Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
File: NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa (raw, json)
Hash identifier: NAmBY1fHabNlYPgVrS2j05icDp1VoE8QQtSCo9WbdP4=
Subject key identifier: 34:A7:75:17:11:58:A6:09:D9:85:9D:1A:28:7E:39:CD:AF:4A:C3:19
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0200
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
Signing time: Sun 30 Jun 2024 01:29:48 +0000
ROA not before: Sun 30 Jun 2024 01:29:48 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9824
IP address blocks: 203.114.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Jun 30 01:29:48 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=34A775171158A609D9859D1A287E39CDAF4AC319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:d9:ea:6a:b1:01:b8:e2:88:4c:5c:67:d5:
96:a4:ca:cb:20:c0:f8:96:be:1c:b1:6b:12:85:47:
e8:9c:20:dd:c5:1b:8e:e7:35:55:96:99:14:e4:76:
fd:4c:cb:b2:0d:1a:88:52:c5:9b:04:94:3f:11:a0:
2e:eb:bf:ea:92:50:a6:8e:95:bd:02:38:cd:a5:48:
d1:6c:10:62:e3:d0:49:9a:13:d7:03:2f:f9:16:a9:
ad:a3:41:39:33:7e:c7:45:40:95:ac:12:7c:ba:c5:
d7:0c:7b:18:23:57:3b:c1:2d:a5:bf:eb:e7:41:8e:
c1:74:95:92:0b:bf:c1:e2:fb:2b:42:57:7f:43:d3:
71:4d:6d:8d:31:3f:ec:ed:ad:86:d6:15:5e:87:92:
50:4e:81:f1:60:b2:90:6c:91:86:eb:2a:97:01:cf:
2a:75:03:b2:e8:0b:b4:dc:bc:f4:a1:4e:2a:bc:4a:
20:20:f0:7a:b9:e3:37:d0:52:d0:55:da:e0:4c:de:
fe:43:93:bc:ab:35:40:2a:29:6b:19:cb:e2:e0:c1:
5e:27:29:0e:25:65:71:f6:3f:f4:bf:ba:2f:53:60:
03:a2:3a:24:ad:1e:b5:a1:6f:ea:aa:01:57:04:8b:
2a:e0:94:72:c8:45:13:46:ae:7d:80:02:f0:22:91:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:75:17:11:58:A6:09:D9:85:9D:1A:28:7E:39:CD:AF:4A:C3:19
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NKd1FxFYpgnZhZ0aKH45za9Kwxk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.114.248.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:3f:19:8e:59:d0:82:87:0a:70:a3:86:e8:a5:a3:f0:75:73:
62:6c:8d:ae:d2:e9:30:49:6e:c6:f6:54:e0:29:ac:9c:a1:95:
70:5e:91:6c:3b:20:87:3a:65:5b:e7:52:85:70:84:ab:7b:a1:
c4:00:ad:1a:0a:bf:89:f9:3d:5a:8e:9b:bb:bb:d9:86:29:88:
38:1a:84:78:4e:36:63:c0:5b:0a:5d:e1:77:79:03:c3:81:01:
bd:49:e4:a1:42:2d:02:e6:72:d8:37:11:72:1f:2a:30:6a:38:
5a:83:0c:5d:40:74:9a:fb:b3:77:2b:e3:8a:d3:2e:1b:02:80:
7f:9a:20:0c:c5:a3:bd:cf:d5:04:8a:99:e0:65:d2:f9:18:81:
b9:b2:02:67:6d:62:a1:f9:6d:d5:9f:74:74:f7:0f:0f:99:26:
4d:ea:f8:bb:29:96:3d:5a:ae:42:a6:12:a2:69:ba:e2:d5:db:
4a:45:1a:f6:81:55:38:43:72:be:01:79:84:19:9f:e8:66:16:
b6:bb:a9:78:80:03:58:db:fa:c0:44:a3:5e:ee:08:ec:cf:c4:
7d:f8:d1:72:f1:f2:47:76:21:2e:42:42:12:81:af:29:25:97:
78:0d:45:d7:ee:03:b7:a3:87:f6:1d:f4:38:10:a8:99:10:96:
d2:b4:9a:17
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA2MzAw
MTI5NDhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDM0QTc3NTE3MTE1OEE2
MDlEOTg1OUQxQTI4N0UzOUNEQUY0QUMzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrpdnqarEBuOKITFxn1ZakyssgwPiWvhyxaxKFR+icIN3FG47n
NVWWmRTkdv1My7INGohSxZsElD8RoC7rv+qSUKaOlb0COM2lSNFsEGLj0EmaE9cD
L/kWqa2jQTkzfsdFQJWsEny6xdcMexgjVzvBLaW/6+dBjsF0lZILv8Hi+ytCV39D
03FNbY0xP+ztrYbWFV6HklBOgfFgspBskYbrKpcBzyp1A7LoC7TcvPShTiq8SiAg
8Hq54zfQUtBV2uBM3v5Dk7yrNUAqKWsZy+LgwV4nKQ4lZXH2P/S/ui9TYAOiOiSt
HrWhb+qqAVcEiyrglHLIRRNGrn2AAvAikU8BAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNKd1FxFYpgnZhZ0aKH45za9KwxkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL05LZDFGeEZZcGduWmhaMGFLSDQ1emE5S3d4ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHLcvgwDQYJKoZIhvcNAQELBQADggEBAME/GY5Z0IKHCnCjhuilo/B1c2Js
ja7S6TBJbsb2VOAprJyhlXBekWw7IIc6ZVvnUoVwhKt7ocQArRoKv4n5PVqOm7u7
2YYpiDgahHhONmPAWwpd4Xd5A8OBAb1J5KFCLQLmctg3EXIfKjBqOFqDDF1AdJr7
s3cr44rTLhsCgH+aIAzFo73P1QSKmeBl0vkYgbmyAmdtYqH5bdWfdHT3Dw+ZJk3q
+Lsplj1arkKmEqJpuuLV20pFGvaBVThDcr4BeYQZn+hmFra7qXiAA1jb+sBEo17u
COzPxH340XLx8kd2IS5CQhKBrykll3gNRdfuA7ejh/Yd9DgQqJkQltK0mhc=
-----END CERTIFICATE-----
Generated at Tue Jul 22 06:02:59 2025 by rpki-client