Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa
File: DrDG5zXnEnrx6FYTupJwZUA9OVo.roa (raw, json)
Hash identifier: 3OhZ3jXsH5YctfBCVbRkGl/UbNVPOvoaunRBe9fYrH0=
Subject key identifier: 0E:B0:C6:E7:35:E7:12:7A:F1:E8:56:13:BA:92:70:65:40:3D:39:5A
Certificate issuer: /CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
Certificate serial: 3C
Authority key identifier: 9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa
Signing time: Thu 29 Feb 2024 01:31:00 +0000
ROA not before: Thu 29 Feb 2024 01:31:00 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9371
IP address blocks: 2403:3a00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
Validity
Not Before: Feb 29 01:31:00 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=0EB0C6E735E7127AF1E85613BA927065403D395A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f9:cc:b8:03:a9:04:c2:4e:42:b4:b0:e8:3a:
94:a2:7f:ec:4e:56:c3:20:9a:63:64:8a:98:95:6f:
4b:6a:aa:58:b5:5c:bc:d9:6d:8f:3c:7d:4e:5e:aa:
e7:28:7f:bd:f4:04:1c:01:39:b6:25:dc:6c:3c:b4:
5b:c6:fa:35:64:18:b5:86:17:e7:88:90:51:b1:37:
6a:25:8a:fb:58:32:58:36:b0:85:6e:14:38:d2:4b:
1c:25:f0:14:3c:66:f9:69:05:4b:fa:ed:09:36:70:
85:16:87:50:72:1b:c9:da:8a:2d:5b:7e:b7:fb:0d:
b8:99:5a:db:82:e4:95:ec:a9:23:a5:31:90:38:bb:
c6:ab:a5:40:5b:43:d1:7a:ad:7c:2b:09:c2:a9:56:
3b:08:ad:6a:1c:e4:52:98:19:cd:43:96:7c:48:36:
a4:94:c1:00:d3:31:cc:2b:43:fa:bd:86:16:8f:c2:
37:d3:66:9c:88:30:23:f0:5f:84:12:ab:61:c5:fc:
6f:c3:6a:80:3c:31:04:fe:13:1e:20:75:2c:2b:76:
be:bf:f7:19:48:06:fa:09:50:95:2c:1f:46:f8:a0:
93:28:e8:c1:06:62:da:43:16:58:44:3e:8e:c3:ab:
d9:e8:dc:7f:89:69:bf:98:2f:e6:98:1f:b3:b2:c6:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:C6:E7:35:E7:12:7A:F1:E8:56:13:BA:92:70:65:40:3D:39:5A
X509v3 Authority Key Identifier:
keyid:9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:3a00::/32
Signature Algorithm: sha256WithRSAEncryption
5a:79:71:62:07:36:b7:f1:ff:18:c8:41:31:f1:fc:e4:da:7d:
13:a0:dc:14:e9:9f:d2:09:22:23:60:e2:4e:89:40:e1:11:32:
17:dc:c5:e1:9e:7d:9c:84:67:33:b0:41:9d:9e:4d:1a:cb:09:
ee:72:27:d5:8c:09:57:72:7b:e9:5a:36:89:e7:ca:8d:c6:52:
91:17:f4:c3:cb:59:bc:6d:87:0c:30:65:b5:e7:f1:0e:05:59:
e8:01:22:12:e2:1c:44:12:ba:36:b8:35:40:7a:f2:95:a9:42:
84:d8:b9:55:27:28:9b:c3:19:26:eb:a7:3e:70:aa:75:b8:ca:
8d:72:c6:2d:95:5a:96:d6:f3:90:8a:dc:73:29:c5:f1:89:55:
de:cc:0f:bb:e6:4f:d4:a1:30:93:c3:ea:47:70:ea:91:96:d5:
d5:6e:70:1e:de:cf:13:1a:29:cc:3b:b1:d4:30:f3:d3:86:1f:
96:48:36:a8:bc:bd:a4:e6:a6:a0:e6:9e:06:f6:0f:e6:3b:90:
67:79:ea:c5:30:69:c9:a8:94:f3:36:48:10:57:af:5c:89:7f:
6b:d9:53:10:2a:40:2b:07:de:f7:67:94:97:69:58:a1:e0:26:
c7:cd:79:a1:4b:2e:a2:3b:4a:d6:f8:0f:c1:79:f0:8a:42:37:
51:33:41:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RjVC
RjBFMTZGOTM0RkFBRjlDMjgxRUQwQkVDOUExRjUxMjAwQUM3MB4XDTI0MDIyOTAx
MzEwMFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMEVCMEM2RTczNUU3MTI3
QUYxRTg1NjEzQkE5MjcwNjU0MDNEMzk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOz5zLgDqQTCTkK0sOg6lKJ/7E5WwyCaY2SKmJVvS2qqWLVcvNlt
jzx9Tl6q5yh/vfQEHAE5tiXcbDy0W8b6NWQYtYYX54iQUbE3aiWK+1gyWDawhW4U
ONJLHCXwFDxm+WkFS/rtCTZwhRaHUHIbydqKLVt+t/sNuJla24LkleypI6UxkDi7
xqulQFtD0XqtfCsJwqlWOwitahzkUpgZzUOWfEg2pJTBANMxzCtD+r2GFo/CN9Nm
nIgwI/BfhBKrYcX8b8NqgDwxBP4THiB1LCt2vr/3GUgG+glQlSwfRvigkyjowQZi
2kMWWEQ+jsOr2ejcf4lpv5gv5pgfs7LGE3kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQOsMbnNecSevHoVhO6knBlQD05WjAfBgNVHSMEGDAWgBSfW/Dhb5NPqvnCge0L
7JofUSAKxzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDIvbjF2dzRXLVRUNnI1d29IdEMteWFIMUVnQ3NjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbjF2dzRXLVRUNnI1d29IdEMteWFI
MUVnQ3NjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTQyL0RyREc1elhuRW5yeDZGWVR1cEp3WlVBOU9Wby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAzoAMA0GCSqGSIb3DQEBCwUAA4IBAQBaeXFiBza38f8YyEEx8fzk
2n0ToNwU6Z/SCSIjYOJOiUDhETIX3MXhnn2chGczsEGdnk0aywnucifVjAlXcnvp
WjaJ58qNxlKRF/TDy1m8bYcMMGW15/EOBVnoASIS4hxEEro2uDVAevKVqUKE2LlV
Jyibwxkm66c+cKp1uMqNcsYtlVqW1vOQitxzKcXxiVXezA+75k/UoTCTw+pHcOqR
ltXVbnAe3s8TGinMO7HUMPPThh+WSDaovL2k5qag5p4G9g/mO5BneerFMGnJqJTz
NkgQV69ciX9r2VMQKkArB973Z5SXaVih4CbHzXmhSy6iO0rW+A/BefCKQjdRM0FP
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:33 2025 by rpki-client