Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RlJicklf3B6n6gMDmrH4z7D74AI.roa
File:                     RlJicklf3B6n6gMDmrH4z7D74AI.roa (raw, json)
Hash identifier:          VdaRPDVMI7TdmqyH8s8Y1jiC5ZZdhpVXWNdek9CeXYk=
Subject key identifier:   46:52:62:72:49:5F:DC:1E:A7:EA:03:03:9A:B1:F8:CF:B0:FB:E0:02
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0162
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RlJicklf3B6n6gMDmrH4z7D74AI.roa
Signing time:             Wed 15 Feb 2023 02:34:17 +0000
ROA not before:           Wed 15 Feb 2023 02:34:17 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.75/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:17 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=46526272495FDC1EA7EA03039AB1F8CFB0FBE002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:e0:69:6d:da:d7:82:c2:59:f8:e7:62:c7:
                    59:68:9f:45:12:b6:cc:39:43:6e:e7:25:d8:10:96:
                    c5:10:8f:a8:c6:4c:f4:d8:c6:d1:91:92:f8:54:b8:
                    65:c4:47:1f:af:4a:cb:b0:59:66:6a:c3:95:72:15:
                    22:4b:37:8b:29:5f:6c:74:36:96:d2:46:51:cc:7e:
                    36:97:74:32:cd:99:c1:9d:3a:b5:44:d6:87:8a:85:
                    14:77:c4:ce:ce:11:8f:a9:ef:3d:e0:1a:13:ac:ae:
                    d7:38:75:95:c1:b7:79:22:09:1e:3b:da:f0:06:4f:
                    ce:4e:b7:74:d9:81:f3:17:e4:35:bf:f6:22:21:37:
                    2d:c4:0e:b1:cc:32:94:3e:fb:16:93:89:04:97:b4:
                    e6:d7:3a:88:0f:af:5e:f4:1d:23:0f:bc:4c:66:02:
                    ad:7c:34:56:e2:6f:90:6f:8f:9a:fb:fd:48:83:d3:
                    eb:d8:15:c7:e2:e4:44:36:ea:13:8f:e2:4b:c5:f9:
                    9c:50:00:07:67:3a:21:7b:f2:fc:aa:d8:5c:2e:e5:
                    c2:26:16:7a:0e:23:eb:09:d2:25:35:af:39:69:5f:
                    b3:32:85:05:56:f4:c1:69:65:c0:83:e2:3d:fb:b8:
                    7f:2e:af:67:a1:5c:e4:c8:75:2d:0d:32:9f:26:95:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:62:72:49:5F:DC:1E:A7:EA:03:03:9A:B1:F8:CF:B0:FB:E0:02
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RlJicklf3B6n6gMDmrH4z7D74AI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.75/32

    Signature Algorithm: sha256WithRSAEncryption
         46:72:12:75:14:c8:7f:89:22:ad:bb:2b:2e:f5:1f:fd:91:df:
         33:fc:1a:c6:88:f6:ac:2b:40:29:4f:35:b6:dd:3b:65:38:e1:
         f6:82:0a:86:04:b3:89:42:9f:08:aa:ff:a9:0f:d3:a2:2b:f1:
         68:b9:2a:2d:7c:9a:cb:51:0e:fd:d4:7a:b1:a8:e9:ea:4d:76:
         08:2d:9f:55:72:67:1e:7e:6c:d5:94:31:f5:39:fa:78:43:3c:
         4d:d5:dd:71:72:4a:a1:75:51:bf:0d:bc:02:78:4a:ec:83:b3:
         fa:99:f3:cd:48:e9:e2:4f:02:d8:0c:06:96:21:f8:8a:e4:fc:
         b2:61:66:b7:9b:5d:d4:ca:1a:a0:ca:26:28:a3:1b:67:9f:b5:
         91:bc:21:95:a5:d1:d6:0d:ba:49:6a:09:38:54:8f:67:10:e8:
         73:89:21:0b:99:93:5f:d1:2c:22:22:ff:80:2e:18:35:1c:13:
         ca:bb:4d:14:f7:3e:d8:b1:f6:6a:5d:4e:26:9e:16:a7:18:95:
         7d:f7:35:26:4c:f8:00:7b:2f:7a:2e:eb:c5:42:f8:e0:57:01:
         1d:81:c7:3f:ac:09:2a:ee:98:a5:a1:28:a8:ba:78:9b:b6:41:
         2b:d5:4f:d0:89:4d:ee:32:cc:87:96:66:2a:06:f8:46:ea:6c:
         6a:c5:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:47:02 2025 by rpki-client