Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jmslsacG7VDEl3kYKVQVkiEpeU.roa
File: 3jmslsacG7VDEl3kYKVQVkiEpeU.roa (raw, json)
Hash identifier: 41YGvznQ/UZVqIsnp3fQoFxxIP694NL/RaQ06Z+Pm8Y=
Subject key identifier: DE:39:AC:96:C6:9C:1B:B5:43:12:5D:E4:60:A5:50:56:48:84:A5:E5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0555
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jmslsacG7VDEl3kYKVQVkiEpeU.roa
Signing time: Thu 27 Jul 2023 16:56:14 +0000
ROA not before: Thu 27 Jul 2023 16:56:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:56:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=DE39AC96C69C1BB543125DE460A550564884A5E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:d9:1a:30:8e:b3:6c:97:5d:3a:68:a5:0c:
02:fa:d9:e4:8b:04:58:20:5a:47:6d:f7:96:08:11:
e7:fb:5f:28:ef:4b:57:39:5d:f2:56:4b:83:f4:8e:
3d:cf:8a:99:35:22:25:07:ba:42:c6:61:cc:9a:8c:
b5:4e:3f:7a:81:b2:56:20:1a:4f:01:72:77:b2:5f:
54:3f:41:0a:93:e8:ab:84:05:0a:64:73:b2:bf:2d:
a7:d4:1a:16:33:c1:ac:9f:40:9e:77:51:fc:af:2d:
a8:57:b2:ba:03:18:65:28:1f:79:77:e8:94:9e:91:
d3:5c:12:bf:f0:e5:f7:45:1a:ce:38:ac:b8:a0:ce:
f7:95:df:0f:7c:e0:2f:4b:00:5b:c6:9f:29:07:e3:
d2:ab:02:e6:5f:5d:3a:da:6d:99:01:6a:6f:80:d5:
7f:78:7c:77:e0:76:f0:a5:4a:6c:91:c5:02:e3:1d:
8a:78:79:24:b3:56:22:20:e8:ef:27:49:15:47:f8:
c7:56:db:f4:97:a0:0e:cf:40:ed:b7:5d:df:98:cc:
8b:33:83:e2:75:8b:15:42:c8:a7:01:79:c7:8c:2d:
b8:a2:c9:91:d9:68:8a:bb:d9:d4:ca:c7:be:2e:06:
36:3d:30:36:3f:66:47:fc:53:c4:d8:62:50:51:ea:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:39:AC:96:C6:9C:1B:B5:43:12:5D:E4:60:A5:50:56:48:84:A5:E5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3jmslsacG7VDEl3kYKVQVkiEpeU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:40:6f:45:6a:7f:c1:55:fc:1b:2d:4d:f7:4e:c3:eb:4a:39:
a7:73:85:78:b2:b0:21:8f:ca:37:69:93:43:ea:c9:10:35:f3:
9c:4c:84:fa:13:d8:38:4c:60:c5:60:1d:9b:92:f6:1d:db:9b:
66:51:3d:2e:54:38:0b:64:a4:34:c0:49:86:01:d2:1d:f3:7f:
1b:9b:98:63:7b:f3:3d:a3:39:db:fb:70:1c:8c:4e:da:80:0c:
e4:13:47:6e:a2:84:d7:c3:30:5a:86:27:7e:8e:81:14:2d:bc:
02:a1:86:7c:a7:40:f1:d7:2a:ab:99:80:e0:61:5d:76:1c:b3:
e9:11:14:78:fb:60:3e:2d:2f:6c:0c:4e:2f:01:95:a3:5b:49:
26:f3:e1:7a:83:1d:2d:85:45:30:17:23:1f:0d:46:f8:e5:26:
6b:08:c8:af:fa:6b:ef:c9:15:c6:0b:4f:63:e8:51:95:55:42:
4d:e3:20:04:cc:2f:a5:fe:42:67:58:3e:5d:2b:08:a9:a6:9d:
ed:2c:b6:3d:9f:63:19:1c:56:80:89:5d:64:89:0d:d5:08:5a:
3b:57:f3:8c:86:4a:4a:5e:0d:15:b9:1c:a7:45:4b:bb:10:7a:
68:d6:84:d9:3b:6e:b3:28:bc:3f:e3:19:b0:aa:5e:2f:32:33:
40:9d:b1:eb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU2MTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKERFMzlBQzk2QzY5QzFC
QjU0MzEyNURFNDYwQTU1MDU2NDg4NEE1RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHCNkaMI6zbJddOmilDAL62eSLBFggWkdt95YIEef7XyjvS1c5
XfJWS4P0jj3Pipk1IiUHukLGYcyajLVOP3qBslYgGk8BcneyX1Q/QQqT6KuEBQpk
c7K/LafUGhYzwayfQJ53UfyvLahXsroDGGUoH3l36JSekdNcEr/w5fdFGs44rLig
zveV3w984C9LAFvGnykH49KrAuZfXTrabZkBam+A1X94fHfgdvClSmyRxQLjHYp4
eSSzViIg6O8nSRVH+MdW2/SXoA7PQO23Xd+YzIszg+J1ixVCyKcBeceMLbiiyZHZ
aIq72dTKx74uBjY9MDY/Zkf8U8TYYlBR6t1XAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3jmslsacG7VDEl3kYKVQVkiEpeUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzNqbXNsc2FjRzdWREVsM2tZS1ZRVmtpRXBlVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHcnzwwDQYJKoZIhvcNAQELBQADggEBAFpAb0Vqf8FV/BstTfdOw+tKOadz
hXiysCGPyjdpk0PqyRA185xMhPoT2DhMYMVgHZuS9h3bm2ZRPS5UOAtkpDTASYYB
0h3zfxubmGN78z2jOdv7cByMTtqADOQTR26ihNfDMFqGJ36OgRQtvAKhhnynQPHX
KquZgOBhXXYcs+kRFHj7YD4tL2wMTi8BlaNbSSbz4XqDHS2FRTAXIx8NRvjlJmsI
yK/6a+/JFcYLT2PoUZVVQk3jIATML6X+QmdYPl0rCKmmne0stj2fYxkcVoCJXWSJ
DdUIWjtX84yGSkpeDRW5HKdFS7sQemjWhNk7brMovD/jGbCqXi8yM0Cdses=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:19 2025 by rpki-client