Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zgvK2Om7ri1oOG_Iz1jKjaeplno.roa
File:                     zgvK2Om7ri1oOG_Iz1jKjaeplno.roa (raw, json)
Hash identifier:          UV616de77bIN2lBElUUD36KD/h/xwi+iD+Wr34AxitU=
Subject key identifier:   CE:0B:CA:D8:E9:BB:AE:2D:68:38:6F:C8:CF:58:CA:8D:A7:A9:96:7A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       3A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zgvK2Om7ri1oOG_Iz1jKjaeplno.roa
Signing time:             Fri 10 Feb 2023 07:39:12 +0000
ROA not before:           Fri 10 Feb 2023 07:39:12 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.69/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:12 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=CE0BCAD8E9BBAE2D68386FC8CF58CA8DA7A9967A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:c1:c2:84:34:56:2f:f9:05:88:73:a4:6d:
                    9d:f3:f1:23:55:0b:51:31:07:b7:db:de:50:8a:a8:
                    d6:2c:31:ea:e2:35:fd:14:e2:19:2d:9c:d9:2d:88:
                    b6:c0:d5:d7:e4:46:92:1d:87:42:25:de:df:b9:7e:
                    ae:cb:99:8a:21:33:fa:06:e0:74:77:a7:63:c6:6f:
                    37:9a:6c:2c:11:ad:d3:7b:e0:fb:c3:e1:2c:fa:64:
                    74:59:00:e8:7b:15:f9:f5:7c:74:04:0f:a0:f0:0a:
                    a4:e7:64:55:07:7d:a1:f7:77:d6:72:96:fe:f5:1c:
                    c4:6b:1f:32:a6:db:45:ad:8b:2f:a5:87:96:50:fb:
                    0a:47:48:a5:05:55:fb:e8:67:8c:df:c3:55:5c:9a:
                    7e:e0:ca:17:ae:11:ec:bb:e7:34:85:18:cb:72:3d:
                    58:2a:57:3b:71:a6:a3:db:2a:4e:6e:c0:62:80:90:
                    ae:d8:86:e7:d2:7d:fb:e3:df:ef:13:17:83:ca:fb:
                    76:05:e2:c4:6a:99:24:60:f2:6b:4a:bf:cb:f8:d1:
                    fe:c2:bd:5d:59:6a:0d:27:ec:9d:e8:ec:1b:7d:34:
                    ae:1b:1a:3d:cc:ac:a3:9c:30:8d:19:74:f9:15:e7:
                    0d:fe:dd:bb:38:17:c2:e6:4c:d4:61:08:b0:c5:1f:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0B:CA:D8:E9:BB:AE:2D:68:38:6F:C8:CF:58:CA:8D:A7:A9:96:7A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zgvK2Om7ri1oOG_Iz1jKjaeplno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.69/32

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:dc:c9:ea:d4:ca:d2:3e:2d:57:c7:10:88:65:cf:69:2c:
         65:dc:5d:6a:bc:c3:a7:09:35:cb:a4:bc:d4:a0:c1:fe:d5:0c:
         f6:41:36:40:a2:3b:c8:7c:a3:4a:00:43:f2:2a:f0:fc:c0:bc:
         16:bf:9d:5d:0e:c3:03:b1:ba:57:94:c2:5b:da:55:95:eb:78:
         4a:c4:ee:24:e8:bc:0a:4e:75:26:a3:27:c4:65:1d:c5:c1:96:
         5b:a7:8f:3b:f9:91:f3:58:6c:9f:fe:71:8a:41:aa:74:ad:be:
         7c:20:41:60:e5:37:7d:f4:0f:46:91:45:ef:98:4f:30:b4:c4:
         50:2c:9f:c8:45:9a:df:f6:5c:92:03:c1:93:f2:d4:54:21:76:
         ea:e8:b0:73:cc:7c:e2:05:6c:fc:f3:dd:35:66:4b:b5:85:df:
         b3:47:25:ea:cb:c5:03:fb:04:fc:0e:32:f9:e2:84:3f:d5:e0:
         18:d2:18:34:b3:ae:7c:43:ff:03:c4:68:cd:3e:86:f5:bb:be:
         57:ed:59:47:8c:2f:f4:37:96:50:39:a8:c8:5f:f5:b6:ab:35:
         2d:0f:3a:e8:fc:7c:45:3c:48:d9:9b:bd:55:b6:3d:f1:4e:67:
         e3:ed:45:3e:32:50:bd:f6:50:7e:ea:90:93:3c:a8:19:cc:ea:
         ad:e3:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:41:54 2025 by rpki-client