Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/GtLZIAZySzuFTlijabS2ZZcebGc.roa
File: GtLZIAZySzuFTlijabS2ZZcebGc.roa (raw, json)
Hash identifier: YFTTsY9tI0fGO594NKONUlK023eujKCebux/ha0aciQ=
Subject key identifier: 1A:D2:D9:20:06:72:4B:3B:85:4E:58:A3:69:B4:B6:65:97:1E:6C:67
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0163
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/GtLZIAZySzuFTlijabS2ZZcebGc.roa
Signing time: Mon 01 May 2023 01:28:21 +0000
ROA not before: Mon 01 May 2023 01:28:21 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 4713
IP address blocks: 123.224.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 1 01:28:21 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=1AD2D92006724B3B854E58A369B4B665971E6C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:a0:4d:2e:cb:02:47:f9:0f:66:30:2d:ef:
cb:f5:e1:e5:1a:ab:b2:c5:07:42:27:2c:e4:19:67:
9f:0c:7b:15:76:fd:83:db:9d:f9:d5:77:a4:42:fe:
81:af:07:c6:ad:a0:c8:46:7c:46:ff:67:74:76:ab:
8b:7e:d2:2a:1c:a2:80:67:b9:d0:e9:45:60:67:d0:
26:56:fd:b5:0c:fa:72:74:ba:36:14:cc:bf:4d:83:
68:8b:97:a1:d4:9d:8d:e5:02:1e:44:e3:d5:b1:18:
43:de:55:ca:6a:39:e8:22:7e:d0:b8:3c:07:38:61:
0c:d2:23:4f:03:e4:08:60:4d:77:c9:e9:8f:e0:27:
a1:9e:f6:05:e4:c1:ad:d6:e8:71:92:05:5a:cc:00:
8c:78:3d:ba:13:20:88:6d:e8:b9:e6:e4:21:9a:b0:
82:ff:4e:ee:61:f7:0e:13:62:9d:10:24:10:34:0d:
c6:82:c8:55:df:dd:57:db:5b:71:cc:da:a2:3f:3b:
05:45:0c:ab:67:e2:35:b8:1d:26:f8:da:8c:ef:94:
e8:fe:5e:91:a3:dc:8f:86:a2:0b:a1:4d:10:7c:0b:
a9:72:a8:2c:94:c8:00:55:f7:92:56:e6:c6:62:1e:
ff:ed:ff:13:7a:3f:82:c7:6a:2e:b5:63:60:ce:0a:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:D9:20:06:72:4B:3B:85:4E:58:A3:69:B4:B6:65:97:1E:6C:67
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/GtLZIAZySzuFTlijabS2ZZcebGc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.224.0.0/14
Signature Algorithm: sha256WithRSAEncryption
6f:b6:2c:fb:80:6a:9e:0c:41:51:b3:60:ac:da:70:bf:c9:5a:
dc:dd:49:90:48:34:60:1b:88:9d:02:59:49:99:b9:93:af:a0:
6c:20:bd:1b:a6:c0:1b:05:57:f5:a2:89:43:49:39:db:6b:c0:
28:46:fa:e1:a5:b4:e8:38:95:b7:50:d1:de:3f:ca:d3:96:ab:
9f:24:96:65:03:57:7f:ec:6b:5d:dc:22:15:80:5f:b7:91:b1:
a1:0e:00:00:96:30:24:fd:fe:4f:83:38:d8:82:d4:b3:2b:86:
30:80:47:27:f5:e8:35:26:d5:fe:a6:bc:22:b3:8c:49:ca:c4:
fe:63:61:fa:ca:e3:f4:a3:1e:0e:ec:49:ee:2c:ec:a6:fc:6d:
a0:48:61:cd:c5:91:31:dd:b9:21:0e:c5:b3:43:4c:05:47:4b:
c5:5b:02:33:75:47:9b:94:28:ab:a0:ba:f4:b6:bc:3f:8b:14:
58:63:39:33:64:15:4f:5c:e6:9f:7d:b6:51:7a:b4:3d:5d:7a:
f2:55:20:ab:00:0c:17:54:cd:9b:02:4f:d5:5e:d8:32:8f:27:
2f:81:d9:69:66:cf:41:ed:6c:94:ff:45:89:f5:fe:61:6c:fc:
c8:d7:3f:7d:3c:5c:2b:93:ca:92:19:fa:10:a8:dc:bc:63:44:
18:5a:ef:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA1MDEw
MTI4MjFaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFBRDJEOTIwMDY3MjRC
M0I4NTRFNThBMzY5QjRCNjY1OTcxRTZDNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG7aBNLssCR/kPZjAt78v14eUaq7LFB0InLOQZZ58MexV2/YPb
nfnVd6RC/oGvB8atoMhGfEb/Z3R2q4t+0iocooBnudDpRWBn0CZW/bUM+nJ0ujYU
zL9Ng2iLl6HUnY3lAh5E49WxGEPeVcpqOegiftC4PAc4YQzSI08D5AhgTXfJ6Y/g
J6Ge9gXkwa3W6HGSBVrMAIx4PboTIIht6Lnm5CGasIL/Tu5h9w4TYp0QJBA0DcaC
yFXf3VfbW3HM2qI/OwVFDKtn4jW4HSb42ozvlOj+XpGj3I+GoguhTRB8C6lyqCyU
yABV95JW5sZiHv/t/xN6P4LHai61Y2DOCpYJAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUGtLZIAZySzuFTlijabS2ZZcebGcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0d0TFpJQVp5U3p1RlRsaWphYlMyWlpjZWJHYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJ74DANBgkqhkiG9w0BAQsFAAOCAQEAb7Ys+4BqngxBUbNgrNpwv8la3N1J
kEg0YBuInQJZSZm5k6+gbCC9G6bAGwVX9aKJQ0k522vAKEb64aW06DiVt1DR3j/K
05arnySWZQNXf+xrXdwiFYBft5GxoQ4AAJYwJP3+T4M42ILUsyuGMIBHJ/XoNSbV
/qa8IrOMScrE/mNh+srj9KMeDuxJ7izspvxtoEhhzcWRMd25IQ7Fs0NMBUdLxVsC
M3VHm5Qoq6C69La8P4sUWGM5M2QVT1zmn322UXq0PV168lUgqwAMF1TNmwJP1V7Y
Mo8nL4HZaWbPQe1slP9FifX+YWz8yNc/fTxcK5PKkhn6EKjcvGNEGFrvBg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:52 2025 by rpki-client