Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/fkmgy5sQeyJrqDAr8rpAJVi0ffE.roa
File: fkmgy5sQeyJrqDAr8rpAJVi0ffE.roa (raw, json)
Hash identifier: dP7DnnraxWiYXhr6VdT6xMh5fkjUcYktMalJybuC8B0=
Subject key identifier: 7E:49:A0:CB:9B:10:7B:22:6B:A8:30:2B:F2:BA:40:25:58:B4:7D:F1
Certificate issuer: /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial: 20
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/fkmgy5sQeyJrqDAr8rpAJVi0ffE.roa
Signing time: Tue 25 May 2021 02:42:08 +0000
ROA not before: Tue 25 May 2021 02:42:08 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 55392
IP address blocks: 2409:250::/28 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Validity
Not Before: May 25 02:42:08 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=7E49A0CB9B107B226BA8302BF2BA402558B47DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:ad:c8:5c:8d:bf:46:59:b7:e5:5b:db:7b:
78:be:c9:ac:7e:b6:6d:ef:49:21:92:a2:3d:8a:7a:
a4:0b:1c:be:64:3e:2d:b5:ed:d2:62:b1:4f:18:46:
c2:b5:cd:d4:59:08:41:66:00:98:61:4a:ce:44:ca:
03:90:02:53:79:b2:31:b7:c6:d5:b6:0b:9f:72:8c:
d8:49:00:c0:f9:c1:77:a4:c3:6a:5b:8a:f0:78:2e:
f2:c4:57:84:d7:f3:b3:b8:66:63:c5:77:6f:de:19:
f5:d6:8e:8f:c5:13:f4:af:12:de:36:71:82:57:ef:
26:af:0b:5b:3a:98:80:b0:61:0a:b9:e2:46:b2:16:
2c:77:ca:6d:64:7a:e3:cb:48:c0:c4:ea:0e:d2:24:
2b:20:43:50:b2:f0:aa:89:de:c0:36:74:ac:61:bc:
13:54:22:e7:65:28:0d:49:20:06:6f:7f:b7:d3:23:
3d:fe:be:6e:cd:51:20:7f:3e:7b:fc:2f:cc:ba:42:
2c:56:dc:59:74:e5:96:31:cb:ae:9f:c9:9c:ea:a7:
81:e1:04:77:6c:51:24:f8:bb:63:9b:ab:3f:d2:54:
e3:8b:cd:6b:20:46:37:3c:f4:43:dc:23:98:70:5c:
58:dc:35:67:1c:b8:3a:25:e2:b2:56:35:1c:57:3f:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:A0:CB:9B:10:7B:22:6B:A8:30:2B:F2:BA:40:25:58:B4:7D:F1
X509v3 Authority Key Identifier:
keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/fkmgy5sQeyJrqDAr8rpAJVi0ffE.roa
sbgp-ipAddrBlock: critical
IPv6:
2409:250::/28
Signature Algorithm: sha256WithRSAEncryption
7d:32:4d:23:cc:c8:cf:70:91:ac:c2:aa:2f:7d:4e:3e:b1:c6:
e8:2f:29:ba:63:3c:09:95:18:2c:8b:5c:b7:be:db:86:e5:69:
07:5d:0b:5b:20:df:80:5a:18:85:69:d6:83:2b:16:dc:4b:6f:
8e:e5:49:a6:ad:9e:80:7e:3b:d1:6b:4e:a1:7b:53:ed:7a:df:
10:86:52:e8:3d:cb:ff:45:f2:9c:10:9f:7a:1e:47:9b:92:df:
1b:d8:4b:20:a6:f9:23:03:63:2a:12:9c:88:48:1c:a2:c3:ca:
c9:e0:90:a8:0f:25:12:58:58:15:c1:98:41:69:d0:2a:3c:c2:
85:a3:6d:fb:1b:61:f1:95:be:34:9d:42:93:06:a5:19:00:c5:
91:c4:91:b1:fd:59:6b:b3:c8:cf:3e:bc:01:b4:ef:c7:79:df:
b3:a1:a5:fb:2f:eb:00:df:b9:fb:99:c5:88:66:93:66:67:7e:
2c:87:38:ef:e9:2a:76:6c:19:27:3a:a6:5f:c0:ce:14:48:e4:
c3:f5:fe:0d:19:65:82:f8:df:2e:b3:c5:19:ea:a7:8a:c1:85:
f9:12:b5:53:fd:aa:dc:31:a1:c9:cd:91:ce:03:7b:0b:b0:ca:
3b:02:04:cc:28:cf:ef:9f:14:63:14:68:d4:e6:ae:6c:a0:d1:
78:69:e4:04
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NkJC
MTU4RjQyMkE3QkMwQURBRTE4N0VFNDg1OEYzQTFEQTkxMzEyMB4XDTIxMDUyNTAy
NDIwOFoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoN0U0OUEwQ0I5QjEwN0Iy
MjZCQTgzMDJCRjJCQTQwMjU1OEI0N0RGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPWNrchcjb9GWbflW9t7eL7JrH62be9JIZKiPYp6pAscvmQ+LbXt
0mKxTxhGwrXN1FkIQWYAmGFKzkTKA5ACU3myMbfG1bYLn3KM2EkAwPnBd6TDaluK
8Hgu8sRXhNfzs7hmY8V3b94Z9daOj8UT9K8S3jZxglfvJq8LWzqYgLBhCrniRrIW
LHfKbWR648tIwMTqDtIkKyBDULLwqonewDZ0rGG8E1Qi52UoDUkgBm9/t9MjPf6+
bs1RIH8+e/wvzLpCLFbcWXTlljHLrp/JnOqngeEEd2xRJPi7Y5urP9JU44vNayBG
Nzz0Q9wjmHBcWNw1Zxy4OiXislY1HFc/BLcCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBR+SaDLmxB7ImuoMCvyukAlWLR98TAfBgNVHSMEGDAWgBRmuxWPQip7wK2uGH7k
hY86HakTEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNTYvWnJzVmowSXFlOEN0cmhoLTVJV1BPaDJwRXhJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnJzVmowSXFlOEN0cmhoLTVJV1BP
aDJwRXhJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTU2L2ZrbWd5NXNRZXlKcnFEQXI4cnBBSlZpMGZmRS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQQkCQJQMA0GCSqGSIb3DQEBCwUA
A4IBAQB9Mk0jzMjPcJGswqovfU4+scboLym6YzwJlRgsi1y3vtuG5WkHXQtbIN+A
WhiFadaDKxbcS2+O5UmmrZ6AfjvRa06he1Ptet8QhlLoPcv/RfKcEJ96Hkebkt8b
2EsgpvkjA2MqEpyISByiw8rJ4JCoDyUSWFgVwZhBadAqPMKFo237G2Hxlb40nUKT
BqUZAMWRxJGx/Vlrs8jPPrwBtO/Hed+zoaX7L+sA37n7mcWIZpNmZ34shzjv6Sp2
bBknOqZfwM4USOTD9f4NGWWC+N8us8UZ6qeKwYX5ErVT/arcMaHJzZHOA3sLsMo7
AgTMKM/vnxRjFGjU5q5soNF4aeQE
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:20 2025 by rpki-client