Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wrGI-s7jVwhGGKDiyvB9hlq8un0.roa
File:                     wrGI-s7jVwhGGKDiyvB9hlq8un0.roa (raw, json)
Hash identifier:          keEv68AiwPxqI1+2o1U28pEla7MWUIDqMes2Oh7mxKA=
Subject key identifier:   C2:B1:88:FA:CE:E3:57:08:46:18:A0:E2:CA:F0:7D:86:5A:BC:BA:7D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0171
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wrGI-s7jVwhGGKDiyvB9hlq8un0.roa
Signing time:             Wed 15 Feb 2023 02:34:22 +0000
ROA not before:           Wed 15 Feb 2023 02:34:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.63/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C2B188FACEE357084618A0E2CAF07D865ABCBA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:c1:22:f9:74:22:f6:db:c0:ed:78:58:0b:
                    4c:0d:2c:5f:43:6a:12:14:44:c9:77:71:48:d2:98:
                    67:91:0b:6a:24:d2:3a:1a:eb:c8:74:6b:68:e9:0e:
                    65:62:d5:ff:57:0a:27:22:fa:5d:87:50:44:04:d7:
                    32:69:db:8e:98:ac:87:65:df:04:9f:bf:9d:c7:89:
                    7f:89:03:e7:a9:a6:57:0b:58:c8:53:0e:43:0a:b5:
                    c7:76:bb:b3:5d:39:b7:0e:1d:28:8a:93:45:86:aa:
                    e3:8b:67:4a:8a:18:f3:59:46:0a:5b:6b:94:18:79:
                    6e:b5:2a:0e:f6:0b:ad:10:ff:15:cb:c9:33:54:2d:
                    07:f4:59:5c:0d:7f:07:54:70:af:fd:a2:6a:d2:4b:
                    cb:1e:db:ac:3a:bc:3d:fb:37:0b:08:b3:76:62:15:
                    bc:a1:44:af:8a:a9:84:f6:8d:94:a3:c2:d4:81:f2:
                    0a:25:54:2f:a7:29:36:cb:dd:c1:12:56:24:19:d5:
                    0d:ae:55:2c:b3:80:f6:c8:a4:dd:0e:7a:69:d3:74:
                    43:6a:9b:b7:1b:95:8e:c6:ad:8e:0a:d3:7b:bb:fc:
                    47:19:13:f1:bb:89:d9:7f:8d:c6:45:4d:00:ce:f9:
                    44:49:9e:14:e8:8d:3e:e0:05:a2:a6:e3:19:21:22:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:88:FA:CE:E3:57:08:46:18:A0:E2:CA:F0:7D:86:5A:BC:BA:7D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wrGI-s7jVwhGGKDiyvB9hlq8un0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.63/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:29:ff:ef:16:27:6a:41:66:95:c2:d1:a5:0e:9e:0d:9e:da:
         c7:3a:29:1f:06:c3:f9:38:79:c5:0d:a9:41:24:d7:a4:95:10:
         5c:8a:12:3d:a8:c6:a1:34:80:b9:64:c1:65:4a:9b:82:7b:59:
         86:79:84:d5:50:65:9e:31:9f:b4:1e:00:cb:e6:55:c5:46:74:
         cb:f5:a0:a5:4a:15:4a:87:11:15:71:da:1f:87:5e:16:ec:d8:
         2b:d2:91:14:df:52:5a:bb:c2:9e:b6:f7:f4:16:53:f5:da:d9:
         87:02:a1:82:1f:30:a9:c6:b8:c4:3a:6c:05:c0:ea:35:da:70:
         2e:da:88:f9:b0:26:88:58:80:7e:e4:fa:41:96:14:0c:c4:5c:
         63:ee:da:c6:a4:7f:27:cd:8b:52:16:c6:e9:fe:f5:e8:3a:81:
         e1:d6:7f:04:80:b9:f0:e6:4d:a4:35:be:92:38:34:b5:b0:65:
         02:96:82:44:b0:c3:4d:61:31:63:e4:e6:1f:69:25:6b:9c:00:
         a0:e3:b7:ae:47:05:eb:4c:21:39:e8:08:85:1e:ea:25:1b:81:
         cc:62:94:82:0b:45:fa:48:bd:86:d8:1b:9a:c2:07:59:43:39:
         bc:75:42:8c:32:dc:80:ec:fa:76:0b:23:b3:a6:75:ea:5a:20:
         fa:f4:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 02:32:18 2025 by rpki-client