Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
File: 9lUymC1uWvn_cPO4mqLGvTBWrMs.roa (raw, json)
Hash identifier: yOJojKgAUeyjLA9I1xN3LyJKhpSJu4SG4ccNM3nTEyQ=
Subject key identifier: F6:55:32:98:2D:6E:5A:F9:FF:70:F3:B8:9A:A2:C6:BD:30:56:AC:CB
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0495
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
Signing time: Thu 29 Feb 2024 01:28:55 +0000
ROA not before: Thu 29 Feb 2024 01:28:55 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 10010
IP address blocks: 220.216.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Feb 29 01:28:55 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=F65532982D6E5AF9FF70F3B89AA2C6BD3056ACCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:31:fe:ee:ed:51:3b:79:02:ca:cf:b2:19:db:
53:83:1f:37:c0:ef:04:2b:94:5f:1a:2d:18:54:56:
2e:74:dd:81:22:bd:75:df:ff:39:7f:2c:00:8c:34:
b6:aa:c1:65:29:29:8c:cd:49:50:17:ff:75:bb:85:
16:46:01:fc:b5:a3:d5:90:f2:6c:aa:23:b0:c1:ee:
83:e9:a2:47:0f:6e:34:55:4a:b7:d7:7b:65:f8:7b:
38:68:dd:34:b6:7b:1c:3a:dc:20:32:18:2e:11:f0:
9c:bc:a1:fc:c8:c6:0e:47:65:41:80:39:3e:2d:1a:
42:f0:34:0f:06:6d:eb:0b:cc:71:78:3e:db:97:36:
ae:35:e1:fc:e2:d1:9b:86:5d:d6:f1:3b:61:f9:dc:
ef:ed:8d:0c:8e:75:f6:42:c8:b0:fc:08:07:a0:5b:
dd:99:93:9b:0c:7c:fe:d4:84:9a:8d:f2:65:3d:8d:
d5:4e:18:73:0b:5d:f7:36:56:69:15:4c:ae:a2:f1:
50:71:36:81:04:f9:6d:ea:9f:8b:ac:bd:99:c4:3b:
78:41:80:c1:88:02:30:64:ae:2a:7f:24:40:52:66:
b1:d5:42:49:48:f4:ac:6f:f9:c5:6d:10:90:70:f0:
80:2e:23:1a:7b:2e:a6:2b:18:5b:6d:d7:e5:d9:45:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:32:98:2D:6E:5A:F9:FF:70:F3:B8:9A:A2:C6:BD:30:56:AC:CB
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:20:25:1f:30:24:a8:6e:b0:7b:b8:3a:9d:57:da:6b:ce:38:
48:16:52:e4:3c:a1:a6:73:a7:01:cc:1c:94:03:2d:b0:54:88:
30:8c:0b:1f:3e:cf:9d:8f:f9:b7:d8:29:5d:7c:c8:d7:e6:d7:
6a:6e:32:39:82:e6:b2:07:9a:81:fc:80:87:3d:61:92:cf:37:
0e:b0:ca:dd:9e:3c:b8:61:8b:8d:44:6b:f0:fd:9d:05:41:9d:
7f:77:01:94:33:46:01:cc:95:26:cf:05:43:75:e5:63:38:dc:
96:04:b8:4d:f6:08:1c:cc:f1:6a:e5:fc:cf:33:a4:ed:eb:17:
a7:bd:1e:b5:80:b9:a6:5c:86:a0:67:68:fb:72:70:23:16:98:
64:fb:14:23:b6:35:62:69:02:71:d1:39:e9:5c:3d:ea:82:e6:
0e:37:e7:f5:d5:c6:8b:c1:11:06:07:b3:ad:00:e1:ce:2a:92:
07:4f:1a:c4:8d:b0:9d:f6:0e:7f:b2:1b:8c:96:97:69:87:39:
d0:16:73:c8:99:84:c1:e3:bf:ca:bc:e7:4e:c5:70:80:87:9f:
ec:22:ec:c2:5d:60:a5:85:a5:42:42:15:7e:7b:d1:25:52:07:
ea:f0:a6:1e:8d:f2:2e:dd:66:91:eb:e5:1f:ce:b6:7a:6c:22:
74:9b:0d:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTI4NTVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY2NTUzMjk4MkQ2RTVB
RjlGRjcwRjNCODlBQTJDNkJEMzA1NkFDQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxMf7u7VE7eQLKz7IZ21ODHzfA7wQrlF8aLRhUVi503YEivXXf
/zl/LACMNLaqwWUpKYzNSVAX/3W7hRZGAfy1o9WQ8myqI7DB7oPpokcPbjRVSrfX
e2X4ezho3TS2exw63CAyGC4R8Jy8ofzIxg5HZUGAOT4tGkLwNA8GbesLzHF4PtuX
Nq414fzi0ZuGXdbxO2H53O/tjQyOdfZCyLD8CAegW92Zk5sMfP7UhJqN8mU9jdVO
GHMLXfc2VmkVTK6i8VBxNoEE+W3qn4usvZnEO3hBgMGIAjBkrip/JEBSZrHVQklI
9Kxv+cVtEJBw8IAuIxp7LqYrGFtt1+XZRWuDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9lUymC1uWvn/cPO4mqLGvTBWrMswHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzlsVXltQzF1V3ZuX2NQTzRtcUxHdlRCV3JNcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc2HwwDQYJKoZIhvcNAQELBQADggEBAMEgJR8wJKhusHu4Op1X2mvOOEgW
UuQ8oaZzpwHMHJQDLbBUiDCMCx8+z52P+bfYKV18yNfm12puMjmC5rIHmoH8gIc9
YZLPNw6wyt2ePLhhi41Ea/D9nQVBnX93AZQzRgHMlSbPBUN15WM43JYEuE32CBzM
8Wrl/M8zpO3rF6e9HrWAuaZchqBnaPtycCMWmGT7FCO2NWJpAnHROelcPeqC5g43
5/XVxovBEQYHs60A4c4qkgdPGsSNsJ32Dn+yG4yWl2mHOdAWc8iZhMHjv8q8507F
cICHn+wi7MJdYKWFpUJCFX570SVSB+rwph6N8i7dZpHr5R/OtnpsInSbDZw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:33 2025 by rpki-client