Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
File: cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa (raw, json)
Hash identifier: jmlk2R6i0MfiiA98/f3sJQw3F92eYhGnHzrI7115PqU=
Subject key identifier: 72:AE:08:A6:A7:92:74:0E:99:D9:9C:74:0A:EC:F2:86:5D:5D:12:87
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 01F1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
Signing time: Tue 30 May 2023 17:38:33 +0000
ROA not before: Tue 30 May 2023 17:38:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:7300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:38:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=72AE08A6A792740E99D99C740AECF2865D5D1287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:2b:81:81:ac:09:cd:27:cf:ba:95:b5:c5:
1d:09:5e:6d:65:11:ff:0b:5f:83:67:a7:94:51:56:
ac:4e:b1:39:65:3c:1f:4c:24:04:e3:36:0f:56:c7:
32:dd:27:03:1d:cb:02:b4:ea:7e:45:d9:d1:16:2b:
47:c6:52:e8:34:51:a0:73:58:b8:0b:17:c6:8a:5b:
a2:af:ce:57:51:c4:fb:38:bb:ee:b7:54:7d:ce:75:
00:03:b4:02:e5:5d:04:cc:fe:22:d3:72:ab:73:0e:
af:9c:13:31:b2:df:fb:2e:7c:f2:48:a7:e3:19:46:
cc:9b:0a:bf:ac:4f:2c:c0:a5:3b:e1:f5:db:03:fa:
33:fc:f9:ac:89:d9:d2:2f:4d:0d:7a:52:19:74:c8:
74:81:0a:9e:32:8c:22:df:69:ba:7c:20:fa:27:34:
13:e3:96:30:b1:61:d5:2a:5a:c7:52:67:a0:2e:1c:
c9:04:b9:29:94:29:94:ef:78:37:5f:63:94:40:d1:
f7:a1:8e:61:8c:8d:fb:6a:8a:7e:d0:ec:5f:75:e9:
12:94:69:f3:d2:8f:a6:c1:88:ba:ed:6e:5a:dc:d2:
76:d3:c6:db:4c:8c:9d:30:ce:de:d0:52:26:27:d9:
39:93:f0:a8:6a:29:6a:c0:26:0d:35:8c:e6:5f:8a:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:08:A6:A7:92:74:0E:99:D9:9C:74:0A:EC:F2:86:5D:5D:12:87
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7300::/40
Signature Algorithm: sha256WithRSAEncryption
18:c4:3d:7e:4f:e9:86:73:9b:97:f4:d0:56:ad:30:0c:56:0c:
2a:38:11:5e:43:12:f1:05:97:34:a2:62:2e:b9:ef:8e:bb:c0:
fb:32:95:62:ab:68:45:29:4f:eb:bf:a1:25:b1:a3:36:87:de:
70:87:0e:3f:e3:86:c4:62:3f:da:08:52:4f:5d:aa:0d:ce:1b:
0c:9a:bc:2d:84:f7:32:d5:e7:45:84:d4:b1:99:f0:ff:bf:11:
d3:d7:6a:42:b6:50:e7:bd:f7:10:c1:79:06:46:25:b9:d1:de:
28:3a:2d:11:ac:fe:42:1e:b5:7e:a0:42:03:44:b7:2f:71:5e:
41:5c:ba:f3:a3:23:d7:f3:ef:97:fd:2a:2b:5b:f0:29:5b:0c:
83:26:ee:74:ef:19:25:71:ad:9b:f7:ff:d7:b2:b2:fd:cb:11:
2a:dc:29:37:a3:14:09:bc:03:17:0e:b4:65:dc:fc:2b:8e:14:
96:77:d9:53:6e:35:16:de:62:cf:d9:93:f0:b5:7e:67:db:47:
5f:09:ef:de:0b:ff:4e:e9:35:cb:69:40:31:21:ca:07:91:21:
ef:a3:34:f0:6d:14:82:73:aa:31:69:24:5c:90:ab:57:0e:c5:
58:d1:04:68:00:cb:3c:2b:ab:1b:35:ec:04:62:6d:39:bd:6c:
ba:54:5e:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcyQUUwOEE2QTc5Mjc0
MEU5OUQ5OUM3NDBBRUNGMjg2NUQ1RDEyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVECuBgawJzSfPupW1xR0JXm1lEf8LX4Nnp5RRVqxOsTllPB9M
JATjNg9WxzLdJwMdywK06n5F2dEWK0fGUug0UaBzWLgLF8aKW6KvzldRxPs4u+63
VH3OdQADtALlXQTM/iLTcqtzDq+cEzGy3/sufPJIp+MZRsybCr+sTyzApTvh9dsD
+jP8+ayJ2dIvTQ16Uhl0yHSBCp4yjCLfabp8IPonNBPjljCxYdUqWsdSZ6AuHMkE
uSmUKZTveDdfY5RA0fehjmGMjftqin7Q7F916RKUafPSj6bBiLrtblrc0nbTxttM
jJ0wzt7QUiYn2TmT8KhqKWrAJg01jOZfimDrAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUcq4IpqeSdA6Z2Zx0Cuzyhl1dEocwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9jcTRJcHFlU2RBNloyWngwQ3V6eWhsMWRFb2Mu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa3MwDQYJKoZIhvcNAQELBQADggEBABjEPX5P6YZzm5f00Fat
MAxWDCo4EV5DEvEFlzSiYi657467wPsylWKraEUpT+u/oSWxozaH3nCHDj/jhsRi
P9oIUk9dqg3OGwyavC2E9zLV50WE1LGZ8P+/EdPXakK2UOe99xDBeQZGJbnR3ig6
LRGs/kIetX6gQgNEty9xXkFcuvOjI9fz75f9Kitb8ClbDIMm7nTvGSVxrZv3/9ey
sv3LESrcKTejFAm8AxcOtGXc/CuOFJZ32VNuNRbeYs/Zk/C1fmfbR18J794L/07p
NctpQDEhygeRIe+jNPBtFIJzqjFpJFyQq1cOxVjRBGgAyzwrqxs17ARibTm9bLpU
Xks=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:20 2025 by rpki-client