Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kQlOD64DfdYcBDhXeBdnWXYoyIU.roa
File: kQlOD64DfdYcBDhXeBdnWXYoyIU.roa (raw, json)
Hash identifier: Ascl/ei4pRasktBFEQSH0J4fFVkCbjmjMA2Cl12Io9g=
Subject key identifier: 91:09:4E:0F:AE:03:7D:D6:1C:04:38:57:78:17:67:59:76:28:C8:85
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01E0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kQlOD64DfdYcBDhXeBdnWXYoyIU.roa
Signing time: Mon 20 Feb 2023 07:55:30 +0000
ROA not before: Mon 20 Feb 2023 07:55:30 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.42/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:55:30 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=91094E0FAE037DD61C043857781767597628C885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:d0:42:07:39:97:74:91:56:00:2d:38:57:
92:98:2f:4e:90:af:ff:61:ee:cb:c2:d7:e5:7d:68:
d0:37:9f:6f:3c:83:cd:d4:f0:d8:4f:78:e3:71:f7:
af:84:e0:e6:5d:e6:f0:a0:2d:71:17:aa:54:58:66:
5b:80:4b:bd:b2:84:48:83:d7:0a:88:15:3f:1d:aa:
41:e6:61:b5:03:c2:33:2c:93:29:10:bb:da:6d:3a:
b3:1a:5c:07:8f:2b:59:2f:5d:cd:56:4d:d4:9f:48:
7a:7a:ef:83:17:39:03:40:10:d3:89:1e:65:5c:b1:
98:04:5d:be:e9:3f:da:a3:58:49:f2:96:47:81:32:
30:51:0c:7b:33:8a:27:16:f2:62:e2:b0:26:96:e2:
37:10:c3:d2:6e:b7:d1:d5:29:c4:08:40:33:db:45:
1c:54:50:48:ea:30:22:b9:f0:de:b9:55:06:a7:6a:
5f:c1:8e:c5:6c:41:2c:4e:2d:be:c7:8b:50:a6:75:
75:d8:65:f9:75:3c:21:90:fe:d1:9c:b5:24:4d:11:
ff:a7:55:15:7c:e4:e6:e5:27:7d:e2:9f:d2:54:5c:
c6:fa:6b:9b:fa:e1:74:65:d7:91:06:e4:f3:dd:2d:
03:9f:02:b4:1a:33:9f:59:1c:77:36:78:55:1c:93:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:4E:0F:AE:03:7D:D6:1C:04:38:57:78:17:67:59:76:28:C8:85
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kQlOD64DfdYcBDhXeBdnWXYoyIU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.42/32
Signature Algorithm: sha256WithRSAEncryption
1b:f4:c1:02:d6:27:e4:20:df:a0:e1:78:36:1b:3f:b2:02:a0:
f7:46:ee:13:54:46:65:47:30:42:71:c2:45:cc:11:14:fc:34:
a0:5d:5c:4c:a3:83:c1:6c:4d:33:84:17:83:74:a8:f3:9d:64:
fe:ea:a5:19:4a:26:e0:a6:a7:d7:3f:d1:b8:b6:e1:4b:ea:1d:
e3:69:5b:54:a0:6f:66:db:9a:2a:aa:69:a0:83:a8:58:aa:8a:
52:31:e4:83:d4:a7:79:fc:77:2c:ab:bf:78:5e:48:57:50:26:
5c:49:ab:09:ab:81:0a:f1:ce:9d:c5:75:f5:ba:15:d6:37:7d:
58:fe:b4:77:b6:5e:fa:40:8e:05:87:c2:06:07:14:94:75:02:
60:a3:d6:6f:bf:19:2b:b6:0e:bf:3d:e1:8f:87:cc:f2:1d:b3:
2c:fe:6b:06:4d:6d:d9:e5:34:b1:48:71:0c:df:6b:8f:7e:5b:
a6:0f:4e:de:f8:7d:27:dc:27:b4:0f:3e:61:f3:f3:55:3e:10:
ea:5f:d0:ea:aa:41:f3:c2:13:65:1d:5b:52:89:d5:64:b3:1d:
e8:ac:f7:f2:c4:df:13:31:3f:93:1c:c9:f0:54:7e:68:c4:93:
a4:a4:06:ff:33:62:c7:1f:9a:be:0b:87:45:b1:0b:e5:94:35:
a7:31:27:9e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MzBaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkxMDk0RTBGQUUwMzdE
RDYxQzA0Mzg1Nzc4MTc2NzU5NzYyOEM4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY7dBCBzmXdJFWAC04V5KYL06Qr/9h7svC1+V9aNA3n288g83U
8NhPeONx96+E4OZd5vCgLXEXqlRYZluAS72yhEiD1wqIFT8dqkHmYbUDwjMskykQ
u9ptOrMaXAePK1kvXc1WTdSfSHp674MXOQNAENOJHmVcsZgEXb7pP9qjWEnylkeB
MjBRDHsziicW8mLisCaW4jcQw9Jut9HVKcQIQDPbRRxUUEjqMCK58N65VQanal/B
jsVsQSxOLb7Hi1CmdXXYZfl1PCGQ/tGctSRNEf+nVRV85OblJ33in9JUXMb6a5v6
4XRl15EG5PPdLQOfArQaM59ZHHc2eFUckz+BAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUkQlOD64DfdYcBDhXeBdnWXYoyIUwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9rUWxPRDY0RGZkWWNCRGhYZUJkbldYWW95SVUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaKjANBgkqhkiG9w0BAQsFAAOCAQEAG/TBAtYn5CDfoOF4Nhs/
sgKg90buE1RGZUcwQnHCRcwRFPw0oF1cTKODwWxNM4QXg3So851k/uqlGUom4Kan
1z/RuLbhS+od42lbVKBvZtuaKqppoIOoWKqKUjHkg9Snefx3LKu/eF5IV1AmXEmr
CauBCvHOncV19boV1jd9WP60d7Ze+kCOBYfCBgcUlHUCYKPWb78ZK7YOvz3hj4fM
8h2zLP5rBk1t2eU0sUhxDN9rj35bpg9O3vh9J9wntA8+YfPzVT4Q6l/Q6qpB88IT
ZR1bUonVZLMd6Kz38sTfEzE/kxzJ8FR+aMSTpKQG/zNixx+avguHRbEL5ZQ1pzEn
ng==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:58 2025 by rpki-client