Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/1QzRnBk0xI4Ln_XR0mdjp12ra_Q.roa
File: 1QzRnBk0xI4Ln_XR0mdjp12ra_Q.roa (raw, json)
Hash identifier: F7OpfI9xed+w/IsSUp3betNoGgzZVyEQlLg/FEJaCyI=
Subject key identifier: D5:0C:D1:9C:19:34:C4:8E:0B:9F:F5:D1:D2:67:63:A7:5D:AB:6B:F4
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: C2
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/1QzRnBk0xI4Ln_XR0mdjp12ra_Q.roa
Signing time: Sun 01 Jan 2023 01:29:13 +0000
ROA not before: Sun 01 Jan 2023 01:29:13 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 8220
IP address blocks: 202.7.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:13 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=D50CD19C1934C48E0B9FF5D1D26763A75DAB6BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:8a:f8:e5:10:89:84:81:45:aa:a4:21:86:
f1:32:fe:66:0b:3f:c5:24:d9:20:1e:40:7b:4a:6b:
e5:9d:ea:79:bb:5a:3a:68:c9:65:0d:be:60:f7:20:
fa:6e:7a:c6:40:c9:41:1a:5b:97:84:4d:0a:1d:a4:
1d:2b:f4:1f:0c:cc:1a:3a:ae:f9:4d:59:2a:d7:d1:
68:2c:3c:2a:1d:6d:b6:79:69:f3:3a:c1:1f:71:83:
7b:04:a2:1d:90:33:39:c6:da:32:3f:6d:63:e2:16:
7a:bb:9e:99:ee:e3:ae:f3:fb:43:14:fe:e0:e7:fd:
3c:99:e1:32:58:51:4d:f3:5e:fc:bc:ab:25:13:0a:
e7:b6:34:af:64:1e:1d:31:cf:46:f3:19:a7:d4:fa:
4d:1c:84:30:aa:70:39:f9:61:fb:c0:7b:be:c3:ca:
eb:62:70:6d:d3:54:15:8c:3e:32:c3:d7:ca:71:81:
a6:cc:85:0b:b1:83:62:0f:8e:bf:cd:9b:38:71:6f:
af:f8:c6:5f:04:44:f3:ad:c0:f7:25:98:90:27:02:
54:61:db:e9:c6:86:dc:f7:bc:f4:9c:e5:1d:9b:1d:
ca:0e:2d:3a:57:05:33:3a:13:58:36:b4:b5:ae:09:
87:db:e7:bc:5c:30:e5:53:54:b3:12:7c:0c:4e:9e:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:D1:9C:19:34:C4:8E:0B:9F:F5:D1:D2:67:63:A7:5D:AB:6B:F4
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/1QzRnBk0xI4Ln_XR0mdjp12ra_Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.7.96.0/20
Signature Algorithm: sha256WithRSAEncryption
38:b6:79:0c:9c:8a:ba:b6:5a:18:cf:12:ed:15:5a:08:1a:a7:
01:c7:6e:37:a2:3d:50:6b:b1:e5:8f:ed:32:dc:9d:ad:09:4e:
d1:54:3b:8d:d7:dd:75:03:f6:e2:06:f0:a3:2e:d7:fe:e2:20:
5c:12:8a:89:ac:59:24:88:be:ce:fb:b8:f0:68:76:d1:3f:28:
cf:ee:e0:6f:ff:13:7b:b5:ae:88:54:2f:a0:d5:54:08:46:37:
c1:bd:e6:4c:47:b5:f6:c7:a8:3d:fc:e1:7b:87:62:c2:04:eb:
5a:7e:e5:99:44:c8:b4:07:68:0e:f9:1b:1f:bf:55:37:21:f9:
d5:eb:a8:fd:b7:cb:bb:02:d6:7d:c3:75:67:62:b1:57:30:f1:
fb:8e:e9:7b:a7:13:b3:cb:64:5b:85:c5:6c:a5:f9:2d:45:ca:
d7:df:d8:9d:bd:72:cc:77:d5:b5:f7:e1:d4:bc:ad:13:5e:eb:
95:7b:7e:7f:23:7b:1c:82:81:7b:5d:cb:ed:2a:1a:a2:bd:bb:
fd:0d:15:0f:54:3e:7d:b5:28:2b:65:42:61:cf:14:70:52:94:
28:6c:97:5c:17:81:68:99:47:d1:9b:41:90:6c:82:0e:b5:5d:
43:51:4d:4a:f6:e1:eb:4e:6f:03:de:ff:d1:37:e8:79:24:af:
41:d8:4e:1b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzAxMDEw
MTI5MTNaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ1MENEMTlDMTkzNEM0
OEUwQjlGRjVEMUQyNjc2M0E3NURBQjZCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL+Yr45RCJhIFFqqQhhvEy/mYLP8Uk2SAeQHtKa+Wd6nm7Wjpo
yWUNvmD3IPpuesZAyUEaW5eETQodpB0r9B8MzBo6rvlNWSrX0WgsPCodbbZ5afM6
wR9xg3sEoh2QMznG2jI/bWPiFnq7npnu467z+0MU/uDn/TyZ4TJYUU3zXvy8qyUT
Cue2NK9kHh0xz0bzGafU+k0chDCqcDn5YfvAe77DyuticG3TVBWMPjLD18pxgabM
hQuxg2IPjr/Nmzhxb6/4xl8ERPOtwPclmJAnAlRh2+nGhtz3vPSc5R2bHcoOLTpX
BTM6E1g2tLWuCYfb57xcMOVTVLMSfAxOnjLdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1QzRnBk0xI4Ln/XR0mdjp12ra/QwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5LzFRelJuQmsweEk0TG5fWFIwbWRqcDEycmFfUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKB2AwDQYJKoZIhvcNAQELBQADggEBADi2eQycirq2WhjPEu0VWggapwHH
bjeiPVBrseWP7TLcna0JTtFUO43X3XUD9uIG8KMu1/7iIFwSiomsWSSIvs77uPBo
dtE/KM/u4G//E3u1rohUL6DVVAhGN8G95kxHtfbHqD384XuHYsIE61p+5ZlEyLQH
aA75Gx+/VTch+dXrqP23y7sC1n3DdWdisVcw8fuO6XunE7PLZFuFxWyl+S1Fytff
2J29csx31bX34dS8rRNe65V7fn8jexyCgXtdy+0qGqK9u/0NFQ9UPn21KCtlQmHP
FHBSlChsl1wXgWiZR9GbQZBsgg61XUNRTUr24etObwPe/9E36Hkkr0HYThs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:05 2025 by rpki-client