Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/LTzW8pU8hpHFy_pwWLJ5OlPleAY.roa
File: LTzW8pU8hpHFy_pwWLJ5OlPleAY.roa (raw, json)
Hash identifier: BXoDcM5gwiaPDU0zzV4/Vk+0QH5KzAFjXJ98xciJQMs=
Subject key identifier: 2D:3C:D6:F2:95:3C:86:91:C5:CB:FA:70:58:B2:79:3A:53:E5:78:06
Certificate issuer: /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial: 3A
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/LTzW8pU8hpHFy_pwWLJ5OlPleAY.roa
Signing time: Sat 01 Jul 2023 01:31:29 +0000
ROA not before: Sat 01 Jul 2023 01:31:29 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 4713
IP address blocks: 2400:4000::/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Validity
Not Before: Jul 1 01:31:29 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=2D3CD6F2953C8691C5CBFA7058B2793A53E57806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:f0:a4:be:51:80:44:a1:a9:bf:2c:a5:44:
58:74:ea:ea:67:f1:3b:f5:b6:35:cf:f1:a3:6b:a8:
37:49:c9:9b:6e:98:05:2d:41:57:bb:54:c4:43:e9:
42:14:15:7b:0a:0f:81:7c:11:2a:bf:db:c3:38:7e:
95:b9:63:1c:c1:28:a9:e7:4c:58:1c:43:4a:67:cd:
dc:d3:62:2f:ea:42:2c:c2:bf:ad:b1:ab:2f:2a:86:
d7:10:9c:44:fe:69:ef:67:c6:39:91:99:91:1d:4f:
12:53:be:e7:03:37:ca:88:0c:e9:2c:76:0f:91:ca:
4e:9a:5c:cd:cc:2d:c1:d9:92:e0:6e:c2:68:b1:12:
17:04:aa:3a:38:08:26:b0:e8:45:ef:99:79:0e:a8:
fc:66:fe:ff:06:3e:54:6f:e2:c0:12:43:de:aa:bb:
13:0f:c8:29:84:be:e7:a0:dd:f8:37:39:7d:f3:bc:
c0:ad:91:e5:c9:07:54:e1:36:dd:47:41:b6:ec:aa:
3d:21:85:46:99:4e:7c:c3:81:7e:77:e8:20:8b:ed:
2c:c5:39:23:23:6c:c1:1b:95:96:c1:8f:f2:13:63:
af:8a:0c:44:d2:a8:a2:3c:0e:86:90:54:ef:a8:5e:
99:34:0a:0f:d7:b1:83:62:58:c4:ad:c5:55:43:ac:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:D6:F2:95:3C:86:91:C5:CB:FA:70:58:B2:79:3A:53:E5:78:06
X509v3 Authority Key Identifier:
keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/LTzW8pU8hpHFy_pwWLJ5OlPleAY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4000::/22
Signature Algorithm: sha256WithRSAEncryption
17:99:1a:37:98:c8:5e:30:a5:65:af:b7:c0:2e:33:28:8b:3f:
38:51:a6:9b:90:09:0a:af:e1:9f:14:ee:46:e8:9f:70:2b:45:
75:03:f0:84:5c:d9:2f:1f:b4:4d:17:1b:3f:46:b9:ce:a7:e7:
60:2c:00:6c:8b:f6:ed:eb:f7:5d:90:5d:2d:6a:f4:05:18:7e:
ea:62:b9:cc:98:a8:a7:52:94:51:ec:db:25:a0:29:da:45:ae:
77:64:df:6a:86:ac:4f:e9:7d:86:0b:b6:de:c7:84:d4:17:bb:
f6:4f:04:8f:58:8b:62:87:98:de:3c:0b:16:ff:54:1b:80:3b:
69:c3:88:bd:20:e0:b7:7c:64:ed:7b:bd:ef:d1:23:3a:95:5c:
ae:f3:cc:c4:64:ef:86:e6:fd:7b:d7:27:7f:15:88:ad:28:7c:
3c:1d:96:cf:ba:d0:cd:31:48:73:e6:d7:35:f4:a6:63:16:d8:
e8:8e:db:fd:32:56:98:3f:02:94:b9:37:e3:17:ba:2c:20:5c:
3d:1a:f1:d7:bd:4c:19:c3:df:c4:dd:37:23:fd:fd:e7:49:ce:
b2:10:b1:d2:6e:20:db:a1:3f:fc:23:ab:12:31:7e:8f:86:d7:
a4:86:66:7e:cd:ce:ef:c7:18:a1:50:54:56:ae:93:ed:29:4d:
b9:d0:7b:45
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0M3
QTE5ODA0RjcyOEU4RkY1RTQ1QkVDOERBNTgyMTA1QTNEQTlEMB4XDTIzMDcwMTAx
MzEyOVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoMkQzQ0Q2RjI5NTNDODY5
MUM1Q0JGQTcwNThCMjc5M0E1M0U1NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKj98KS+UYBEoam/LKVEWHTq6mfxO/W2Nc/xo2uoN0nJm26YBS1B
V7tUxEPpQhQVewoPgXwRKr/bwzh+lbljHMEoqedMWBxDSmfN3NNiL+pCLMK/rbGr
LyqG1xCcRP5p72fGOZGZkR1PElO+5wM3yogM6Sx2D5HKTppczcwtwdmS4G7CaLES
FwSqOjgIJrDoRe+ZeQ6o/Gb+/wY+VG/iwBJD3qq7Ew/IKYS+56Dd+Dc5ffO8wK2R
5ckHVOE23UdBtuyqPSGFRplOfMOBfnfoIIvtLMU5IyNswRuVlsGP8hNjr4oMRNKo
ojwOhpBU76hemTQKD9exg2JYxK3FVUOs4VUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQtPNbylTyGkcXL+nBYsnk6U+V4BjAfBgNVHSMEGDAWgBSzx6GYBPco6P9eRb7I
2lghBaPanTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzMvczhlaG1BVDNLT2pfWGtXLXlOcFlJUVdqMnAwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczhlaG1BVDNLT2pfWGtXLXlOcFlJ
UVdqMnAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDczL0xUelc4cFU4aHBIRnlfcHdXTEo1T2xQbGVBWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgACMAYDBAIkAEAwDQYJKoZIhvcNAQELBQADggEBABeZGjeYyF4wpWWvt8AuMyiL
PzhRppuQCQqv4Z8U7kbon3ArRXUD8IRc2S8ftE0XGz9Guc6n52AsAGyL9u3r912Q
XS1q9AUYfupiucyYqKdSlFHs2yWgKdpFrndk32qGrE/pfYYLtt7HhNQXu/ZPBI9Y
i2KHmN48Cxb/VBuAO2nDiL0g4Ld8ZO17ve/RIzqVXK7zzMRk74bm/XvXJ38ViK0o
fDwdls+60M0xSHPm1zX0pmMW2OiO2/0yVpg/ApS5N+MXuiwgXD0a8de9TBnD38Td
NyP9/edJzrIQsdJuINuhP/wjqxIxfo+G16SGZn7Nzu/HGKFQVFauk+0pTbnQe0U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:27 2025 by rpki-client