Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4qFnU5kaHX3HtNti2F5cGFXXLII.roa
File: 4qFnU5kaHX3HtNti2F5cGFXXLII.roa (raw, json)
Hash identifier: 7q/m9R5AG6Cn77dtOcfV7djRVYIEP1vVSa/wZoV+gqc=
Subject key identifier: E2:A1:67:53:99:1A:1D:7D:C7:B4:DB:62:D8:5E:5C:18:55:D7:2C:82
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0136
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4qFnU5kaHX3HtNti2F5cGFXXLII.roa
Signing time: Fri 07 Jul 2023 04:08:16 +0000
ROA not before: Fri 07 Jul 2023 04:08:16 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 36.52.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:08:16 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=E2A16753991A1D7DC7B4DB62D85E5C1855D72C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:b9:4a:a5:b8:6f:49:21:64:b9:ab:c9:c9:
dc:a6:c2:4d:8a:14:f6:01:0c:e4:41:e3:9d:b5:00:
30:b0:41:08:3c:3d:7e:25:cb:7f:d0:d3:35:ca:8e:
ad:21:12:da:77:b7:bf:68:00:84:dc:a0:98:47:5e:
d9:43:f8:4f:7b:68:22:e8:fa:29:9b:1a:8e:ab:dc:
46:dc:23:a0:ac:c6:2f:16:04:c6:ce:9b:d0:0a:23:
01:0e:88:6d:14:94:11:24:0d:20:95:7f:a8:79:41:
32:7e:77:d7:88:af:7e:5f:ff:b9:77:1b:82:f2:d2:
dc:bb:4d:92:0d:50:69:b3:b6:d4:b6:bb:e0:21:33:
da:57:f4:74:89:7d:ed:29:da:97:1d:29:b0:c8:e6:
19:f2:37:0a:27:53:d8:59:e0:90:a0:84:0c:1d:7d:
c8:4d:03:33:fc:ba:24:66:9e:31:09:c9:b5:7b:57:
8b:57:7b:d8:c1:ff:cd:39:30:03:7c:71:9f:3c:8f:
6a:3c:90:70:03:ab:83:b4:80:ab:8f:3b:07:de:0d:
42:21:67:30:64:d3:42:2e:31:d7:0c:08:3c:b2:68:
83:14:91:3e:32:bb:af:56:f5:82:6f:56:f9:1e:38:
98:ac:94:ce:b5:e4:69:5f:23:31:f7:c8:11:22:6e:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:67:53:99:1A:1D:7D:C7:B4:DB:62:D8:5E:5C:18:55:D7:2C:82
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4qFnU5kaHX3HtNti2F5cGFXXLII.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.52.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:98:4e:c6:9b:9f:15:cb:e3:7c:43:7b:11:00:36:37:93:78:
d8:b0:71:77:4b:b7:f0:63:ce:d6:a0:8f:03:8b:9d:b5:4b:92:
9c:4b:a3:4a:07:97:45:26:3f:a8:22:00:2f:b3:43:88:97:32:
be:26:ea:e1:7d:72:ef:71:d0:34:0e:bd:5c:04:79:ff:cc:0a:
7c:f9:eb:b6:fc:2f:4b:41:15:a9:40:6e:50:59:61:43:0b:7c:
c6:81:29:c1:a9:a9:c4:d5:90:43:04:08:6a:56:7a:36:f0:a4:
99:53:30:f3:4a:8a:c6:a8:54:ba:07:9f:e4:66:52:fd:4c:c2:
3c:bd:dc:5d:d8:08:74:94:51:81:ec:b1:e2:a8:41:ec:29:bb:
eb:0d:2f:25:16:9e:1d:fe:ea:8f:74:3a:c3:e3:65:bc:4c:27:
0c:40:da:74:49:01:5e:fe:67:4e:11:bf:99:51:40:cf:fd:28:
5c:f6:fa:ac:ee:db:23:a3:9f:a4:26:6a:ac:7c:00:07:f2:e2:
00:6f:dd:44:df:49:c0:92:f4:52:0b:0b:c4:0a:a5:bd:a2:45:
33:67:de:b0:ca:9b:17:a0:ee:ea:3a:9a:b4:7a:6f:de:8c:8b:
a4:3e:9c:b0:1b:65:b4:ce:a8:97:45:d4:b1:f2:be:53:c9:7e:
00:47:1b:5d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MTZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEUyQTE2NzUzOTkxQTFE
N0RDN0I0REI2MkQ4NUU1QzE4NTVENzJDODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF07lKpbhvSSFkuavJydymwk2KFPYBDORB4521ADCwQQg8PX4l
y3/Q0zXKjq0hEtp3t79oAITcoJhHXtlD+E97aCLo+imbGo6r3EbcI6Csxi8WBMbO
m9AKIwEOiG0UlBEkDSCVf6h5QTJ+d9eIr35f/7l3G4Ly0ty7TZINUGmzttS2u+Ah
M9pX9HSJfe0p2pcdKbDI5hnyNwonU9hZ4JCghAwdfchNAzP8uiRmnjEJybV7V4tX
e9jB/805MAN8cZ88j2o8kHADq4O0gKuPOwfeDUIhZzBk00IuMdcMCDyyaIMUkT4y
u69W9YJvVvkeOJislM615GlfIzH3yBEibqaZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4qFnU5kaHX3HtNti2F5cGFXXLIIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzRxRm5VNWthSFgzSHROdGkyRjVjR0ZYWExJSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMkNNAwDQYJKoZIhvcNAQELBQADggEBAI6YTsabnxXL43xDexEANjeTeNiw
cXdLt/BjztagjwOLnbVLkpxLo0oHl0UmP6giAC+zQ4iXMr4m6uF9cu9x0DQOvVwE
ef/MCnz567b8L0tBFalAblBZYUMLfMaBKcGpqcTVkEMECGpWejbwpJlTMPNKisao
VLoHn+RmUv1Mwjy93F3YCHSUUYHsseKoQewpu+sNLyUWnh3+6o90OsPjZbxMJwxA
2nRJAV7+Z04Rv5lRQM/9KFz2+qzu2yOjn6Qmaqx8AAfy4gBv3UTfScCS9FILC8QK
pb2iRTNn3rDKmxeg7uo6mrR6b96Mi6Q+nLAbZbTOqJdF1LHyvlPJfgBHG10=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:18 2025 by rpki-client