                    48:e8:77:09:1f:5e:31:b4:bb:ec:01:e5:60:92:52:
                    da:fd:96:0a:9b:6e:d9:a4:7e:a5:82:71:80:4b:9a:
                    62:e4:6f:a9:c3:eb:cb:05:18:1a:f0:65:37:42:79:
                    8a:ca:57:fe:4b:cc:53:f9:7b:c0:45:68:ec:fa:d1:
                    f1:42:4c:66:b9:6c:14:22:d8:5f:bc:64:f6:89:5b:
                    a9:db:d5:a1:da:e7:f5:96:22:ce:78:d9:15:3b:e6:
                    dc:d8:48:b6:27:7d:16:05:e0:62:09:b1:a3:c9:a1:
                    a9:74:e4:4e:5d:4b:d8:aa:2c:21:c0:6c:97:0c:c8:
                    c4:14:91:b8:f6:68:9f:1c:5a:8a:ce:1a:7f:89:d0:
                    a8:5b:35:ef:3a:ba:8d:f8:4b:18:33:ee:c1:30:48:
                    88:b8:93:d1:94:20:d0:ec:25:a6:17:5e:4c:13:b7:
                    f8:77:eb:35:c2:56:df:19:92:8c:1f:a0:c3:21:35:
                    50:9e:e4:8a:88:18:f9:ee:d3:54:a5:11:15:da:e9:
                    37:0d:32:37:55:d8:55:c3:3f:b3:70:ac:df:08:82:
                    38:04:ca:5e:09:5d:cd:a2:6d:bf:0f:f3:cf:70:b0:
                    a9:69:67:d9:44:2e:8e:e0:b9:22:c4:c4:61:94:34:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:06:CB:93:0C:AD:D9:67:4F:65:82:C5:7D:3B:11:54:00:27:29:7D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qgbLkwyt2WdPZYLFfTsRVAAnKX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.1/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:dc:e2:33:c8:88:3a:28:01:64:7a:6a:de:ba:e2:01:11:
         18:ff:66:e3:ef:e5:3f:d3:4f:05:64:36:51:21:ff:d0:83:37:
         fa:6e:d3:73:9c:a4:17:0c:46:00:7b:d4:65:c8:50:23:36:76:
         2a:1b:11:4d:4f:89:8b:4f:f6:31:41:1b:c4:13:4d:69:48:f9:
         ef:d4:9a:c1:ae:79:33:b4:91:b2:01:72:5b:da:10:e4:44:19:
         4d:d6:44:cb:c7:62:77:31:a1:0b:1b:4a:c0:c5:7c:51:60:89:
         80:8d:4a:1e:c8:6a:db:8f:6b:36:0b:e4:2d:48:25:a5:e4:42:
         b4:8d:a1:5d:76:6e:24:b9:75:1c:4d:6c:99:d0:8c:5d:bf:3c:
         71:d0:2c:8a:5a:7c:2f:c2:b6:96:60:5f:4f:e2:22:7a:2e:c1:
         e8:88:4c:b9:2f:74:7c:ee:f3:8f:26:53:09:6b:c3:ae:65:d9:
         05:bb:d1:79:ff:a7:dc:01:d1:cc:b1:db:7f:d4:39:96:ef:28:
         1a:63:07:53:e6:5a:70:b8:b2:6c:b9:b5:49:0c:d2:d5:d6:78:
         fa:f6:e3:85:92:a2:8c:d6:74:5d:7e:46:dc:c0:cb:01:a2:be:
         f3:7d:a0:c4:db:16:02:bf:05:f8:0b:cf:a3:3b:94:22:09:e2:
         6b:8f:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:32 2025 by rpki-client