Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dC3wCO0jFLwRDD4o7hCOtC-G6dU.roa
File:                     dC3wCO0jFLwRDD4o7hCOtC-G6dU.roa (raw, json)
Hash identifier:          9w+57S973PlVpnZzmtTj7dWtEtVl73mP3Xx9F1+/pkQ=
Subject key identifier:   74:2D:F0:08:ED:23:14:BC:11:0C:3E:28:EE:10:8E:B4:2F:86:E9:D5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       015C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dC3wCO0jFLwRDD4o7hCOtC-G6dU.roa
Signing time:             Wed 15 Feb 2023 02:34:15 +0000
ROA not before:           Wed 15 Feb 2023 02:34:15 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.69/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:15 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=742DF008ED2314BC110C3E28EE108EB42F86E9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:3d:23:80:e5:f6:97:ea:b5:ab:b3:39:67:
                    c1:db:5b:5b:b2:b2:5a:b1:71:8d:96:f0:99:2f:43:
                    0b:50:c1:50:0d:7a:12:d9:30:a5:6e:f7:df:73:44:
                    59:21:36:5b:ea:76:8a:fa:73:9a:ba:14:0d:09:f4:
                    40:35:c4:ca:17:20:51:43:48:01:a5:39:9f:91:66:
                    4b:7a:df:71:df:0b:0b:85:5a:30:8d:ce:f1:ed:d3:
                    d6:9f:62:e0:92:c7:08:9f:60:90:41:de:fd:55:0c:
                    7c:ea:d3:f7:b3:50:25:74:0d:b4:9e:2f:cf:0c:36:
                    6d:1f:3c:93:b4:28:44:63:db:f1:c2:5b:88:2b:d1:
                    0c:d5:fe:b4:9f:d0:38:31:b7:b1:75:1d:f3:46:1a:
                    ce:ee:a0:51:9a:32:47:9b:7b:6f:af:d9:1b:ee:2c:
                    37:5b:0f:c0:a3:b0:ee:da:ce:70:2f:97:63:ba:51:
                    43:75:ee:92:5e:ae:ad:6c:5a:01:df:59:c9:cc:82:
                    79:ee:95:ec:3c:18:7f:28:2e:c4:05:9d:53:0e:72:
                    1e:56:72:ee:fb:f8:be:89:0e:b6:15:4a:bb:dd:2d:
                    83:4a:b3:11:cc:f2:1c:3d:2c:f4:64:41:1f:39:5b:
                    45:d7:c9:28:c3:b0:a8:0b:80:63:89:69:46:19:1c:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2D:F0:08:ED:23:14:BC:11:0C:3E:28:EE:10:8E:B4:2F:86:E9:D5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dC3wCO0jFLwRDD4o7hCOtC-G6dU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.69/32

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:b7:1d:cc:0e:bf:e9:a8:bf:7d:80:31:2e:da:5e:ae:cc:
         25:b2:c9:e9:6e:3b:c0:6d:0f:cd:25:ea:0d:7b:95:31:52:2a:
         e3:2a:53:29:fd:76:53:50:0a:01:7d:89:35:cd:1f:90:a2:d7:
         7c:69:a5:db:13:a6:25:aa:e3:5c:85:21:07:2e:88:21:a8:8d:
         2b:03:b5:47:59:ee:f0:ac:fa:e5:c3:ad:bf:32:9b:63:87:91:
         49:ec:ea:51:ef:04:f2:b8:c9:b3:7a:62:31:6c:63:03:e2:7a:
         c3:f2:4c:35:ab:c1:e0:81:0a:ac:39:01:64:9b:14:c3:cf:29:
         3e:d5:89:30:85:36:b0:6e:a9:55:c2:72:4d:7e:35:85:d0:28:
         da:77:21:6a:a1:22:1e:b2:54:85:42:74:89:51:ce:aa:c3:92:
         36:c8:1a:a6:41:d1:fb:60:bc:87:3e:75:d6:bf:b2:2e:12:42:
         b9:3d:8c:6e:85:c3:56:34:14:fb:1f:51:ef:d2:ce:20:db:67:
         95:67:5a:c3:50:23:c4:fc:40:c0:cc:39:f3:17:be:46:11:60:
         f6:0e:3b:37:5a:d4:e2:b6:95:1c:03:c5:d5:30:ca:af:e0:77:
         7b:fe:6d:99:b4:fc:16:78:6c:4b:70:2f:9c:7c:19:9b:ea:c9:
         94:b9:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 02:22:51 2025 by rpki-client