Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hzsl6XBqed0Xr7D4SsQFe5eEB7o.roa
File: Hzsl6XBqed0Xr7D4SsQFe5eEB7o.roa (raw, json)
Hash identifier: uXag9BJaEC5wS+g1S8XQEg58l0WLRl1MAOQSjOupf7E=
Subject key identifier: 1F:3B:25:E9:70:6A:79:DD:17:AF:B0:F8:4A:C4:05:7B:97:84:07:BA
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0149
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hzsl6XBqed0Xr7D4SsQFe5eEB7o.roa
Signing time: Thu 01 Sep 2022 01:28:30 +0000
ROA not before: Thu 01 Sep 2022 01:28:30 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 131965
IP address blocks: 112.78.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 1 01:28:30 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=1F3B25E9706A79DD17AFB0F84AC4057B978407BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:7b:2b:36:71:78:cc:9f:a5:70:b7:39:3d:
c8:c6:81:82:17:a8:1d:cb:ce:cf:5f:61:cf:cd:b6:
d9:73:b0:4a:e7:48:61:e8:53:0a:78:ec:53:e3:b9:
2b:a5:93:d2:fc:7a:c6:40:a6:32:87:30:d6:f3:b6:
0e:e9:2e:0a:f6:19:4c:99:4e:56:d3:8c:e7:fe:9a:
a2:76:75:fe:1f:09:28:62:da:76:48:8c:c3:4d:28:
0b:0d:45:a2:a7:71:aa:7e:4a:48:66:a5:49:a6:32:
af:4a:26:84:b4:3b:4d:26:25:57:9e:0f:5e:95:46:
02:31:a6:c8:f2:c5:cd:ca:b2:9c:e1:12:9f:d3:72:
61:27:39:da:07:73:9a:49:4a:99:6c:5f:7d:09:ac:
ea:6e:af:e2:b5:8b:09:e9:2a:6f:99:1e:3b:fc:4a:
70:7e:e3:b6:95:cd:c7:e7:f4:d8:b8:42:89:41:df:
22:2c:9b:d2:a2:e8:33:54:ae:d5:71:5f:11:dc:f7:
f5:fe:38:12:ef:26:75:93:fe:74:ff:a9:31:e6:31:
30:72:c4:98:c0:73:a0:1d:e5:e9:21:1a:5d:3f:4c:
e0:3c:be:c7:0d:8f:f7:64:16:44:d0:43:ba:73:50:
8b:ca:a2:89:d2:3d:60:c4:75:b5:7c:b6:11:4f:2a:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:25:E9:70:6A:79:DD:17:AF:B0:F8:4A:C4:05:7B:97:84:07:BA
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hzsl6XBqed0Xr7D4SsQFe5eEB7o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b9:4e:42:0b:42:79:02:33:7a:71:95:8d:17:1b:51:91:d7:
2f:89:86:ce:c5:d2:65:53:97:31:6c:54:07:d7:fc:fd:09:41:
6e:03:c0:52:ac:b4:2a:3d:d5:60:df:8c:7f:00:d6:b6:5e:f0:
a5:74:25:1d:70:10:9c:ef:ff:7e:c4:ad:ba:cc:d2:ec:e0:02:
47:6e:14:a6:1f:3b:3f:fe:ce:33:cc:cf:68:e0:4a:86:35:28:
27:6c:f0:56:7f:55:d2:6c:54:1a:ba:72:63:9d:7e:75:6b:01:
80:be:fe:b7:37:8a:6a:28:40:15:c8:52:f7:59:98:0a:8f:ed:
09:d0:3c:f6:eb:7c:63:4d:75:f1:df:f2:fa:3b:06:1c:c5:d0:
24:5a:98:52:a4:66:73:16:a1:95:96:8a:4b:cc:57:65:69:bb:
34:60:fa:e0:9d:3e:e8:2e:fc:9c:c8:2f:ef:38:a7:3c:5d:30:
a0:ae:3c:c9:1c:51:02:6c:a5:a2:49:26:03:fb:9d:a7:d2:95:
1a:30:6c:9e:b4:bb:07:67:a0:92:36:4a:11:06:55:ae:16:9c:
c1:d3:a2:46:9b:e8:f6:7a:28:4c:15:76:d1:20:1f:c3:27:6c:
fb:1f:be:6d:c7:62:63:fd:5b:cc:a8:c9:cc:cb:1f:56:44:90:
e5:23:d4:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjA5MDEw
MTI4MzBaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFGM0IyNUU5NzA2QTc5
REQxN0FGQjBGODRBQzQwNTdCOTc4NDA3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoxXsrNnF4zJ+lcLc5PcjGgYIXqB3Lzs9fYc/NttlzsErnSGHo
Uwp47FPjuSulk9L8esZApjKHMNbztg7pLgr2GUyZTlbTjOf+mqJ2df4fCShi2nZI
jMNNKAsNRaKncap+SkhmpUmmMq9KJoS0O00mJVeeD16VRgIxpsjyxc3KspzhEp/T
cmEnOdoHc5pJSplsX30JrOpur+K1iwnpKm+ZHjv8SnB+47aVzcfn9Ni4QolB3yIs
m9Ki6DNUrtVxXxHc9/X+OBLvJnWT/nT/qTHmMTByxJjAc6Ad5ekhGl0/TOA8vscN
j/dkFkTQQ7pzUIvKoonSPWDEdbV8thFPKv05AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUHzsl6XBqed0Xr7D4SsQFe5eEB7owHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9IenNsNlhCcWVkMFhyN0Q0U3NRRmU1ZUVCN28u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcE51MA0GCSqGSIb3DQEBCwUAA4IBAQCLuU5CC0J5AjN6cZWNFxtR
kdcviYbOxdJlU5cxbFQH1/z9CUFuA8BSrLQqPdVg34x/ANa2XvCldCUdcBCc7/9+
xK26zNLs4AJHbhSmHzs//s4zzM9o4EqGNSgnbPBWf1XSbFQaunJjnX51awGAvv63
N4pqKEAVyFL3WZgKj+0J0Dz263xjTXXx3/L6OwYcxdAkWphSpGZzFqGVlopLzFdl
abs0YPrgnT7oLvycyC/vOKc8XTCgrjzJHFECbKWiSSYD+52n0pUaMGyetLsHZ6CS
NkoRBlWuFpzB06JGm+j2eihMFXbRIB/DJ2z7H75tx2Jj/VvMqMnMyx9WRJDlI9Ti
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:17 2025 by rpki-client