Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa
File: Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa (raw, json)
Hash identifier: g0mZH8dRlgheszzxLiKF+5j7f5z/UbAjEFoe5b+5fbg=
Subject key identifier: 2A:9D:FB:5E:41:BA:1D:A2:75:65:1D:8F:15:9D:9D:E3:6E:A9:53:B6
Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial: 22
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa
Signing time: Sun 01 Oct 2023 01:30:05 +0000
ROA not before: Sun 01 Oct 2023 01:30:05 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 131921
IP address blocks: 2406:a1c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Validity
Not Before: Oct 1 01:30:05 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=2A9DFB5E41BA1DA275651D8F159D9DE36EA953B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:fb:95:38:e9:61:00:cc:a8:35:79:20:bf:
81:fc:2b:9b:b8:7d:f6:6a:fc:0b:f2:99:bd:dc:0c:
4d:30:3f:c4:a6:1b:89:ae:bd:28:77:09:b7:40:9b:
91:43:57:b4:fb:06:64:65:8d:a8:ae:16:b6:5a:29:
b9:be:12:fd:6c:de:4b:eb:a4:e9:0c:e0:37:22:86:
2d:a0:9c:e9:ef:f5:de:ae:ef:5e:d7:29:6a:e3:1a:
26:5d:63:c6:a2:2b:d4:2d:d4:e5:00:3f:6d:e4:30:
37:26:d7:47:44:df:22:b0:f9:33:1e:52:67:73:7c:
0b:a4:5d:12:d2:ec:c1:96:13:47:8d:54:cf:5c:09:
45:18:db:07:65:e4:dd:75:4a:b9:6b:79:e9:a5:87:
c3:d3:bf:d0:8d:9a:35:2c:6a:84:b9:e6:6f:8c:12:
a1:c3:91:15:f3:f5:fe:36:ae:3d:60:40:cc:31:db:
aa:b5:62:81:2f:2a:35:f0:25:7d:b5:cb:f2:10:2e:
b8:54:8f:f4:a3:ca:28:a0:ad:49:b9:93:fb:4a:5d:
ed:65:b2:ab:d7:33:a2:0e:d5:1e:28:44:34:20:66:
b8:74:31:f5:a0:6a:34:4c:13:cf:f5:6f:30:3f:f8:
fa:51:b8:48:3b:dc:a3:7d:cd:f6:9f:86:ad:b2:6a:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9D:FB:5E:41:BA:1D:A2:75:65:1D:8F:15:9D:9D:E3:6E:A9:53:B6
X509v3 Authority Key Identifier:
keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:a1c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
cb:3f:bd:c1:99:91:76:4f:34:bb:39:d4:f5:8b:a4:12:01:1e:
46:3e:e6:74:51:44:94:7c:58:a8:85:2a:04:0f:cf:3c:61:7c:
f0:ca:7f:0b:c0:ec:da:16:3b:04:86:1a:33:60:cc:7b:af:9c:
b4:dd:9b:c3:38:52:3d:e1:b6:04:ce:a7:2e:3b:8e:03:c6:b5:
e3:be:86:65:a7:a2:33:de:87:8d:91:e1:f3:2c:a7:6e:87:36:
e0:2b:90:38:49:93:4d:79:b7:5b:ab:b1:ae:c8:2d:ac:c2:c2:
53:4c:98:fa:d9:fa:db:17:ff:dd:f1:98:e3:88:e4:a9:11:33:
69:15:a1:c4:1e:ae:5c:0d:b2:f5:a3:bc:ea:1d:9f:01:51:ae:
d2:79:79:88:24:b5:1b:27:89:3e:c9:e1:ff:00:fa:a5:3c:03:
a0:27:12:cc:4a:39:37:6a:1f:61:39:6a:d3:4f:2b:68:dc:a5:
13:67:ff:b0:40:9a:2c:5f:c5:3b:b1:3d:84:aa:9f:16:e5:ba:
87:1d:17:50:09:40:af:06:19:25:49:b6:3e:9f:dc:d3:e1:83:
0f:ab:be:1a:8f:7d:20:f2:25:6c:74:c1:1d:4d:a5:c9:7e:e2:
c6:79:40:54:3b:82:86:27:c8:8a:59:9c:b1:6e:43:2f:90:61:
31:89:ef:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTIzMTAwMTAx
MzAwNVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMkE5REZCNUU0MUJBMURB
Mjc1NjUxRDhGMTU5RDlERTM2RUE5NTNCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKs/+5U46WEAzKg1eSC/gfwrm7h99mr8C/KZvdwMTTA/xKYbia69
KHcJt0CbkUNXtPsGZGWNqK4Wtlopub4S/WzeS+uk6QzgNyKGLaCc6e/13q7vXtcp
auMaJl1jxqIr1C3U5QA/beQwNybXR0TfIrD5Mx5SZ3N8C6RdEtLswZYTR41Uz1wJ
RRjbB2Xk3XVKuWt56aWHw9O/0I2aNSxqhLnmb4wSocORFfP1/jauPWBAzDHbqrVi
gS8qNfAlfbXL8hAuuFSP9KPKKKCtSbmT+0pd7WWyq9czog7VHihENCBmuHQx9aBq
NEwTz/VvMD/4+lG4SDvco33N9p+GrbJq3QUCAwEAAaOCAiswggInMB0GA1UdDgQW
BBQqnfteQbodonVlHY8VnZ3jbqlTtjAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L0twMzdYa0c2SGFKMVpSMlBGWjJkNDI2cFU3WS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkBqHAAAIwDQYJKoZIhvcNAQELBQADggEBAMs/vcGZkXZPNLs51PWL
pBIBHkY+5nRRRJR8WKiFKgQPzzxhfPDKfwvA7NoWOwSGGjNgzHuvnLTdm8M4Uj3h
tgTOpy47jgPGteO+hmWnojPeh42R4fMsp26HNuArkDhJk015t1ursa7ILazCwlNM
mPrZ+tsX/93xmOOI5KkRM2kVocQerlwNsvWjvOodnwFRrtJ5eYgktRsniT7J4f8A
+qU8A6AnEsxKOTdqH2E5atNPK2jcpRNn/7BAmixfxTuxPYSqnxbluocdF1AJQK8G
GSVJtj6f3NPhgw+rvhqPfSDyJWx0wR1Npcl+4sZ5QFQ7goYnyIpZnLFuQy+QYTGJ
74Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:22 2025 by rpki-client