Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NSC0NDMq9ftGNBojWht2hjXjEnI.roa
File:                     NSC0NDMq9ftGNBojWht2hjXjEnI.roa (raw, json)
Hash identifier:          umLZmEFAMw16h2IjzChEOOH5NXacSWHnP3cgC8UUL1I=
Subject key identifier:   35:20:B4:34:33:2A:F5:FB:46:34:1A:23:5A:1B:76:86:35:E3:12:72
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       016B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NSC0NDMq9ftGNBojWht2hjXjEnI.roa
Signing time:             Wed 15 Feb 2023 02:34:21 +0000
ROA not before:           Wed 15 Feb 2023 02:34:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.66/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3520B434332AF5FB46341A235A1B768635E31272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:62:86:e0:c0:dd:ae:07:c7:2f:69:d2:34:
                    3f:9d:47:c6:f2:30:b0:c5:fa:d7:d3:9d:ce:38:87:
                    16:c1:6b:5a:94:e2:f6:8f:40:70:86:43:6c:3f:62:
                    5a:32:e7:6c:19:07:44:6c:54:ae:e1:03:24:f8:c1:
                    60:5d:a6:3b:14:f7:3c:83:ac:4d:b9:ed:18:f2:29:
                    c6:97:e5:dc:2e:dc:68:2d:12:e1:ca:aa:d2:dd:a0:
                    df:ce:5e:e4:40:20:fb:06:92:d6:7f:fa:4b:44:61:
                    8b:9b:94:98:d4:26:7a:17:8f:1e:a2:04:a4:28:4d:
                    b5:7c:68:72:24:59:a2:56:d4:55:23:eb:9f:87:fd:
                    94:7e:e0:94:5e:39:8d:72:c0:3f:bc:24:8f:b8:e7:
                    57:a0:92:94:d9:9c:4e:6b:93:e0:bd:0a:3d:bb:02:
                    d9:fc:7b:8d:fc:4f:01:e9:c6:e3:26:76:a3:8c:12:
                    27:8d:f8:87:2f:12:bb:f7:98:9b:8e:4f:7b:e3:03:
                    36:81:e9:3d:f5:d8:fa:8a:52:46:3d:a9:2d:44:d3:
                    41:7a:80:68:93:37:2a:7b:a5:39:e2:61:45:dd:31:
                    26:1c:a8:06:11:56:03:96:e8:b8:44:1b:cc:d1:b5:
                    16:83:b1:29:15:30:12:50:34:cc:da:bf:ba:05:fd:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:20:B4:34:33:2A:F5:FB:46:34:1A:23:5A:1B:76:86:35:E3:12:72
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NSC0NDMq9ftGNBojWht2hjXjEnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.66/32

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:58:62:9d:ab:71:ca:bf:72:56:54:61:59:fb:a9:24:f5:
         f1:63:c5:5e:ce:7a:7b:39:cf:06:ce:03:40:e1:e8:91:3c:5d:
         ed:fe:83:e8:41:56:ec:e6:dc:0f:84:f8:a7:a1:00:c3:24:f2:
         9b:7a:64:46:94:60:ac:62:df:84:a7:87:69:5a:3e:7e:76:10:
         f9:5b:52:75:d6:41:99:36:08:2c:01:6f:36:6a:53:69:05:b6:
         fa:95:2b:c0:5b:ec:25:95:bf:9d:bb:fe:fe:5c:25:1f:d8:d5:
         a5:a6:d2:83:e5:bd:b8:07:3f:73:61:57:4e:34:79:ce:09:cc:
         05:9d:b0:ea:bc:3f:ed:b4:b9:63:5e:99:94:65:4b:ad:c2:16:
         04:a6:82:8c:db:fc:7f:70:ca:44:a1:04:bf:a4:2a:c7:5f:8e:
         72:e1:74:a0:27:47:9b:fc:c2:be:15:33:06:f5:f8:61:b5:a4:
         d1:6b:c0:72:59:a1:3a:03:20:e7:4f:a4:17:01:35:a3:d3:64:
         75:3a:ed:75:e0:50:b4:2a:41:48:47:5f:36:e6:ef:37:76:db:
         57:58:41:65:6e:5a:cc:b6:0a:ed:2c:ce:bd:64:4c:e0:bc:00:
         3c:13:a2:b3:3c:42:43:40:53:88:86:b9:d7:ec:45:49:30:90:
         e3:aa:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:28:11 2025 by rpki-client