Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
File: zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa (raw, json)
Hash identifier: o1rpft0c2SA3jWT5Y7OD7wZotEE+eX8TI+2LqG2q7P0=
Subject key identifier: CD:D1:8C:51:32:D1:9F:50:3B:37:A6:F8:F9:9F:D3:C7:B1:0B:8A:E5
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01BF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
Signing time: Wed 01 Nov 2023 01:29:21 +0000
ROA not before: Wed 01 Nov 2023 01:29:21 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 112.78.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:29:21 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=CDD18C5132D19F503B37A6F8F99FD3C7B10B8AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:76:a2:33:54:b0:60:4d:f6:89:a6:3a:46:
29:b3:7e:81:0a:45:dc:c3:af:43:1d:81:93:e9:b6:
ca:2b:f4:d4:2f:85:e4:ea:a8:45:6d:c6:48:e5:b1:
ab:a3:9b:23:03:60:e2:1b:48:7d:2e:1e:df:47:75:
80:e2:f3:d4:a5:bb:f1:ae:53:1c:0a:40:53:a7:df:
17:8e:7b:e6:9a:4e:3e:ef:25:d5:38:c7:a6:e0:ec:
fa:e8:4e:8f:6c:94:7f:11:5d:3f:2d:63:4f:bf:17:
d3:39:99:fa:88:83:a4:f3:7b:ab:1c:91:a1:28:cf:
52:fd:95:a9:4a:bd:65:58:56:44:14:f3:c9:1c:b8:
a9:1f:c6:8f:1f:cd:0a:d2:d3:dc:0a:0a:0d:79:8f:
a5:34:e4:51:c2:00:d6:be:b1:c6:71:08:94:7a:e0:
8d:54:11:77:92:83:a9:52:f4:ce:43:8c:42:e5:5a:
ca:82:82:88:2c:36:4a:af:58:18:f5:69:11:77:56:
41:5a:4a:ba:7c:51:eb:ea:02:bf:64:81:00:79:ac:
54:6d:1a:e3:6c:ce:89:d1:83:5a:bb:0d:a6:58:c3:
7c:e5:c1:bc:f7:a9:92:3a:05:68:64:b2:bb:38:87:
9f:f5:92:b6:9e:cd:4e:15:cc:f8:1b:24:07:4b:6d:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:8C:51:32:D1:9F:50:3B:37:A6:F8:F9:9F:D3:C7:B1:0B:8A:E5
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c9:45:6c:9d:36:b4:08:9c:f0:58:a4:0e:fc:f8:ba:f7:ed:
39:0f:a0:5e:3c:82:2c:44:87:d9:11:5c:3c:e3:de:81:4b:09:
17:3b:4f:e8:5c:49:e8:ec:c8:fc:2e:13:c9:c8:bd:fb:67:05:
a1:d0:4c:00:72:67:dd:89:7c:85:24:4e:d7:c2:d6:13:6e:ea:
27:5a:68:bd:f7:01:cf:21:77:3d:16:03:cd:45:0f:9a:8f:3a:
24:bc:53:5b:2a:14:07:b1:d8:71:f7:24:6f:0c:00:4a:a6:dc:
6f:1f:81:e4:f3:08:c7:61:e3:e9:22:98:a1:3e:99:96:e6:5d:
52:33:da:43:7d:15:af:f0:82:9c:d5:67:ca:74:df:11:d3:c0:
16:56:3d:bb:7f:2a:c9:2f:95:bc:7e:f9:f9:72:98:cf:98:49:
e2:22:08:4a:58:e5:fa:91:7d:bc:9f:7e:27:8c:b6:4e:80:b9:
38:b3:a2:de:3f:b1:f8:59:fb:34:27:0f:a7:fe:01:cc:04:ab:
ea:13:50:a3:2a:13:98:18:d0:48:84:24:3d:10:3f:0d:48:02:
07:1c:26:fa:2f:70:ce:99:5e:72:82:6b:6d:67:83:f6:ef:26:
67:a0:9f:8f:d1:b5:e4:3d:cb:ee:c3:53:1f:4b:a8:0f:b1:ff:
34:4a:ea:02
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTI5MjFaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKENERDE4QzUxMzJEMTlG
NTAzQjM3QTZGOEY5OUZEM0M3QjEwQjhBRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjPXaiM1SwYE32iaY6RimzfoEKRdzDr0MdgZPptsor9NQvheTq
qEVtxkjlsaujmyMDYOIbSH0uHt9HdYDi89Slu/GuUxwKQFOn3xeOe+aaTj7vJdU4
x6bg7ProTo9slH8RXT8tY0+/F9M5mfqIg6Tze6sckaEoz1L9lalKvWVYVkQU88kc
uKkfxo8fzQrS09wKCg15j6U05FHCANa+scZxCJR64I1UEXeSg6lS9M5DjELlWsqC
gogsNkqvWBj1aRF3VkFaSrp8UevqAr9kgQB5rFRtGuNszonRg1q7DaZYw3zlwbz3
qZI6BWhksrs4h5/1kraezU4VzPgbJAdLbXxlAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUzdGMUTLRn1A7N6b4+Z/Tx7ELiuUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny96ZEdNVVRMUm4xQTdONmI0LVpfVHg3RUxpdVUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcE7dMA0GCSqGSIb3DQEBCwUAA4IBAQCNyUVsnTa0CJzwWKQO/Pi6
9+05D6BePIIsRIfZEVw8496BSwkXO0/oXEno7Mj8LhPJyL37ZwWh0EwAcmfdiXyF
JE7XwtYTbuonWmi99wHPIXc9FgPNRQ+ajzokvFNbKhQHsdhx9yRvDABKptxvH4Hk
8wjHYePpIpihPpmW5l1SM9pDfRWv8IKc1WfKdN8R08AWVj27fyrJL5W8fvn5cpjP
mEniIghKWOX6kX28n34njLZOgLk4s6LeP7H4Wfs0Jw+n/gHMBKvqE1CjKhOYGNBI
hCQ9ED8NSAIHHCb6L3DOmV5ygmttZ4P27yZnoJ+P0bXkPcvuw1MfS6gPsf80SuoC
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:17 2025 by rpki-client