Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Pa3jquFSP3W41svcVujiEPh8t1c.roa
File:                     Pa3jquFSP3W41svcVujiEPh8t1c.roa (raw, json)
Hash identifier:          XROPcoVv12NgB7kbt0pl8KakbbjPdV9Dntu1fEZlvGM=
Subject key identifier:   3D:AD:E3:AA:E1:52:3F:75:B8:D6:CB:DC:56:E8:E2:10:F8:7C:B7:57
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0163
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Pa3jquFSP3W41svcVujiEPh8t1c.roa
Signing time:             Wed 15 Feb 2023 02:34:18 +0000
ROA not before:           Wed 15 Feb 2023 02:34:18 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.54/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:18 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3DADE3AAE1523F75B8D6CBDC56E8E210F87CB757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:da:20:31:fe:b0:2b:12:71:3a:2d:01:aa:
                    f0:53:f2:ea:4a:6d:96:a9:c7:81:d0:63:36:cb:03:
                    36:da:a0:be:9c:fb:30:9f:30:53:93:42:40:f0:45:
                    91:06:14:89:0f:c8:ed:5a:7e:87:f7:a7:46:ae:71:
                    74:2a:c5:47:6e:31:a1:5a:41:61:7e:6e:2d:35:f1:
                    19:21:84:24:57:71:f8:8e:82:8e:08:b1:fd:bc:89:
                    60:68:30:05:c0:38:de:d8:f3:cb:04:6e:89:c3:9d:
                    53:77:6b:ef:37:77:70:5b:f0:a4:ff:7d:8a:9d:02:
                    2d:70:d4:11:6a:f0:0d:c4:2c:24:58:64:0e:37:d6:
                    20:c2:24:e4:42:dd:5b:e1:c5:51:63:44:be:32:34:
                    04:71:bd:ea:67:3a:88:de:e3:17:a7:6e:a3:5b:ef:
                    d1:07:49:ef:54:57:9e:09:8a:24:7e:6e:88:3a:16:
                    cd:cf:6e:7d:16:8d:97:eb:83:e1:ce:87:bd:49:2e:
                    48:a5:cb:cb:bc:8b:ab:7b:6a:cf:58:b4:23:0a:15:
                    0c:35:35:4d:ff:06:b8:f7:fc:76:4f:98:81:41:85:
                    68:4d:bc:a9:ed:09:ba:86:73:01:89:91:b2:be:2c:
                    cf:e5:44:41:fd:cd:35:35:41:1f:b5:7c:59:0a:71:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AD:E3:AA:E1:52:3F:75:B8:D6:CB:DC:56:E8:E2:10:F8:7C:B7:57
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Pa3jquFSP3W41svcVujiEPh8t1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.54/32

    Signature Algorithm: sha256WithRSAEncryption
         89:66:ac:96:eb:96:97:14:fb:f7:a9:57:0b:7f:f3:4c:de:17:
         69:b1:db:2d:37:73:a4:ae:50:7b:f1:db:b2:c5:c6:58:82:13:
         17:52:5b:96:d8:15:e0:f6:8d:bd:98:1c:c6:25:1e:f5:20:8b:
         af:cf:9f:66:a5:76:18:64:84:33:33:f9:3b:aa:dc:c3:cb:b4:
         fd:a2:5c:63:1f:06:10:55:10:33:e8:36:c0:bf:26:cd:2a:0f:
         4c:89:d8:83:57:7e:4d:b0:03:e4:fa:e6:11:90:2a:b5:66:0d:
         64:9f:4a:f6:be:0c:c2:12:ee:f4:f2:63:e8:04:2c:c1:00:bc:
         1e:0e:32:3b:e8:9e:b6:22:71:26:dd:44:9a:83:64:ff:e4:93:
         2a:1d:b4:b4:a7:f6:a2:fb:e4:f7:4e:7c:04:1d:ce:1d:31:df:
         31:0d:0b:69:37:61:41:1e:6f:ff:3c:a7:22:37:b1:71:73:a3:
         a4:72:1b:ec:ec:28:57:79:f3:57:30:91:0f:49:08:26:a0:6b:
         89:81:09:d1:b5:ca:21:19:08:98:7b:fb:28:d0:74:ed:a5:39:
         dd:0c:45:aa:ef:4d:45:46:24:12:0f:27:b0:bb:9e:7e:8f:6a:
         0e:e6:69:69:93:fc:a4:15:87:4c:09:03:ea:91:df:c4:c6:55:
         c7:25:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 02:21:26 2025 by rpki-client