Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ypk4le7qzs_8R-EbBqV8YNAKhW0.roa
File:                     ypk4le7qzs_8R-EbBqV8YNAKhW0.roa (raw, json)
Hash identifier:          GZ38zdv7UCQapyvolIYptW1EO/31mGf4oyEVrr6Q0ys=
Subject key identifier:   CA:99:38:95:EE:EA:CE:CF:FC:47:E1:1B:06:A5:7C:60:D0:0A:85:6D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       017B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ypk4le7qzs_8R-EbBqV8YNAKhW0.roa
Signing time:             Wed 15 Feb 2023 02:34:26 +0000
ROA not before:           Wed 15 Feb 2023 02:34:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.73/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CA993895EEEACECFFC47E11B06A57C60D00A856D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:5f:6f:69:c0:70:25:7d:17:2d:e2:8e:4b:
                    5f:5d:c7:8b:bf:49:9d:b2:6a:9f:4f:97:df:22:8a:
                    57:8d:9d:d8:b8:49:8e:3b:7e:52:97:0a:0e:07:72:
                    86:91:9f:cb:12:21:d1:b6:77:ef:b3:5c:7b:a9:fd:
                    40:45:b1:33:2e:6a:aa:c7:78:b5:6a:4c:26:16:8c:
                    7a:ba:13:35:d0:9e:e6:8f:bc:41:a9:37:3d:2a:e9:
                    2b:14:e8:ca:40:b7:6f:20:77:bd:80:48:d6:a6:28:
                    f8:8e:bd:cb:49:b3:fc:d9:7a:80:cb:e6:f9:5d:c8:
                    78:3d:b7:d6:35:cc:aa:bc:cf:4a:37:77:54:80:cc:
                    8e:d4:33:21:8e:50:d3:c5:22:25:b2:f2:b6:9e:c7:
                    65:36:24:a0:23:ce:65:b6:35:b8:8b:e1:68:3d:cf:
                    3d:bb:31:70:05:75:e2:65:1d:59:45:25:4f:83:50:
                    56:e0:eb:81:3c:4f:56:65:97:7a:c2:62:56:f4:44:
                    73:f4:81:91:ce:5d:23:47:f2:b4:d3:23:99:cf:60:
                    09:92:8a:ef:42:05:e4:61:b6:55:31:b1:fd:02:6f:
                    4c:5e:0e:ae:36:f7:1d:89:aa:d5:7c:dd:3e:57:df:
                    e3:ff:0b:0d:97:cb:3b:0c:b5:ca:ba:90:87:6a:d1:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:38:95:EE:EA:CE:CF:FC:47:E1:1B:06:A5:7C:60:D0:0A:85:6D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ypk4le7qzs_8R-EbBqV8YNAKhW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.73/32

    Signature Algorithm: sha256WithRSAEncryption
         12:07:6d:49:16:1d:ba:cb:30:6f:f6:43:10:d8:00:ed:d1:4e:
         fa:e9:df:37:f5:82:ae:eb:c0:f7:08:7e:a1:d5:1a:4a:37:88:
         41:59:4d:62:76:b2:9f:a0:0a:ea:d9:be:c8:6b:98:78:6b:a1:
         87:80:8c:48:1f:b6:96:50:80:13:4f:07:54:c5:42:bf:3e:ac:
         18:a3:51:a1:79:63:97:7d:49:32:d0:8c:a3:46:3f:6c:49:e5:
         03:8c:e0:8f:7f:e8:7f:0d:a6:e5:44:dc:5d:6c:7c:e3:da:b7:
         46:45:99:fd:c3:47:12:ff:35:b4:a3:d6:d2:60:a4:9b:b7:ec:
         0f:b2:8b:86:2c:05:a5:ae:25:a9:47:6c:0b:cf:05:6d:6f:8f:
         33:45:2f:01:53:64:3c:30:03:53:d5:91:83:d4:4d:4b:e5:71:
         60:59:a9:ec:bd:99:6e:3c:bd:71:be:d9:bb:c8:72:7a:8d:75:
         66:5c:95:59:a1:90:c7:2b:71:42:92:c4:ad:0d:b2:ae:f3:63:
         6c:99:7b:44:5b:12:80:79:9c:41:35:99:db:cd:09:6d:89:8b:
         c5:35:c5:99:30:3b:86:7d:f2:19:ae:7f:7c:aa:9f:00:23:17:
         7f:4c:46:e4:a9:86:e5:56:22:8c:00:da:49:2f:5d:dc:ab:fb:
         7a:ff:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 03:05:44 2025 by rpki-client