Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qKbga5mh9roMM4BcRuPHONbHpSM.roa
File: qKbga5mh9roMM4BcRuPHONbHpSM.roa (raw, json)
Hash identifier: Xoo2K7ZGBi78I5v6NHkTnbaUtdnljmHs8aBpAnMrE8E=
Subject key identifier: A8:A6:E0:6B:99:A1:F6:BA:0C:33:80:5C:46:E3:C7:38:D6:C7:A5:23
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 48
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qKbga5mh9roMM4BcRuPHONbHpSM.roa
Signing time: Thu 13 Apr 2023 09:52:36 +0000
ROA not before: Thu 13 Apr 2023 09:52:36 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 55392
IP address blocks: 217.178.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Apr 13 09:52:36 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A8A6E06B99A1F6BA0C33805C46E3C738D6C7A523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:a0:30:41:74:db:2c:b6:82:a5:62:b2:93:
12:2e:98:92:6a:37:c5:51:75:8f:8f:8c:ce:03:f9:
a8:1d:68:76:ab:f4:9b:61:2e:f8:4d:38:82:93:64:
f7:c7:a5:17:0d:87:71:10:bc:d7:4b:8f:ec:8b:41:
e2:45:79:57:ad:dc:6a:2c:bc:5a:b1:40:c4:07:b9:
12:6f:c3:d9:6f:a1:af:72:64:8d:77:37:c2:2d:6d:
8e:c9:29:27:0a:cf:da:6e:39:e6:3a:5a:13:a0:fb:
6d:4e:a0:b7:d7:2c:0b:e7:cb:b9:fd:3a:36:63:8e:
19:8d:55:b0:fa:e6:9f:53:3b:a6:75:5d:97:45:b2:
82:aa:b6:71:8c:dc:48:5e:df:b2:41:d5:48:d6:d3:
89:2a:44:6b:da:fa:ed:b5:8e:f9:b6:74:36:b5:ea:
82:36:39:cd:59:f1:5d:7d:cb:8e:17:20:82:21:78:
e6:9e:f9:5b:69:35:c2:b9:a7:24:94:32:00:88:15:
6e:8f:69:3c:95:b9:20:75:81:a5:fa:46:15:f6:ba:
80:a5:71:d6:cf:5e:be:2a:84:fc:fb:b8:d4:34:09:
55:ae:35:3a:a3:e7:d5:d8:8b:27:8f:6b:8b:fe:16:
82:fc:a5:9b:dd:cd:e6:38:ae:80:1e:73:90:82:47:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:E0:6B:99:A1:F6:BA:0C:33:80:5C:46:E3:C7:38:D6:C7:A5:23
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qKbga5mh9roMM4BcRuPHONbHpSM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.178.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:a7:7d:c7:8f:be:bd:6a:fc:bb:8e:c0:21:78:59:85:cc:be:
ec:7c:69:e1:25:5a:35:9f:13:a6:51:f2:4e:03:07:81:de:d9:
d5:e3:7a:8c:c3:14:86:f5:f9:7f:f4:31:89:1d:e8:6a:e5:88:
38:21:c8:9c:83:9d:6a:90:53:c9:ca:ad:45:96:14:f0:04:8a:
dc:b5:0a:79:d1:7d:92:87:56:de:d8:10:44:d8:44:c8:c7:8f:
39:98:4f:9e:db:7a:a2:f0:d7:ba:df:a1:a4:c1:53:45:28:33:
9d:f6:62:35:36:3f:cf:2c:b5:08:07:ee:17:88:5f:a7:7f:70:
b7:29:20:3f:79:89:1d:29:d7:b5:38:3b:aa:83:fb:b3:47:24:
f9:d2:a4:b4:64:82:30:52:d7:62:1d:81:95:65:52:54:8f:8f:
5f:23:fa:f9:26:4e:a2:d1:53:49:00:a8:11:d6:f0:c8:f7:97:
c0:e4:13:27:6b:65:47:3e:8b:42:53:47:c4:c8:a2:89:c9:f3:
81:33:66:19:0f:14:a4:6a:db:32:5c:06:72:5b:0a:c1:92:54:
e6:b9:e5:dd:7c:0e:20:41:9d:fa:4e:30:44:a8:75:01:00:ed:
ad:b4:aa:37:04:6d:27:dc:81:5d:30:9b:9b:48:2b:94:77:39:
70:ce:d3:7b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTIzMDQxMzA5
NTIzNloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQThBNkUwNkI5OUExRjZC
QTBDMzM4MDVDNDZFM0M3MzhENkM3QTUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3ioDBBdNsstoKlYrKTEi6Ykmo3xVF1j4+MzgP5qB1odqv0m2Eu
+E04gpNk98elFw2HcRC810uP7ItB4kV5V63caiy8WrFAxAe5Em/D2W+hr3JkjXc3
wi1tjskpJwrP2m455jpaE6D7bU6gt9csC+fLuf06NmOOGY1VsPrmn1M7pnVdl0Wy
gqq2cYzcSF7fskHVSNbTiSpEa9r67bWO+bZ0NrXqgjY5zVnxXX3LjhcggiF45p75
W2k1wrmnJJQyAIgVbo9pPJW5IHWBpfpGFfa6gKVx1s9eviqE/Pu41DQJVa41OqPn
1diLJ49ri/4Wgvylm93N5jiugB5zkIJHpU8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSopuBrmaH2ugwzgFxG48c41selIzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3L3FLYmdhNW1oOXJvTU00QmNSdVBIT05iSHBTTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAbZskAwDQYJKoZIhvcNAQELBQADggEBACOnfcePvr1q/LuOwCF4WYXM
vux8aeElWjWfE6ZR8k4DB4He2dXjeozDFIb1+X/0MYkd6GrliDghyJyDnWqQU8nK
rUWWFPAEity1CnnRfZKHVt7YEETYRMjHjzmYT57beqLw17rfoaTBU0UoM532YjU2
P88stQgH7heIX6d/cLcpID95iR0p17U4O6qD+7NHJPnSpLRkgjBS12IdgZVlUlSP
j18j+vkmTqLRU0kAqBHW8Mj3l8DkEydrZUc+i0JTR8TIoonJ84EzZhkPFKRq2zJc
BnJbCsGSVOa55d18DiBBnfpOMESodQEA7a20qjcEbSfcgV0wm5tIK5R3OXDO03s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:30 2025 by rpki-client