Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xpwsnCpLwsNucXp7gI2HPaHZRBo.roa
File:                     xpwsnCpLwsNucXp7gI2HPaHZRBo.roa (raw, json)
Hash identifier:          nXU9etctha+aLIcsYNFMX1br1S3Pdr8CjjIQfFxkPMs=
Subject key identifier:   C6:9C:2C:9C:2A:4B:C2:C3:6E:71:7A:7B:80:8D:87:3D:A1:D9:44:1A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       70
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xpwsnCpLwsNucXp7gI2HPaHZRBo.roa
Signing time:             Fri 10 Feb 2023 07:43:39 +0000
ROA not before:           Fri 10 Feb 2023 07:43:39 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.116/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:39 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=C69C2C9C2A4BC2C36E717A7B808D873DA1D9441A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:e7:a6:8a:e8:61:9c:b7:30:38:05:59:ca:
                    39:a7:4c:7c:32:f9:13:59:be:a3:28:a0:7b:fc:61:
                    ef:41:e8:21:97:ad:00:d1:e4:24:c3:2e:76:e9:d7:
                    e1:00:df:2b:2d:ed:41:cc:8f:8f:e2:a9:13:e0:e0:
                    ac:9f:b2:18:5e:73:02:11:bb:ae:c8:48:b8:a4:9f:
                    e7:60:c6:55:ce:e7:64:fa:a8:4f:52:db:0c:60:d2:
                    55:be:4b:d5:5f:7e:b2:7e:7c:6b:5b:70:90:b6:a1:
                    86:6c:b6:ea:c0:04:a8:d9:6c:c9:78:fd:8e:c2:5d:
                    57:7a:b8:a2:78:a4:b6:50:da:ef:00:f4:9b:b9:15:
                    96:29:26:fb:70:42:66:c2:f4:7c:ff:d9:34:84:eb:
                    88:5b:2e:9e:40:10:83:73:af:3e:2e:c4:e3:f2:ca:
                    7b:a5:8b:79:26:98:6b:d6:b6:c0:41:02:27:5c:25:
                    ca:1a:89:c1:9c:a0:c3:4a:4e:7f:e4:a7:1a:31:56:
                    74:f4:9d:9f:d3:f5:a3:60:95:0b:2a:2d:12:43:c8:
                    0d:54:63:2c:27:a5:00:39:4f:1c:8b:bd:30:db:3c:
                    49:4b:2e:1e:48:ae:31:48:56:c3:7a:a9:a1:c1:09:
                    08:e3:fc:4c:fd:31:06:54:d9:5f:d5:db:c8:5d:f2:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:2C:9C:2A:4B:C2:C3:6E:71:7A:7B:80:8D:87:3D:A1:D9:44:1A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xpwsnCpLwsNucXp7gI2HPaHZRBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.116/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:55:b2:0b:8e:a0:ed:b9:92:ae:b2:36:c8:3e:c5:df:09:
         9a:22:a2:51:6d:c2:88:69:4c:38:e8:36:ce:44:83:1b:12:16:
         8f:3b:73:24:67:fb:4c:f9:8c:14:b4:db:94:0a:a0:6d:8e:0f:
         9c:fe:0c:99:87:ab:14:2b:bf:4e:9e:d1:95:13:ca:e6:a6:97:
         99:47:dc:85:86:67:5e:b8:a0:51:c2:eb:0e:e2:54:44:d7:33:
         14:0e:ca:a8:6c:2a:87:c8:c0:f9:eb:d3:33:71:e2:95:cb:83:
         99:0e:60:85:37:a1:09:ff:59:24:4c:54:1a:13:48:b1:be:93:
         f5:7e:f9:6b:21:ae:f2:76:b2:56:b7:cb:42:5d:8a:f1:ea:88:
         95:41:59:1e:d0:ab:cc:b3:9d:4b:63:88:cb:1b:f7:d5:90:6e:
         d2:a1:65:57:68:ef:2d:d5:ce:69:53:73:b0:5b:0b:48:96:e1:
         a4:3e:26:d4:36:df:8f:bf:b7:a9:6f:b6:a7:2f:8d:0b:22:ba:
         db:86:af:d0:fe:f0:81:5f:b7:77:eb:f4:47:30:12:d7:71:cb:
         ce:89:02:3c:8b:25:6e:9c:ab:bb:6f:21:ec:c3:2f:bf:2e:27:
         f6:ad:95:3d:49:f7:8b:a0:e9:5c:be:46:cb:d7:41:39:be:c9:
         a9:16:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:45 2025 by rpki-client