Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjmq4hPYOqQtl05pdnDCWmp41L8.roa
File:                     tjmq4hPYOqQtl05pdnDCWmp41L8.roa (raw, json)
Hash identifier:          buKuBMxiSEWpeaGy8NZRZG4GyTnRjY5Y0VBe2itAWi8=
Subject key identifier:   B6:39:AA:E2:13:D8:3A:A4:2D:97:4E:69:76:70:C2:5A:6A:78:D4:BF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       39
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjmq4hPYOqQtl05pdnDCWmp41L8.roa
Signing time:             Fri 10 Feb 2023 07:39:12 +0000
ROA not before:           Fri 10 Feb 2023 07:39:12 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.185/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:12 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B639AAE213D83AA42D974E697670C25A6A78D4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:2b:a2:ab:86:e1:a9:13:47:27:0f:21:39:
                    3f:92:ba:4d:02:48:22:b4:f2:9b:82:81:6a:04:6b:
                    85:db:0b:e4:69:18:3c:bf:a0:a3:8b:01:7b:c5:a4:
                    ab:b5:4d:3d:09:96:07:72:af:69:d0:73:47:a0:f0:
                    84:c1:2e:62:65:93:82:dc:31:67:c5:f5:2e:1d:bc:
                    3b:ee:c9:9d:80:7d:75:6f:9d:0a:b7:10:a6:73:e1:
                    c2:32:14:d6:eb:98:81:cb:26:54:dc:2b:79:68:1e:
                    9e:fb:b0:95:fe:c5:1a:66:bf:63:cd:1a:f2:b3:55:
                    8d:d7:cc:c3:cd:55:03:7f:e3:66:7b:ae:05:28:dd:
                    5e:52:a1:31:81:c9:ab:eb:9d:25:fa:d4:a9:46:51:
                    3d:96:f3:5a:b7:eb:e1:a9:1c:80:fd:c2:77:bd:ed:
                    e0:8e:d8:ff:b5:21:9c:2b:b1:95:b5:91:aa:39:88:
                    30:e6:0d:88:90:96:d2:64:86:3a:6d:97:e2:93:1a:
                    2b:e4:39:9f:72:02:ee:be:64:4c:7d:b1:9d:5d:5e:
                    d8:26:1c:e9:16:72:35:0d:6c:62:70:05:ed:1c:29:
                    f6:41:25:4c:8f:7a:b5:76:12:4f:3e:be:4e:96:28:
                    72:d8:32:86:02:83:15:10:88:2d:f5:94:18:14:b1:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:39:AA:E2:13:D8:3A:A4:2D:97:4E:69:76:70:C2:5A:6A:78:D4:BF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjmq4hPYOqQtl05pdnDCWmp41L8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.185/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:34:75:6e:7e:e3:93:a6:c5:5d:e9:6d:fa:82:e1:40:ac:
         67:15:fd:9b:51:f9:b8:43:77:81:b5:ae:56:24:9b:2b:36:85:
         c6:de:2d:eb:61:d9:86:97:bb:78:b8:f4:2c:bd:80:15:ad:20:
         80:45:b2:3d:b9:9e:b5:f6:bf:73:1d:76:df:b0:b0:20:2c:b5:
         51:9f:7d:ec:c1:e2:a8:86:a3:35:6f:87:b8:ab:b7:8b:ae:8c:
         e1:bd:d8:be:e3:0a:ae:26:0a:b1:f8:65:0f:e1:53:d5:a2:04:
         0e:ad:3a:a3:63:2e:43:97:9f:31:02:50:52:f6:61:af:ba:46:
         bb:6c:f9:52:eb:c3:78:9b:e6:91:5d:e4:fb:d9:3d:60:d0:7e:
         59:94:84:0d:e8:c0:6c:2a:85:86:55:a9:e1:11:d9:c8:e5:8a:
         7a:69:cf:d9:7d:1b:b8:b4:8e:e5:7a:e3:2c:1b:06:e2:aa:f7:
         76:73:ab:41:1a:e7:7b:e5:9f:e7:08:e1:96:00:21:ca:47:df:
         ee:6c:4a:c5:47:eb:9b:01:71:08:32:91:ea:13:5f:98:c2:27:
         41:9a:10:ed:d6:bd:e1:26:78:56:c3:d4:d7:65:4d:d5:9a:71:
         76:12:b1:2e:8c:c5:8b:c1:ef:7f:76:77:f0:6c:ca:73:a6:83:
         d2:e9:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:27 2025 by rpki-client