Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
File: 5S-dzfiHnLUGXUjcVxftetAM1N4.roa (raw, json)
Hash identifier: Z5bYx9sFSrwpZsDt6xEzmoRXTxiYtuqbYaEcvgacn5Y=
Subject key identifier: E5:2F:9D:CD:F8:87:9C:B5:06:5D:48:DC:57:17:ED:7A:D0:0C:D4:DE
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0387
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
Signing time: Fri 01 Dec 2023 01:31:18 +0000
ROA not before: Fri 01 Dec 2023 01:31:18 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 146979
IP address blocks: 103.180.131.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Dec 1 01:31:18 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=E52F9DCDF8879CB5065D48DC5717ED7AD00CD4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:4e:59:d1:8c:6c:e4:24:3d:a2:9b:8f:1f:
4d:1a:5f:04:75:56:4e:a9:76:40:25:82:31:78:61:
bd:8b:2f:08:a4:85:04:68:66:5f:61:40:18:5b:c4:
aa:48:67:5d:59:04:36:f7:e0:fd:01:96:58:bb:1a:
23:f7:14:4d:55:70:52:86:0b:2a:24:78:b5:99:1d:
07:1a:1b:42:f1:a5:a9:5b:07:08:5f:d3:84:f4:38:
ec:98:58:5f:f4:4d:5b:6f:15:e6:67:0f:79:0c:ac:
ff:56:04:55:63:80:d1:42:5b:4f:ee:d6:3f:03:fb:
52:36:c0:1b:74:e8:44:e7:d8:16:17:45:f4:b2:9c:
25:c0:91:7a:8f:6b:59:27:d3:c5:05:a6:9c:01:3d:
29:90:1e:85:16:1c:62:ac:57:16:d9:25:ae:73:76:
1e:66:ab:7f:71:11:40:36:81:d1:b2:55:ac:36:9c:
65:18:17:f0:af:e5:6b:d4:43:e8:8a:23:44:e0:bb:
93:ea:4a:c7:8a:08:29:e7:5d:6a:da:d7:e8:7e:3e:
d5:03:de:e0:16:c4:15:fd:55:9a:d3:f7:54:6c:8a:
c7:48:d6:64:67:9b:21:6c:b9:9a:a0:e1:04:85:f0:
f7:9d:79:d3:bf:71:97:09:fe:00:60:cf:bd:f2:8a:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:9D:CD:F8:87:9C:B5:06:5D:48:DC:57:17:ED:7A:D0:0C:D4:DE
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5S-dzfiHnLUGXUjcVxftetAM1N4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.131.0/24
Signature Algorithm: sha256WithRSAEncryption
21:98:3a:bb:7b:e6:f5:a9:21:d9:9b:c9:d8:60:99:44:17:f6:
67:36:95:88:9a:a5:92:e1:c2:0d:0a:f9:f4:29:94:2d:2b:4b:
df:fd:a8:54:db:42:36:2a:0a:a7:91:cc:ff:11:da:69:0f:48:
e9:92:e0:f9:4d:fc:40:d9:b3:2f:95:b4:f8:7f:bc:75:31:e8:
1d:1e:f9:66:b2:40:ac:12:0d:d6:01:61:cb:db:bc:61:aa:0c:
2d:3e:cb:02:52:ad:44:cb:af:d8:8e:b8:01:c5:93:60:a1:3d:
c0:a2:bf:c4:51:f4:10:df:b3:b1:12:1f:98:a1:6e:ee:ba:10:
6f:cc:e0:f4:fc:6b:86:0d:93:d7:6b:26:cc:b7:6c:e2:22:f3:
75:8e:d0:34:1f:9c:0f:67:eb:8f:8a:81:79:69:8f:df:ba:12:
39:77:f9:cd:3d:84:33:2c:30:32:04:e7:9d:01:ba:b7:72:4f:
cb:ca:c4:76:36:1e:e8:f7:9b:fa:79:59:26:0b:0f:41:45:d4:
97:aa:6d:b9:56:de:6e:a2:02:6d:25:98:6f:cd:7b:1f:ce:79:
00:94:bf:17:91:71:52:ea:82:08:87:91:63:00:9e:76:66:e4:
f3:d6:60:a2:79:a6:7b:ec:d4:46:bf:0a:57:7d:8d:b3:f4:4c:
5e:16:f9:a9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzEyMDEw
MTMxMThaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU1MkY5RENERjg4NzlD
QjUwNjVENDhEQzU3MTdFRDdBRDAwQ0Q0REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClZU5Z0Yxs5CQ9opuPH00aXwR1Vk6pdkAlgjF4Yb2LLwikhQRo
Zl9hQBhbxKpIZ11ZBDb34P0Blli7GiP3FE1VcFKGCyokeLWZHQcaG0LxpalbBwhf
04T0OOyYWF/0TVtvFeZnD3kMrP9WBFVjgNFCW0/u1j8D+1I2wBt06ETn2BYXRfSy
nCXAkXqPa1kn08UFppwBPSmQHoUWHGKsVxbZJa5zdh5mq39xEUA2gdGyVaw2nGUY
F/Cv5WvUQ+iKI0Tgu5PqSseKCCnnXWra1+h+PtUD3uAWxBX9VZrT91RsisdI1mRn
myFsuZqg4QSF8PededO/cZcJ/gBgz73yijj5AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU5S+dzfiHnLUGXUjcVxftetAM1N4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My81Uy1kemZpSG5MVUdYVWpjVnhmdGV0QU0xTjQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7SDMA0GCSqGSIb3DQEBCwUAA4IBAQAhmDq7e+b1qSHZm8nYYJlE
F/ZnNpWImqWS4cINCvn0KZQtK0vf/ahU20I2Kgqnkcz/EdppD0jpkuD5TfxA2bMv
lbT4f7x1MegdHvlmskCsEg3WAWHL27xhqgwtPssCUq1Ey6/YjrgBxZNgoT3Aor/E
UfQQ37OxEh+YoW7uuhBvzOD0/GuGDZPXaybMt2ziIvN1jtA0H5wPZ+uPioF5aY/f
uhI5d/nNPYQzLDAyBOedAbq3ck/LysR2Nh7o95v6eVkmCw9BRdSXqm25Vt5uogJt
JZhvzXsfznkAlL8XkXFS6oIIh5FjAJ52ZuTz1mCieaZ77NRGvwpXfY2z9ExeFvmp
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:29 2025 by rpki-client