Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa
File: qZUOWa4LXkjlEXa88Brac9kYOio.roa (raw, json)
Hash identifier: zeRuB/Bj9a0BxzRUQOOkMScnhdAaG+Ptxtoj3s3heIw=
Subject key identifier: A9:95:0E:59:AE:0B:5E:48:E5:11:76:BC:F0:1A:DA:73:D9:18:3A:2A
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: D4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa
Signing time: Fri 01 Apr 2022 01:28:19 +0000
ROA not before: Fri 01 Apr 2022 01:28:19 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 122.16.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:19 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=A9950E59AE0B5E48E51176BCF01ADA73D9183A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:a0:b6:10:78:60:83:c8:9d:eb:9e:72:a1:
b1:33:2f:7d:88:0d:c4:d2:e0:bf:15:84:aa:84:db:
2b:2c:e2:dd:0f:ec:76:c0:74:dc:bc:b8:85:c1:e1:
8f:ba:32:7f:24:41:42:5b:7d:91:1b:ae:8e:37:ba:
93:e3:c0:be:4c:2e:e7:be:83:57:8a:c3:27:f2:d4:
53:0a:20:36:26:a6:11:9b:0f:59:0f:f5:20:c7:81:
b8:0b:c9:0b:3d:3a:9b:90:dd:4a:0d:4a:55:68:8b:
c8:5e:85:02:40:82:d4:3a:ed:3a:23:d0:28:b7:03:
cb:4c:53:13:a4:5d:2a:31:30:f9:d1:5b:07:23:eb:
88:09:cb:a8:65:92:19:72:ab:fb:84:c4:db:99:40:
89:45:a1:5f:10:c5:01:62:fa:7c:dd:19:ce:e9:d8:
26:6c:1c:04:94:31:7b:25:cb:29:6d:6e:01:73:59:
6a:73:a6:db:f7:ab:69:e4:c7:4c:88:06:5d:40:d7:
6e:5e:c2:9a:39:f2:f3:45:e5:25:e9:53:0a:33:e6:
d7:dc:4e:be:37:e5:34:e5:0b:1e:05:5c:91:a1:b5:
95:d9:0a:ec:61:f1:c6:9e:7f:a1:e3:c9:f9:48:f3:
76:a6:6f:20:40:82:59:12:70:09:87:51:79:fa:3a:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:0E:59:AE:0B:5E:48:E5:11:76:BC:F0:1A:DA:73:D9:18:3A:2A
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa
sbgp-ipAddrBlock: critical
IPv4:
122.16.0.0/12
Signature Algorithm: sha256WithRSAEncryption
6f:43:73:ab:53:cd:fd:b1:11:83:1c:a1:c4:c7:d9:33:1a:3f:
cc:f7:7c:c5:56:e0:27:ae:5e:f0:30:a0:f4:5f:80:01:85:6f:
bd:bb:fe:44:6c:de:86:a2:3b:64:52:87:3e:e4:ad:de:bf:87:
f1:78:8f:1b:c9:17:80:8d:21:d9:71:60:21:e9:66:8f:6e:2c:
99:13:26:45:1a:05:d6:d8:d9:ef:8c:6b:24:f8:3c:ca:b6:01:
b2:d3:09:3c:5b:31:05:33:ee:86:f0:ab:49:be:43:26:cc:30:
7e:c9:d8:72:49:a2:7e:2c:06:91:1e:01:c8:34:12:5c:da:ae:
8b:ff:e8:a2:27:ee:4c:06:bb:73:55:84:71:7e:13:3f:d3:12:
2a:5b:b2:a5:65:01:34:6b:86:b5:ea:d2:69:75:12:ab:53:f8:
4e:00:87:7b:ab:75:d5:26:69:f3:5f:71:d2:47:90:86:d5:56:
92:77:67:5b:0d:d4:f7:2e:15:6c:c5:fa:fb:c1:f9:de:34:42:
f0:44:9f:e1:bd:6f:70:df:b9:15:4f:37:c9:c3:3f:84:18:ea:
ce:81:f6:ed:10:79:d3:ca:aa:7c:ff:fb:a2:9c:dd:2a:44:a2:
c2:b3:9f:70:e9:b9:48:05:64:b0:9d:0e:68:7c:d1:78:91:3b:
21:0b:12:e6
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTlaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKEE5OTUwRTU5QUUwQjVF
NDhFNTExNzZCQ0YwMUFEQTczRDkxODNBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqXaC2EHhgg8id655yobEzL32IDcTS4L8VhKqE2yss4t0P7HbA
dNy8uIXB4Y+6Mn8kQUJbfZEbro43upPjwL5MLue+g1eKwyfy1FMKIDYmphGbD1kP
9SDHgbgLyQs9OpuQ3UoNSlVoi8hehQJAgtQ67Toj0Ci3A8tMUxOkXSoxMPnRWwcj
64gJy6hlkhlyq/uExNuZQIlFoV8QxQFi+nzdGc7p2CZsHASUMXslyyltbgFzWWpz
ptv3q2nkx0yIBl1A125ewpo58vNF5SXpUwoz5tfcTr435TTlCx4FXJGhtZXZCuxh
8caef6HjyflI83ambyBAglkScAmHUXn6OglvAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUqZUOWa4LXkjlEXa88Brac9kYOiowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL3FaVU9XYTRMWGtqbEVYYTg4QnJhYzlrWU9pby5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwR6EDANBgkqhkiG9w0BAQsFAAOCAQEA
b0Nzq1PN/bERgxyhxMfZMxo/zPd8xVbgJ65e8DCg9F+AAYVvvbv+RGzehqI7ZFKH
PuSt3r+H8XiPG8kXgI0h2XFgIelmj24smRMmRRoF1tjZ74xrJPg8yrYBstMJPFsx
BTPuhvCrSb5DJswwfsnYckmifiwGkR4ByDQSXNqui//ooifuTAa7c1WEcX4TP9MS
KluypWUBNGuGterSaXUSq1P4TgCHe6t11SZp819x0keQhtVWkndnWw3U9y4VbMX6
+8H53jRC8ESf4b1vcN+5FU83ycM/hBjqzoH27RB508qqfP/7opzdKkSiwrOfcOm5
SAVksJ0OaHzReJE7IQsS5g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:25 2025 by rpki-client