Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/DcOWrsl0nnr63FGBZE4zsPsJHdc.roa
File: DcOWrsl0nnr63FGBZE4zsPsJHdc.roa (raw, json)
Hash identifier: EvfONVeO3rz0Ax9QXa5JxhSK24Wm+ny1gwsZFFt14HU=
Subject key identifier: 0D:C3:96:AE:C9:74:9E:7A:FA:DC:51:81:64:4E:33:B0:FB:09:1D:D7
Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial: 13
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/DcOWrsl0nnr63FGBZE4zsPsJHdc.roa
Signing time: Sat 11 Feb 2023 07:33:35 +0000
ROA not before: Sat 11 Feb 2023 07:33:35 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 17676
IP address blocks: 2403:7a00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Validity
Not Before: Feb 11 07:33:35 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=0DC396AEC9749E7AFADC5181644E33B0FB091DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:3b:ef:23:06:61:b9:5a:d1:fb:86:66:b3:
bb:54:00:2c:b2:e1:c7:80:6b:5c:ba:53:5b:93:cd:
71:55:6a:c3:08:38:05:d0:69:9f:fe:e3:58:07:02:
06:75:1e:de:bf:60:90:60:57:7b:d3:c0:d3:c5:42:
2d:0a:fa:fc:8d:e7:73:67:5e:e2:8f:bd:ce:5a:fa:
90:d4:14:56:66:10:a3:ea:64:42:94:2d:ce:b3:7b:
2f:9f:93:f1:16:b4:78:4c:a9:3c:fb:e0:4c:63:f2:
a3:eb:85:eb:ff:1f:83:98:fd:ce:ab:21:a0:e9:5d:
0e:a1:f2:8c:df:9f:38:24:89:af:c9:d2:31:4b:9b:
09:2e:0b:13:38:24:75:2a:e3:4e:76:b3:83:be:f3:
9b:24:e1:2f:9a:1d:c4:b8:83:6a:62:22:07:02:27:
a3:22:7e:1f:d0:31:e7:65:cf:97:41:a6:6e:ad:43:
88:52:82:d8:b5:2f:1b:62:5d:fe:fc:50:3e:89:99:
77:86:46:84:e8:4a:94:c6:b1:58:0c:5b:51:4e:a0:
c5:a1:93:0f:93:c0:98:a4:15:73:45:39:ab:46:eb:
72:12:bc:d1:21:c4:54:cd:74:be:c5:c1:4e:9b:12:
ac:fd:72:de:43:30:3d:87:61:e5:bc:f5:3d:0b:0e:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:96:AE:C9:74:9E:7A:FA:DC:51:81:64:4E:33:B0:FB:09:1D:D7
X509v3 Authority Key Identifier:
keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/DcOWrsl0nnr63FGBZE4zsPsJHdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
0b:39:2a:01:fb:c6:c7:90:52:c1:3c:e5:07:40:2e:eb:5e:c4:
1b:1c:cf:84:98:3c:81:0d:ce:68:f6:28:3c:da:c7:56:52:37:
b8:db:df:0f:29:c3:89:19:8c:1a:f1:f8:ae:50:7a:24:55:d6:
87:9e:86:cd:22:ec:5e:77:88:24:c3:89:26:c4:8a:1c:9d:e0:
a7:b4:d6:a7:ad:45:3d:29:fc:d5:84:0a:ad:88:d8:40:73:dd:
7f:02:52:90:86:97:bc:ec:e1:b1:b3:24:16:5b:3d:57:c6:a9:
12:ea:78:30:c2:2a:ea:a8:44:88:52:f7:ea:46:12:69:34:45:
07:49:dc:26:a3:15:20:ba:be:f3:84:ee:22:c4:26:36:66:e5:
f2:c3:c6:47:f9:49:df:41:88:1a:7b:51:44:75:32:95:12:32:
86:9b:99:d1:30:9e:cf:09:a6:31:73:a8:1c:b5:3b:6a:b1:7f:
67:b0:2d:00:72:04:d3:67:e6:66:02:08:09:8e:76:cd:22:fa:
83:88:51:26:f5:c8:d8:74:d1:49:de:96:6c:53:19:df:13:00:
86:52:74:60:58:4c:4d:36:3e:d9:7e:4d:7e:f0:cc:0d:95:ec:
03:20:05:6f:50:64:2c:62:95:d0:72:0e:05:b0:10:aa:16:d1:
36:85:23:bd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB
RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTIzMDIxMTA3
MzMzNVoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMERDMzk2QUVDOTc0OUU3
QUZBREM1MTgxNjQ0RTMzQjBGQjA5MURENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ91O+8jBmG5WtH7hmazu1QALLLhx4BrXLpTW5PNcVVqwwg4BdBp
n/7jWAcCBnUe3r9gkGBXe9PA08VCLQr6/I3nc2de4o+9zlr6kNQUVmYQo+pkQpQt
zrN7L5+T8Ra0eEypPPvgTGPyo+uF6/8fg5j9zqshoOldDqHyjN+fOCSJr8nSMUub
CS4LEzgkdSrjTnazg77zmyThL5odxLiDamIiBwInoyJ+H9Ax52XPl0Gmbq1DiFKC
2LUvG2Jd/vxQPomZd4ZGhOhKlMaxWAxbUU6gxaGTD5PAmKQVc0U5q0brchK80SHE
VM10vsXBTpsSrP1y3kMwPYdh5bz1PQsO6S8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQNw5auyXSeevrcUYFkTjOw+wkd1zAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA
ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk
UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTQ0L0RjT1dyc2wwbm5yNjNGR0JaRTR6c1BzSkhkYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkA3oAMA0GCSqGSIb3DQEBCwUAA4IBAQALOSoB+8bHkFLBPOUHQC7r
XsQbHM+EmDyBDc5o9ig82sdWUje4298PKcOJGYwa8fiuUHokVdaHnobNIuxed4gk
w4kmxIocneCntNanrUU9KfzVhAqtiNhAc91/AlKQhpe87OGxsyQWWz1XxqkS6ngw
wirqqESIUvfqRhJpNEUHSdwmoxUgur7zhO4ixCY2ZuXyw8ZH+UnfQYgae1FEdTKV
EjKGm5nRMJ7PCaYxc6gctTtqsX9nsC0AcgTTZ+ZmAggJjnbNIvqDiFEm9cjYdNFJ
3pZsUxnfEwCGUnRgWExNNj7Zfk1+8MwNlewDIAVvUGQsYpXQcg4FsBCqFtE2hSO9
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:53 2025 by rpki-client