Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
File: ChIYvB20E4LjNyxz6zjydPwXnx8.roa (raw, json)
Hash identifier: d1JhskVfDcsaD2idFFD1oooRMsV2wlbdD/2A8WmNC/g=
Subject key identifier: 0A:12:18:BC:1D:B4:13:82:E3:37:2C:73:EB:38:F2:74:FC:17:9F:1F
Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial: 35
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
Signing time: Fri 19 Apr 2024 07:53:42 +0000
ROA not before: Fri 19 Apr 2024 07:53:42 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 24289
IP address blocks: 103.18.60.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Validity
Not Before: Apr 19 07:53:42 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=0A1218BC1DB41382E3372C73EB38F274FC179F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:92:db:2e:fc:ec:2f:08:fe:0d:c0:98:9c:
3e:77:dd:f4:ee:4c:11:f0:f8:74:38:e6:56:86:bf:
c4:05:a4:82:60:98:11:c4:9c:18:90:98:d6:0e:4e:
e4:3d:fa:74:de:b6:aa:a3:78:4a:a5:09:0d:70:f6:
b6:36:8f:d1:3a:fa:98:de:f8:45:26:0f:20:bf:a3:
c7:06:7e:8d:87:77:63:27:30:ee:d8:28:9d:0c:21:
1e:3e:d9:90:f7:c4:94:f8:a8:ba:05:18:97:80:d6:
f9:96:a3:98:e8:35:14:62:ac:8a:71:43:78:a7:ba:
2a:83:75:cd:d9:dd:4d:8c:83:56:2f:36:ba:b3:6e:
d5:1b:ec:8c:f9:88:f8:42:00:40:6c:64:80:aa:df:
6e:2f:0e:04:7c:69:80:aa:2c:3f:40:a2:cc:29:4a:
b7:9f:89:f3:d0:07:15:14:f3:98:f2:35:5b:a0:36:
28:16:ea:0b:6e:53:20:35:b9:54:86:2a:08:0c:54:
ba:9f:76:8f:4c:e0:c7:2b:d4:f5:39:9d:40:8f:16:
e1:ec:3b:8b:01:87:70:2d:c0:3d:38:43:7b:16:4d:
b6:a7:80:1e:65:c4:6c:55:1c:a4:1a:c5:92:a5:4b:
f2:eb:93:41:f3:6f:a8:e5:07:83:77:2d:08:8a:8b:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:18:BC:1D:B4:13:82:E3:37:2C:73:EB:38:F2:74:FC:17:9F:1F
X509v3 Authority Key Identifier:
keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ChIYvB20E4LjNyxz6zjydPwXnx8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d5:89:ef:53:a3:3b:48:a9:b3:83:0c:83:8f:d3:f3:31:f0:
74:ba:38:ca:f2:42:51:7f:67:f0:c2:18:d1:7a:41:3f:9f:46:
63:6d:bd:81:9d:66:ef:a7:a2:68:d0:65:a9:f7:0a:99:b8:6f:
27:9f:e7:71:a7:79:b9:ac:eb:93:06:a5:58:c2:12:7a:ea:5e:
fb:60:e3:b0:6b:ef:66:ed:35:8c:15:60:45:c6:37:72:5b:33:
fb:fc:85:48:f2:56:85:19:0b:dd:cb:d1:ff:3e:a6:a0:0b:8b:
ea:35:d5:95:10:cd:bf:a4:5a:f6:37:89:ac:9b:17:90:4b:95:
05:be:d7:4c:c5:fc:79:02:66:09:fe:b9:d6:8d:d4:10:19:7b:
d8:f7:49:c8:1d:f4:ff:59:b6:d1:c6:da:c5:a4:28:1d:4e:5d:
fa:5f:67:73:39:66:46:29:c2:2e:5f:06:78:a4:7e:36:f8:af:
18:a8:a6:25:18:07:bd:67:5e:dd:10:e6:99:c3:07:59:3e:55:
d5:4e:b6:93:5e:09:ff:32:1d:37:71:02:92:23:8b:53:9a:5d:
6c:6e:3a:93:ed:cc:50:0e:76:b6:c2:4e:53:93:15:32:4a:a5:
fe:cf:28:b9:44:81:54:a9:b7:fe:3e:96:6d:2c:77:85:44:80:
ea:13:dd:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2
QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI0MDQxOTA3
NTM0MloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMEExMjE4QkMxREI0MTM4
MkUzMzcyQzczRUIzOEYyNzRGQzE3OUYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXYktsu/OwvCP4NwJicPnfd9O5MEfD4dDjmVoa/xAWkgmCYEcSc
GJCY1g5O5D36dN62qqN4SqUJDXD2tjaP0Tr6mN74RSYPIL+jxwZ+jYd3Yycw7tgo
nQwhHj7ZkPfElPiougUYl4DW+ZajmOg1FGKsinFDeKe6KoN1zdndTYyDVi82urNu
1RvsjPmI+EIAQGxkgKrfbi8OBHxpgKosP0CizClKt5+J89AHFRTzmPI1W6A2KBbq
C25TIDW5VIYqCAxUup92j0zgxyvU9TmdQI8W4ew7iwGHcC3APThDexZNtqeAHmXE
bFUcpBrFkqVL8uuTQfNvqOUHg3ctCIqLi/cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQKEhi8HbQTguM3LHPrOPJ0/BefHzAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee
g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa
ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjUvQ2hJWXZCMjBFNExqTnl4ejZ6anlkUHdYbng4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcSPDANBgkqhkiG9w0BAQsFAAOCAQEARdWJ71OjO0ips4MMg4/T8zHwdLo4
yvJCUX9n8MIY0XpBP59GY229gZ1m76eiaNBlqfcKmbhvJ5/ncad5uazrkwalWMIS
eupe+2DjsGvvZu01jBVgRcY3clsz+/yFSPJWhRkL3cvR/z6moAuL6jXVlRDNv6Ra
9jeJrJsXkEuVBb7XTMX8eQJmCf651o3UEBl72PdJyB30/1m20cbaxaQoHU5d+l9n
czlmRinCLl8GeKR+NvivGKimJRgHvWde3RDmmcMHWT5V1U62k14J/zIdN3ECkiOL
U5pdbG46k+3MUA52tsJOU5MVMkql/s8ouUSBVKm3/j6WbSx3hUSA6hPdWA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:18:02 2025 by rpki-client