Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/VUcuWc1Y-ErJ3wx20uiJejHcpJA.roa
File:                     VUcuWc1Y-ErJ3wx20uiJejHcpJA.roa (raw, json)
Hash identifier:          paFGfIQzxzH8J0juImhCBEK9+LazmgJh4b/YHTO3ZHA=
Subject key identifier:   55:47:2E:59:CD:58:F8:4A:C9:DF:0C:76:D2:E8:89:7A:31:DC:A4:90
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       017D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/VUcuWc1Y-ErJ3wx20uiJejHcpJA.roa
Signing time:             Wed 15 Feb 2023 02:34:27 +0000
ROA not before:           Wed 15 Feb 2023 02:34:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.53/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=55472E59CD58F84AC9DF0C76D2E8897A31DCA490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:bd:29:c4:7d:e5:d3:b7:2b:41:e7:a2:01:
                    9a:0c:22:42:27:3d:bf:95:dc:92:f2:ec:51:5c:81:
                    a7:93:dd:40:37:9a:b1:02:3d:f5:1a:35:9c:fe:2e:
                    63:bf:1d:bd:c9:4d:65:d1:86:d8:18:db:60:97:a3:
                    44:6f:ff:f0:5b:c4:ce:18:e6:90:28:d2:4d:57:b2:
                    94:64:1e:f1:1f:6d:b5:55:6c:94:9a:6f:bf:39:53:
                    b8:f8:25:f3:d1:0c:a8:db:5b:7e:61:88:8b:7e:2e:
                    ed:82:14:d4:05:60:56:1e:44:65:4f:34:c7:2c:95:
                    92:6b:dc:db:6f:0c:5c:88:ad:6b:5d:3c:25:1a:e8:
                    6e:72:f3:be:5d:ff:52:ee:2c:0f:8c:58:29:90:64:
                    f6:d3:3f:2f:4e:bc:6c:f7:b4:10:19:89:ee:bd:3f:
                    4d:16:00:0a:72:53:7a:ed:69:bc:9e:0a:d5:28:b3:
                    fa:61:17:a3:27:69:39:d2:87:3e:bd:30:32:fe:a7:
                    ea:78:76:7b:69:32:35:a1:43:2a:6b:cb:de:31:bc:
                    74:8c:92:4b:d4:70:cb:e1:34:00:81:79:e0:0a:ad:
                    9e:da:7c:d0:96:3b:88:04:9c:3a:82:13:f9:6f:d9:
                    d5:bb:f6:c3:de:05:32:be:7e:bc:b0:6f:13:dd:06:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:47:2E:59:CD:58:F8:4A:C9:DF:0C:76:D2:E8:89:7A:31:DC:A4:90
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/VUcuWc1Y-ErJ3wx20uiJejHcpJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.53/32

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:75:47:5a:dc:76:38:5b:36:ca:a8:91:9a:ea:c6:d7:d3:
         5a:4f:65:a9:e8:aa:60:ac:61:a3:f4:e4:5e:fe:c0:ac:95:71:
         cf:b4:9c:71:73:03:c0:40:53:93:66:a6:f5:b7:da:64:23:e4:
         a1:34:eb:4e:22:71:2f:3d:e1:b0:2d:ce:6c:d2:9e:1f:60:49:
         b0:aa:14:d7:d0:88:3a:e3:cb:97:c9:c0:c5:78:e8:db:b7:5c:
         7a:36:94:2d:ab:db:59:fa:9f:0f:86:25:59:56:94:ad:ad:0b:
         45:69:91:0f:93:69:eb:15:7c:88:c3:2b:73:ac:a5:fd:d0:13:
         6a:9e:5f:54:d4:c6:4f:2e:57:52:61:64:34:b4:b6:cc:3c:50:
         b4:bb:8e:81:a6:a1:77:30:78:02:51:76:fb:95:19:90:80:b6:
         0f:73:66:96:b3:0f:50:22:fa:ba:89:06:76:52:57:b8:23:08:
         be:d3:97:f5:2e:29:9f:ec:a6:2a:d7:2a:0c:81:ff:1e:4e:0e:
         46:13:bc:29:04:27:3c:31:49:e5:7d:58:ce:65:19:b5:23:ee:
         05:6d:72:9f:d0:e3:99:d9:27:8d:a5:c8:8f:42:10:12:45:8a:
         75:dd:9d:73:83:d6:0b:07:de:f4:c1:01:16:ad:eb:b4:a4:44:
         72:eb:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:37:46 2025 by rpki-client