Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
File:                     qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa (raw, json)
Hash identifier:          2Z5GtcSmNxWkSaS5C6oGAVA3/UGdAs+poADwRQ4R4M8=
Subject key identifier:   A8:74:3B:66:43:86:82:26:7D:95:AB:5F:59:91:7E:81:EF:A1:67:F8
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       49
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
Signing time:             Thu 13 Apr 2023 09:52:37 +0000
ROA not before:           Thu 13 Apr 2023 09:52:37 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.0.0/16 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Apr 13 09:52:37 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A8743B66438682267D95AB5F59917E81EFA167F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:75:93:f1:1e:29:24:68:f7:3a:00:84:6e:
                    4b:3a:1f:c1:a7:fd:8a:2b:df:8f:a6:1d:a3:7d:d7:
                    56:35:a9:39:83:43:15:a3:30:fe:de:b5:b2:63:e4:
                    32:66:88:76:f0:ed:0e:5f:e6:36:28:5d:39:41:ca:
                    0d:50:00:c8:81:6d:b2:1b:98:35:a1:a5:46:1b:13:
                    b8:d7:dc:d9:27:ef:67:82:42:5a:8c:26:cc:46:64:
                    8d:a0:96:ed:2c:53:21:67:4e:41:a4:e8:45:1a:71:
                    14:b0:9b:b0:3f:81:7c:b0:4c:82:b4:1f:8f:79:9c:
                    4f:90:46:ae:58:3c:bc:c1:d5:2c:72:a2:8e:30:9c:
                    1a:be:a0:a9:ee:40:84:22:d9:b3:0b:a0:99:56:e6:
                    fa:8e:83:af:34:60:9c:9b:ab:f7:8f:64:88:5c:f8:
                    49:92:f7:d5:55:28:3a:6c:d8:d1:27:1c:cd:24:1d:
                    4d:1e:24:92:38:7e:f5:ed:6a:db:4b:7a:c4:47:8c:
                    47:45:5a:8c:48:40:1e:f4:30:f6:58:22:2a:a0:d8:
                    66:ca:56:f0:38:b8:54:86:2f:a4:c0:88:61:e6:6a:
                    fe:13:b0:08:c0:49:c0:32:8f:06:3d:ce:fe:05:fb:
                    90:de:84:06:9e:9b:61:0f:00:44:d2:18:30:df:71:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:3B:66:43:86:82:26:7D:95:AB:5F:59:91:7E:81:EF:A1:67:F8
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:b2:3a:a4:9d:32:8d:11:4c:71:06:ff:31:aa:23:1a:0f:
         84:5f:b5:28:64:8c:84:a9:5b:a7:b7:08:92:9a:79:27:37:50:
         37:84:94:8f:e8:49:d2:af:b9:4c:71:63:a2:82:05:62:12:31:
         3e:8c:dd:c1:d5:c8:9d:2f:4a:3e:ca:fc:15:53:c3:3f:bd:59:
         a6:24:f1:69:e6:0d:61:c3:a5:c5:5d:b3:4a:7b:51:95:16:53:
         52:87:1a:70:3c:15:0c:57:02:d5:f8:99:49:3f:fa:c3:b5:aa:
         f0:fc:ee:69:ce:04:df:71:e8:20:64:52:c7:f0:08:69:ef:fe:
         99:0c:59:f6:d7:49:ba:9e:16:35:21:36:16:3a:21:c0:ed:15:
         a8:9c:e5:0e:d4:fa:1a:dc:64:1c:84:e0:b3:bb:73:69:8e:a8:
         d5:fd:8d:4d:c2:d9:df:c4:be:27:21:88:5a:89:96:bf:fb:c0:
         55:22:c5:d1:26:e4:e5:41:42:ad:01:26:f2:0c:1c:40:e0:fb:
         4e:54:03:f8:81:c0:6c:9e:3c:82:38:6a:c7:ee:e4:29:4f:57:
         a1:82:06:16:5f:3b:b2:88:4c:e0:0b:9b:9d:62:9a:bc:34:0d:
         8c:5b:e4:40:c5:a9:e2:fe:df:80:eb:97:f8:35:3f:af:ba:a4:
         74:0e:8c:cc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTIzMDQxMzA5
NTIzN1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQTg3NDNCNjY0Mzg2ODIy
NjdEOTVBQjVGNTk5MTdFODFFRkExNjdGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALZNdZPxHikkaPc6AIRuSzofwaf9iivfj6Ydo33XVjWpOYNDFaMw
/t61smPkMmaIdvDtDl/mNihdOUHKDVAAyIFtshuYNaGlRhsTuNfc2SfvZ4JCWowm
zEZkjaCW7SxTIWdOQaToRRpxFLCbsD+BfLBMgrQfj3mcT5BGrlg8vMHVLHKijjCc
Gr6gqe5AhCLZswugmVbm+o6DrzRgnJur949kiFz4SZL31VUoOmzY0ScczSQdTR4k
kjh+9e1q20t6xEeMR0VajEhAHvQw9lgiKqDYZspW8Di4VIYvpMCIYeZq/hOwCMBJ
wDKPBj3O/gX7kN6EBp6bYQ8ARNIYMN9xK/sCAwEAAaOCAicwggIjMB0GA1UdDgQW
BBSodDtmQ4aCJn2Vq19ZkX6B76Fn+DAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3L3FIUTdaa09HZ2laOWxhdGZXWkYtZ2UtaFpfZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwDZsjANBgkqhkiG9w0BAQsFAAOCAQEARrmyOqSdMo0RTHEG/zGqIxoP
hF+1KGSMhKlbp7cIkpp5JzdQN4SUj+hJ0q+5THFjooIFYhIxPozdwdXInS9KPsr8
FVPDP71ZpiTxaeYNYcOlxV2zSntRlRZTUocacDwVDFcC1fiZST/6w7Wq8Pzuac4E
33HoIGRSx/AIae/+mQxZ9tdJup4WNSE2FjohwO0VqJzlDtT6GtxkHITgs7tzaY6o
1f2NTcLZ38S+JyGIWomWv/vAVSLF0Sbk5UFCrQEm8gwcQOD7TlQD+IHAbJ48gjhq
x+7kKU9XoYIGFl87sohM4AubnWKavDQNjFvkQMWp4v7fgOuX+DU/r7qkdA6MzA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:30 2025 by rpki-client