Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/AutohGnUoP9Eq7jf76mr3OJNdc4.roa
File:                     AutohGnUoP9Eq7jf76mr3OJNdc4.roa (raw, json)
Hash identifier:          i3OHZb9TUQvMPjq4hCzySK6Md+Cyn6wp8jJjyCVp3H8=
Subject key identifier:   02:EB:68:84:69:D4:A0:FF:44:AB:B8:DF:EF:A9:AB:DC:E2:4D:75:CE
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       36
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/AutohGnUoP9Eq7jf76mr3OJNdc4.roa
Signing time:             Sun 01 May 2022 01:29:54 +0000
ROA not before:           Sun 01 May 2022 01:29:54 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        217.178.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: May  1 01:29:54 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=02EB688469D4A0FF44ABB8DFEFA9ABDCE24D75CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:e4:97:dc:12:68:59:9a:53:c2:fb:17:77:
                    0f:19:33:59:22:79:fa:a0:bd:8e:fd:57:df:66:75:
                    ff:08:ae:1e:84:b0:11:2d:34:85:92:af:10:1d:1b:
                    62:87:3e:83:37:72:94:68:de:90:21:c5:fa:3e:34:
                    ab:0c:04:23:74:54:d6:27:00:d0:97:b2:b3:fe:e8:
                    44:27:91:4c:a9:a5:1b:e3:4a:b3:dc:ef:d1:15:1d:
                    4a:c7:14:95:11:ac:f3:94:e2:e6:71:33:43:4d:1e:
                    81:59:84:a5:8d:17:ea:23:61:a5:39:a9:15:4f:53:
                    33:05:ec:d3:3b:4c:e7:69:83:63:c4:f8:f1:f6:b5:
                    be:23:09:0b:85:8f:a1:8f:70:ee:7a:1d:af:c5:ef:
                    c6:24:5f:b4:68:bd:6e:ad:d3:ac:94:bf:a9:5a:70:
                    b2:14:3b:28:ec:1d:0a:05:79:84:9b:d2:9d:c6:3f:
                    61:6b:13:09:48:c5:af:ac:74:07:4e:1a:2f:3c:34:
                    7d:76:9d:ce:3f:e8:bd:67:66:e2:1d:db:8a:dc:ee:
                    45:cd:3f:96:81:a0:12:7b:67:ae:d5:a6:9b:39:af:
                    f2:7c:ee:12:79:06:02:35:72:c9:cb:19:84:91:67:
                    68:99:13:81:ff:65:8d:3d:a9:96:bd:df:91:f7:a2:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:68:84:69:D4:A0:FF:44:AB:B8:DF:EF:A9:AB:DC:E2:4D:75:CE
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/AutohGnUoP9Eq7jf76mr3OJNdc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:ad:f8:26:99:47:80:aa:7b:2c:54:59:b7:83:1a:46:6e:ae:
         e0:5c:06:61:43:2d:78:d6:38:09:00:e7:9e:eb:75:9d:43:c7:
         65:75:c0:6c:6f:b3:c5:a4:9c:2c:ce:13:09:a9:7b:d7:d3:1a:
         c7:53:4d:24:e1:ba:cd:27:cc:ca:1b:fd:db:11:44:ba:a7:b8:
         7f:6c:1a:76:14:09:f8:e5:3e:0a:4d:80:5b:ca:40:fc:73:ae:
         79:c6:5f:3e:60:da:07:48:c1:eb:2b:88:6f:8b:1f:ff:db:96:
         99:e6:f7:94:cd:c8:97:8e:da:76:87:3c:74:e1:8c:fe:86:34:
         05:a6:8b:99:82:b9:ad:78:f1:92:2e:fa:17:ec:9a:0f:59:b6:
         2a:2e:c0:11:6a:28:cf:12:a6:d8:03:a4:65:7a:57:a2:3b:41:
         62:b6:f2:34:00:99:f5:05:a9:37:dc:fc:4a:ef:6a:7e:6b:ce:
         b0:6a:d7:93:86:48:5b:19:c8:77:52:e7:95:d9:7b:c2:f9:f1:
         37:89:37:b2:fb:6c:c0:f2:f0:d2:d3:6c:f1:c7:98:ac:cd:78:
         d5:62:3e:aa:85:79:a3:3a:ea:d9:00:54:79:b8:29:07:72:8f:
         58:ba:f1:85:f1:41:52:ed:26:b2:00:c1:1c:4c:8a:c4:95:f7:
         a8:e0:4d:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:35 2025 by rpki-client