Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
File: szccFILbUH8qsrvbYVfJgcxOhBU.roa (raw, json)
Hash identifier: /84odtsPzjrdEFvcMg7bJ0m6gJdRFMHyyfmVB/Ri/8Y=
Subject key identifier: B3:37:1C:14:82:DB:50:7F:2A:B2:BB:DB:61:57:C9:81:CC:4E:84:15
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01B2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
Signing time: Wed 01 Nov 2023 01:29:15 +0000
ROA not before: Wed 01 Nov 2023 01:29:15 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:29:15 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=B3371C1482DB507F2AB2BBDB6157C981CC4E8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:47:32:25:9a:16:29:6b:64:94:07:07:5c:
90:10:19:68:db:98:12:4c:2d:f5:df:5b:f3:4f:c3:
d9:59:59:11:28:15:97:32:09:00:d5:f3:a5:9c:2c:
49:8b:d2:d3:4c:78:68:4a:24:82:d1:4e:cd:96:ff:
5b:04:dc:65:ee:5f:68:6d:ed:46:f6:4f:84:2a:e0:
9d:3a:d4:1e:9d:8a:5c:b5:13:ce:fe:be:c0:ec:74:
20:5a:df:25:c3:a5:fc:60:7a:9a:71:9a:d5:a9:b0:
88:a3:5d:af:95:5b:97:0e:6e:2b:f6:ff:90:90:07:
80:bc:69:86:aa:64:6b:1f:48:1d:b4:e0:02:f6:af:
4a:c0:4d:36:79:f4:f9:fa:96:19:7c:1c:12:53:7e:
0a:e9:29:e1:68:c9:c4:f7:b4:91:21:e1:ec:b2:b6:
96:15:81:4d:4b:db:2e:fa:69:b7:cb:f3:2e:20:d6:
fe:80:1e:3e:e4:99:7b:a1:5c:f8:92:6f:a2:b8:60:
8e:54:fc:06:eb:4d:c8:bb:3d:b6:fc:c2:b2:68:b5:
06:f0:87:46:b6:fd:e1:9a:c2:c4:42:37:15:5a:56:
31:40:5d:22:6d:a5:73:29:04:17:83:63:5a:31:0c:
90:5a:01:5e:7d:f8:da:4b:13:2e:93:f9:88:ec:f0:
e1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:1C:14:82:DB:50:7F:2A:B2:BB:DB:61:57:C9:81:CC:4E:84:15
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.168.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fa:8a:3a:00:e0:2e:ef:a9:9b:b0:51:b8:5b:98:5e:5a:6b:
e6:f5:96:0f:46:20:e1:81:af:56:69:17:f8:c3:e1:9a:90:c6:
ec:e7:51:ef:7b:a7:71:14:94:2f:c8:30:e9:7c:32:4f:01:f8:
15:f6:b0:0e:7d:7c:7f:c1:01:5d:17:71:9d:db:fe:88:5f:17:
4b:c9:87:73:04:60:67:df:3a:55:ec:f2:27:8d:66:0d:19:23:
81:1e:74:2d:2d:c4:48:9f:9c:52:80:f6:32:4c:d5:a7:99:28:
13:e2:4b:3d:78:85:e0:58:97:6e:b5:cd:d1:e1:c8:04:0f:1c:
57:96:55:fc:37:17:c5:2c:55:5f:1e:65:46:cb:b1:4e:d2:a1:
cd:5a:57:86:f2:11:65:2c:5b:f1:e6:b5:6e:d0:d9:fa:ee:64:
20:5d:32:d1:e8:27:db:eb:34:f9:ff:73:55:64:7f:7a:46:e9:
82:eb:95:00:8a:6e:07:30:07:f3:44:eb:44:7e:0b:48:bb:a7:
93:ed:52:ae:90:54:91:73:77:bf:d7:86:cb:6c:fe:95:cb:28:
13:4f:e5:30:34:54:af:83:a2:d5:41:fd:1e:e0:e1:ae:07:42:
ff:b3:94:3e:f2:39:5b:fa:ce:f6:d8:7e:8a:96:7a:ea:83:14:
17:d0:f5:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTI5MTVaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEIzMzcxQzE0ODJEQjUw
N0YyQUIyQkJEQjYxNTdDOTgxQ0M0RTg0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFJkcyJZoWKWtklAcHXJAQGWjbmBJMLfXfW/NPw9lZWREoFZcy
CQDV86WcLEmL0tNMeGhKJILRTs2W/1sE3GXuX2ht7Ub2T4Qq4J061B6dily1E87+
vsDsdCBa3yXDpfxgeppxmtWpsIijXa+VW5cObiv2/5CQB4C8aYaqZGsfSB204AL2
r0rATTZ59Pn6lhl8HBJTfgrpKeFoycT3tJEh4eyytpYVgU1L2y76abfL8y4g1v6A
Hj7kmXuhXPiSb6K4YI5U/AbrTci7Pbb8wrJotQbwh0a2/eGawsRCNxVaVjFAXSJt
pXMpBBeDY1oxDJBaAV59+NpLEy6T+Yjs8OF1AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUszccFILbUH8qsrvbYVfJgcxOhBUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9zemNjRklMYlVIOHFzcnZiWVZmSmdjeE9oQlUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdSoMA0GCSqGSIb3DQEBCwUAA4IBAQA3+oo6AOAu76mbsFG4W5he
Wmvm9ZYPRiDhga9WaRf4w+GakMbs51Hve6dxFJQvyDDpfDJPAfgV9rAOfXx/wQFd
F3Gd2/6IXxdLyYdzBGBn3zpV7PInjWYNGSOBHnQtLcRIn5xSgPYyTNWnmSgT4ks9
eIXgWJdutc3R4cgEDxxXllX8NxfFLFVfHmVGy7FO0qHNWleG8hFlLFvx5rVu0Nn6
7mQgXTLR6Cfb6zT5/3NVZH96RumC65UAim4HMAfzROtEfgtIu6eT7VKukFSRc3e/
14bLbP6VyygTT+UwNFSvg6LVQf0e4OGuB0L/s5Q+8jlb+s722H6KlnrqgxQX0PXN
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client