Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88dOfVIt0WMx0N2TNiklm7I1EbM.roa
File:                     88dOfVIt0WMx0N2TNiklm7I1EbM.roa (raw, json)
Hash identifier:          LZih71mQFa+F0pdgkgn6qhonZyjoEoH5IZ8L4nRzBj0=
Subject key identifier:   F3:C7:4E:7D:52:2D:D1:63:31:D0:DD:93:36:29:25:9B:B2:35:11:B3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0160
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88dOfVIt0WMx0N2TNiklm7I1EbM.roa
Signing time:             Wed 15 Feb 2023 02:34:17 +0000
ROA not before:           Wed 15 Feb 2023 02:34:17 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.74/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:17 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F3C74E7D522DD16331D0DD933629259BB23511B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:82:3a:2f:dc:92:c5:f8:e4:bd:8f:98:16:
                    d8:e0:90:ce:50:39:f9:88:ce:a3:fb:42:3f:fa:01:
                    d5:6b:73:9a:c2:27:e2:ab:22:db:1f:15:24:4a:dc:
                    6b:4a:cb:e0:71:04:f5:6e:5d:4a:69:cb:e0:66:f3:
                    9a:b9:ee:6a:6e:6f:9e:03:d1:26:da:73:89:7c:dc:
                    e8:91:b2:d9:18:5e:44:78:ea:c1:31:70:e7:c6:51:
                    75:1a:6e:b0:0d:62:6d:ad:10:b9:e6:ae:07:73:70:
                    43:3c:c9:43:7c:2e:af:4d:01:a9:8f:e0:0f:c7:02:
                    0a:ef:05:f5:de:5a:45:80:b0:76:95:31:e1:e7:ef:
                    e0:dc:58:24:2c:c6:a0:c9:d1:12:4e:ba:9c:7a:1e:
                    31:8e:c4:ec:61:0e:92:94:3a:0b:91:b5:08:05:22:
                    2f:a4:f8:34:66:95:60:1f:0b:26:42:7b:9f:92:03:
                    8e:30:10:84:35:8c:e0:a5:13:a6:c8:2c:a1:44:0d:
                    0e:41:fd:22:ae:d4:35:ec:8e:61:dc:0e:b9:72:20:
                    54:8e:91:a4:4c:36:67:c6:cb:24:96:3e:6c:ff:52:
                    d6:da:d7:5d:b8:54:be:c8:85:6d:3b:2e:8c:7d:e6:
                    fa:eb:59:3e:9d:55:9e:77:07:68:0d:06:4d:3f:5e:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:4E:7D:52:2D:D1:63:31:D0:DD:93:36:29:25:9B:B2:35:11:B3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88dOfVIt0WMx0N2TNiklm7I1EbM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.74/32

    Signature Algorithm: sha256WithRSAEncryption
         68:05:3c:31:fe:e2:55:ac:5e:16:32:91:de:06:f5:cd:d0:1e:
         e8:c4:12:5e:8f:f8:95:21:66:85:ae:f3:06:e4:4c:34:ab:43:
         f3:2d:8a:7a:f0:1a:ba:89:d0:ed:23:d9:e4:cc:91:18:7c:8e:
         29:be:3f:6d:a3:1a:43:55:31:fb:89:fa:b2:d3:3d:c4:79:45:
         16:99:aa:f1:24:e9:08:6e:2a:7e:6f:11:3a:6c:05:7e:b2:c9:
         5c:46:e4:6c:da:f8:0d:af:b1:6d:65:b6:3d:db:3b:df:d1:5b:
         df:5e:a1:7b:13:58:02:a6:e0:21:8a:3d:b5:4d:0d:c7:fd:cc:
         1f:fe:9f:13:e0:c3:5b:09:4c:16:a7:1e:00:8c:95:69:1e:c2:
         10:14:fd:cb:d2:a2:21:d0:26:d3:e5:23:04:28:f1:57:f2:0d:
         1d:dc:61:ec:78:fa:9c:f4:47:1c:ce:7f:82:45:b6:bd:68:57:
         d2:b4:47:a9:e1:b6:0d:e1:81:cb:d1:c4:08:cd:08:96:37:96:
         f3:9f:95:04:57:75:b1:92:d5:41:ae:ed:81:83:1d:93:2a:1c:
         3a:06:d7:2c:a2:af:2f:a4:4f:43:55:b7:e6:dc:80:79:8c:a7:
         3d:e6:3f:01:42:15:ff:bf:ef:be:4f:0c:68:38:2a:d8:6a:7a:
         75:09:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 04:27:42 2025 by rpki-client