Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/yBoJTI_fKgBpNiGdnKNnvfmmwf4.roa
File:                     yBoJTI_fKgBpNiGdnKNnvfmmwf4.roa (raw, json)
Hash identifier:          ILMhAgFcHaKZbZ8w1ys+SOBVHMUl+0dsivLzZaly70A=
Subject key identifier:   C8:1A:09:4C:8F:DF:2A:00:69:36:21:9D:9C:A3:67:BD:F9:A6:C1:FE
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       39
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/yBoJTI_fKgBpNiGdnKNnvfmmwf4.roa
Signing time:             Sun 01 May 2022 01:29:56 +0000
ROA not before:           Sun 01 May 2022 01:29:56 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55391
IP address blocks:        217.178.0.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: May  1 01:29:56 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C81A094C8FDF2A006936219D9CA367BDF9A6C1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:ec:a8:65:f0:80:1d:33:ad:44:59:88:87:
                    bc:12:89:8b:5e:ea:ac:8f:80:0f:33:1a:3f:08:b9:
                    83:7b:0c:78:e1:26:bc:ce:8b:0e:f4:45:31:15:6a:
                    35:c5:fd:57:8b:72:a8:a7:6b:d2:b8:2b:d9:d8:19:
                    d3:67:bf:cd:82:9e:d1:fc:8d:7e:d4:d0:a8:f7:90:
                    cf:0d:72:9a:6f:e8:55:21:ad:64:79:3c:40:33:b8:
                    11:49:8d:fe:0d:bc:2c:76:67:56:ee:50:ae:b0:c9:
                    1e:db:0b:58:fb:06:38:69:5f:a7:42:da:6c:82:fb:
                    99:36:9b:a4:83:3f:5b:5d:7d:c3:a7:84:ea:31:39:
                    3a:19:7b:22:2e:97:5e:ae:68:cd:f9:c1:98:9b:6c:
                    67:4f:9a:18:64:9e:10:ba:6e:94:4f:d4:0f:fc:98:
                    52:e5:e8:4f:a1:75:56:26:a2:f2:70:7b:ea:5e:4b:
                    98:95:51:7e:8b:fa:05:4b:c8:37:73:20:7c:2d:62:
                    01:5e:e5:77:b3:8c:8f:fd:3c:06:b9:cb:28:50:3f:
                    49:e0:10:b1:90:10:51:b0:19:99:8d:d3:67:40:93:
                    ef:f1:f4:cb:90:46:b6:8f:57:ee:fc:ae:ad:09:6e:
                    94:ef:75:07:5a:57:88:58:51:41:bf:89:69:ad:c3:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:09:4C:8F:DF:2A:00:69:36:21:9D:9C:A3:67:BD:F9:A6:C1:FE
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/yBoJTI_fKgBpNiGdnKNnvfmmwf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:42:42:b3:8b:24:ac:b1:be:93:dd:4e:c1:14:d7:32:c1:
         a5:3e:d7:fc:b3:77:34:ed:39:bd:18:8b:9b:cb:95:b5:ef:71:
         6d:f4:4f:1c:c5:ca:e9:73:89:52:6f:d0:c6:5b:11:41:de:53:
         41:8d:80:0f:05:06:e0:38:28:33:ad:f9:ac:e6:49:98:cb:eb:
         38:30:29:de:6e:51:ff:a0:0a:4b:63:45:a0:18:4a:ca:8a:7c:
         32:f7:90:b8:12:24:a0:35:e6:24:49:73:95:bf:f9:6e:76:68:
         84:ec:18:f3:01:48:b3:95:f1:0f:3a:cf:92:38:69:ec:b5:4b:
         2e:b9:f5:37:e1:55:24:88:46:1a:d5:c8:d2:26:9e:d4:a3:d4:
         56:f7:97:55:10:f2:b5:3f:27:85:87:19:df:31:b7:6a:1e:3f:
         cb:eb:bd:b5:6a:26:db:71:12:2e:29:e8:72:0a:d0:44:31:05:
         52:54:e9:56:5d:88:7e:08:fa:93:4a:20:db:3e:2d:e2:28:b3:
         df:e1:44:53:33:09:ab:34:9c:8b:23:de:cf:f5:83:38:2c:b0:
         2d:ff:5f:e2:4c:0b:78:67:ba:c6:dd:bb:54:4b:39:02:bf:69:
         ab:dc:95:09:97:17:bf:97:d7:12:00:d7:58:d2:eb:02:08:5a:
         2d:b9:19:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:43 2025 by rpki-client