Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PGovVCpNekrxOl9t7guZ8b7-HXc.roa
File:                     PGovVCpNekrxOl9t7guZ8b7-HXc.roa (raw, json)
Hash identifier:          dBkg9Mu0nAhx9LU4A8/kkn9rJkQvEDVbK7euY58Pbeg=
Subject key identifier:   3C:6A:2F:54:2A:4D:7A:4A:F1:3A:5F:6D:EE:0B:99:F1:BE:FE:1D:77
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       38
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PGovVCpNekrxOl9t7guZ8b7-HXc.roa
Signing time:             Sun 01 May 2022 01:29:55 +0000
ROA not before:           Sun 01 May 2022 01:29:55 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55391
IP address blocks:        217.178.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: May  1 01:29:55 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3C6A2F542A4D7A4AF13A5F6DEE0B99F1BEFE1D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:ed:35:11:cc:24:01:f3:37:87:60:37:57:
                    8b:90:9a:55:3a:99:75:49:3b:b9:be:98:f4:7e:c2:
                    8a:9b:01:e7:ff:fd:ec:57:5b:b7:42:7d:58:b9:7e:
                    fc:cc:b0:45:61:86:5f:a1:73:a8:a8:fb:f8:66:a3:
                    4f:6f:fa:5f:54:9c:6f:14:f8:7b:ed:ea:3a:66:24:
                    ac:00:65:b9:99:83:a2:1d:ee:d7:6e:d9:11:a7:7a:
                    39:ee:62:99:95:d1:e1:80:97:60:62:a1:85:45:98:
                    70:17:43:32:2a:66:68:c0:ee:74:1f:6b:a8:6b:dd:
                    9e:e0:1c:65:0a:c9:8f:08:33:c0:da:5c:b2:b1:21:
                    6a:df:68:c0:76:38:d6:32:ed:a0:42:84:fc:f6:b1:
                    a7:5d:50:a3:f6:db:80:c3:21:02:c5:39:95:e7:e0:
                    ed:39:56:5a:cb:8c:fa:b4:0f:17:63:fd:b2:d8:24:
                    25:59:5c:c3:de:31:c8:26:d6:42:8b:1f:65:b2:5f:
                    78:1d:47:e6:fd:f1:34:c8:2f:df:ec:95:7f:58:b9:
                    1b:4f:ee:6c:73:d3:c5:42:31:3c:91:83:4f:76:0f:
                    3b:1b:fe:d7:20:67:6d:ae:c2:40:14:4c:2d:25:ae:
                    d0:be:68:fa:13:81:2f:17:1a:89:ed:04:5d:25:a0:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:2F:54:2A:4D:7A:4A:F1:3A:5F:6D:EE:0B:99:F1:BE:FE:1D:77
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PGovVCpNekrxOl9t7guZ8b7-HXc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:3c:40:c4:ea:d1:99:54:e8:e9:cc:ba:6a:38:03:b0:a7:b9:
         97:a3:b7:24:7e:60:59:dc:5b:fb:a7:34:fc:f4:2e:c1:99:00:
         13:50:ec:c7:a5:9c:0d:37:58:67:e1:bc:90:43:5d:83:a1:46:
         ae:7f:85:7c:db:08:7f:c5:a4:83:7f:95:cf:75:2c:3a:2e:1c:
         94:21:3e:e4:b7:a4:0a:23:fd:a5:8f:df:8d:ed:8b:47:94:b7:
         78:68:bc:72:87:72:e4:bf:b8:17:53:fe:71:df:73:a1:18:6e:
         ea:82:a0:45:af:11:05:f4:38:bc:96:6e:d6:6d:a9:f1:de:7e:
         d9:8e:42:32:d1:f7:55:fc:31:58:37:9f:f4:df:ed:8f:0f:68:
         9c:8a:f8:eb:02:0c:21:db:fb:90:ce:45:98:87:72:17:3b:2f:
         fd:8a:4f:46:82:84:01:c3:36:48:0a:c5:3e:2c:84:2a:3f:42:
         04:cd:e9:ad:63:d9:55:83:74:bd:90:31:2e:32:09:05:70:bc:
         b2:7a:f7:38:5d:48:5a:58:e0:58:0d:9a:e9:1a:09:02:ae:81:
         ce:37:46:4f:43:ec:ba:9c:bf:3c:e7:24:44:01:23:c8:41:00:
         c0:39:b0:7b:2a:ea:d6:e6:d9:36:b4:51:77:41:d0:06:5d:6d:
         b8:f6:75:52
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTIyMDUwMTAx
Mjk1NVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoM0M2QTJGNTQyQTREN0E0
QUYxM0E1RjZERUUwQjk5RjFCRUZFMUQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMrQ7TURzCQB8zeHYDdXi5CaVTqZdUk7ub6Y9H7CipsB5//97Fdb
t0J9WLl+/MywRWGGX6FzqKj7+GajT2/6X1ScbxT4e+3qOmYkrABluZmDoh3u127Z
Ead6Oe5imZXR4YCXYGKhhUWYcBdDMipmaMDudB9rqGvdnuAcZQrJjwgzwNpcsrEh
at9owHY41jLtoEKE/Paxp11Qo/bbgMMhAsU5lefg7TlWWsuM+rQPF2P9stgkJVlc
w94xyCbWQosfZbJfeB1H5v3xNMgv3+yVf1i5G0/ubHPTxUIxPJGDT3YPOxv+1yBn
ba7CQBRMLSWu0L5o+hOBLxcaie0EXSWgFjUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ8ai9UKk16SvE6X23uC5nxvv4ddzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3L1BHb3ZWQ3BOZWtyeE9sOXQ3Z3VaOGI3LUhYYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAfZsoAwDQYJKoZIhvcNAQELBQADggEBAGs8QMTq0ZlU6OnMumo4A7Cn
uZejtyR+YFncW/unNPz0LsGZABNQ7MelnA03WGfhvJBDXYOhRq5/hXzbCH/FpIN/
lc91LDouHJQhPuS3pAoj/aWP343ti0eUt3hovHKHcuS/uBdT/nHfc6EYbuqCoEWv
EQX0OLyWbtZtqfHeftmOQjLR91X8MVg3n/Tf7Y8PaJyK+OsCDCHb+5DORZiHchc7
L/2KT0aChAHDNkgKxT4shCo/QgTN6a1j2VWDdL2QMS4yCQVwvLJ69zhdSFpY4FgN
mukaCQKugc43Rk9D7LqcvzznJEQBI8hBAMA5sHsq6tbm2Ta0UXdB0AZdbbj2dVI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:41 2025 by rpki-client