Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ufwZHZhXPP44FoSzg1TuWPev1WA.roa
File:                     ufwZHZhXPP44FoSzg1TuWPev1WA.roa (raw, json)
Hash identifier:          j8jXqmDLLOkFBipKTaL2BhMCdfel1wGnXd2dZhjOcps=
Subject key identifier:   B9:FC:19:1D:98:57:3C:FE:38:16:84:B3:83:54:EE:58:F7:AF:D5:60
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       23
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ufwZHZhXPP44FoSzg1TuWPev1WA.roa
Signing time:             Tue 25 May 2021 02:31:49 +0000
ROA not before:           Tue 25 May 2021 02:31:49 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: May 25 02:31:49 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=B9FC191D98573CFE381684B38354EE58F7AFD560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:25:8f:a0:63:3f:f7:9d:d4:32:cd:52:63:
                    5f:4c:0b:02:66:79:93:58:e6:c1:aa:33:c5:cc:d3:
                    8d:7d:f1:88:77:34:97:57:96:cb:b2:7e:63:dc:b5:
                    23:69:9a:3e:2a:e2:91:83:02:23:d1:fa:12:2f:89:
                    1f:b7:61:cd:e1:d1:6e:cb:27:97:26:0b:d9:cb:2d:
                    6d:3e:75:3f:2a:87:32:14:9d:7c:ff:97:ea:4f:9c:
                    1b:46:0b:f0:75:72:82:60:ba:9c:e0:7c:60:19:af:
                    30:4c:84:35:62:81:4b:11:69:19:07:01:69:9c:51:
                    79:36:5f:8c:d9:e2:ad:1a:48:ad:81:fd:7e:bd:b8:
                    37:d7:86:af:d5:4d:29:5c:bf:37:62:f9:64:2d:66:
                    cb:32:e9:3e:3b:74:57:8b:f9:e7:d4:e5:1c:9f:db:
                    5d:c2:76:b0:1c:1d:41:9b:f5:4f:90:de:69:a6:b2:
                    44:1a:71:da:3d:fe:ae:ac:a2:ce:c6:86:52:f8:e1:
                    77:b7:2b:ec:ed:0c:e1:eb:ee:ee:95:15:cf:1e:42:
                    9f:d5:47:28:ef:ae:26:07:8e:8d:ef:54:fd:34:af:
                    1d:74:5e:c9:9e:2b:fa:d5:f4:3e:7e:67:12:6b:aa:
                    97:e2:7c:83:4c:ea:fd:30:43:14:62:85:67:72:ff:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:19:1D:98:57:3C:FE:38:16:84:B3:83:54:EE:58:F7:AF:D5:60
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ufwZHZhXPP44FoSzg1TuWPev1WA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:17:72:51:9e:7b:ec:24:6f:b2:01:20:19:b2:96:67:a5:49:
         cf:b0:42:8f:c0:0a:73:a1:d3:a3:ae:25:0b:6e:16:c6:ac:b1:
         ad:3e:f6:2b:79:82:d5:65:d6:ff:fc:75:59:14:de:b0:a2:03:
         58:6c:65:44:ff:34:ce:c7:1a:05:b7:e2:d1:2d:a3:ac:7b:9f:
         b1:c3:da:c9:31:b9:44:65:9a:f9:24:db:37:77:42:36:95:90:
         ad:38:02:3a:4f:ed:a4:02:2d:04:c5:8b:ae:0e:07:ee:ab:d1:
         3f:33:a4:c8:e1:26:ac:87:7b:5e:9b:96:43:1b:88:ab:bb:02:
         cb:b2:c1:4e:ea:c4:71:bf:58:28:fe:6d:4a:f8:77:54:40:dc:
         e0:92:8f:dd:b4:fd:68:4b:f6:bd:ef:11:c2:27:05:86:41:43:
         de:1a:8b:6e:83:66:08:57:1f:12:4a:38:36:83:3f:8c:8c:d9:
         3b:63:6b:b0:0e:7b:38:be:2f:16:f5:45:e5:f1:5f:84:c0:2e:
         de:cf:92:81:93:7e:e1:56:2a:ad:5f:b9:10:b7:a2:bc:49:74:
         77:0a:5b:f4:f9:e1:bc:b1:4f:ed:2b:9c:cf:9c:c0:b2:46:8a:
         19:5b:47:d5:c5:60:66:66:d6:d7:be:b9:79:4e:3f:26:ec:f3:
         6c:c3:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:22 2025 by rpki-client