Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AnOfAIvyvRWQ4BDa_4mvTgdvpsE.roa
File: AnOfAIvyvRWQ4BDa_4mvTgdvpsE.roa (raw, json)
Hash identifier: 83z4FedtgFhjrAv213d5jtJtwlyZ0FElAzseSbI6rqA=
Subject key identifier: 02:73:9F:00:8B:F2:BD:15:90:E0:10:DA:FF:89:AF:4E:07:6F:A6:C1
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0295
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AnOfAIvyvRWQ4BDa_4mvTgdvpsE.roa
Signing time: Mon 20 Feb 2023 08:05:26 +0000
ROA not before: Mon 20 Feb 2023 08:05:26 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.134/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:05:26 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=02739F008BF2BD1590E010DAFF89AF4E076FA6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:ea:7e:3c:eb:12:dc:b4:ad:2c:9e:0a:8a:
63:c3:8b:ae:b2:cb:a1:c0:60:67:a5:69:3c:d0:68:
e4:0e:3f:dc:19:3a:99:d2:c6:b0:dd:cf:e8:7c:cf:
cb:14:5f:d3:38:ad:42:89:d5:b6:c5:d8:71:87:c9:
7b:2f:9d:10:ea:9a:e2:fd:2d:9d:de:38:4a:da:e3:
a6:08:26:dd:79:06:36:20:f5:14:28:fa:e9:a5:53:
05:d7:91:6e:77:6d:ff:1d:41:04:dc:89:90:98:c3:
26:20:2f:4c:41:f6:9a:ec:d7:8c:23:6a:63:8b:38:
cf:50:7b:f0:5b:d8:a0:75:e4:be:a2:8d:10:96:ac:
51:eb:ac:a2:cb:da:3a:cb:e5:2e:88:9b:38:9e:27:
5c:55:fb:3a:89:33:ac:25:f7:71:87:9b:82:ef:35:
b7:0d:8e:92:22:c1:76:42:5b:9a:03:2a:98:25:91:
17:eb:a6:b6:b0:0c:4a:5f:d2:1b:f7:e0:06:c8:a8:
d0:60:3b:f5:38:30:9d:30:86:b0:d6:af:ea:d2:38:
d8:fc:d7:e9:19:de:36:cb:e6:cd:19:b1:2e:c1:9f:
c1:02:3d:e3:09:00:80:41:15:ec:03:83:5f:63:4a:
67:c5:78:a0:b0:c0:c5:55:d0:54:68:62:49:9e:ee:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:9F:00:8B:F2:BD:15:90:E0:10:DA:FF:89:AF:4E:07:6F:A6:C1
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AnOfAIvyvRWQ4BDa_4mvTgdvpsE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.134/32
Signature Algorithm: sha256WithRSAEncryption
41:8e:14:d9:44:1b:ea:c7:54:38:2b:cc:d6:2d:49:ad:47:43:
88:b6:b3:89:c4:75:3c:95:db:5e:26:83:50:db:cd:3b:ff:58:
31:9b:7c:d4:c5:51:bf:ca:7d:fe:41:08:8e:78:b1:69:e8:58:
39:61:79:28:5c:3d:bf:8f:63:16:60:6c:71:97:25:49:8d:60:
d0:5b:ad:cd:64:3d:25:4a:34:08:de:4d:a8:e7:df:04:39:d2:
8d:f2:19:58:09:a0:af:b4:4d:49:a0:bc:47:ce:ad:c7:66:82:
eb:ee:65:ba:1e:1d:6a:0f:10:4c:27:5e:84:ca:2f:51:7c:1f:
9c:13:fe:a9:c9:64:c8:3e:9c:59:2e:88:66:6d:ec:c4:6d:15:
7f:a0:9c:47:9f:74:a0:cc:c3:44:b7:dd:7d:c7:6e:66:22:34:
41:f7:67:b2:5f:36:79:a7:b9:57:00:11:06:47:b3:35:9d:94:
e0:83:b8:69:2c:82:bf:82:0f:0c:36:38:24:9f:1b:8e:f0:d9:
01:a1:6d:b4:4b:dd:fe:b8:13:ee:0a:a2:3c:2d:cb:12:47:07:
42:00:e9:33:c5:79:a0:cf:cf:8e:58:ef:b8:67:5b:af:6b:cc:
4e:04:02:91:34:e5:e8:45:41:76:cf:42:7c:0c:0f:4f:00:76:
51:ac:78:7d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICApUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MjZaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAyNzM5RjAwOEJGMkJE
MTU5MEUwMTBEQUZGODlBRjRFMDc2RkE2QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxr+p+POsS3LStLJ4KimPDi66yy6HAYGelaTzQaOQOP9wZOpnS
xrDdz+h8z8sUX9M4rUKJ1bbF2HGHyXsvnRDqmuL9LZ3eOEra46YIJt15BjYg9RQo
+umlUwXXkW53bf8dQQTciZCYwyYgL0xB9prs14wjamOLOM9Qe/Bb2KB15L6ijRCW
rFHrrKLL2jrL5S6ImzieJ1xV+zqJM6wl93GHm4LvNbcNjpIiwXZCW5oDKpglkRfr
prawDEpf0hv34AbIqNBgO/U4MJ0whrDWr+rSONj81+kZ3jbL5s0ZsS7Bn8ECPeMJ
AIBBFewDg19jSmfFeKCwwMVV0FRoYkme7swJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUAnOfAIvyvRWQ4BDa/4mvTgdvpsEwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9Bbk9mQUl2eXZSV1E0QkRhXzRtdlRnZHZwc0Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxahjANBgkqhkiG9w0BAQsFAAOCAQEAQY4U2UQb6sdUOCvM1i1J
rUdDiLazicR1PJXbXiaDUNvNO/9YMZt81MVRv8p9/kEIjnixaehYOWF5KFw9v49j
FmBscZclSY1g0FutzWQ9JUo0CN5NqOffBDnSjfIZWAmgr7RNSaC8R86tx2aC6+5l
uh4dag8QTCdehMovUXwfnBP+qclkyD6cWS6IZm3sxG0Vf6CcR590oMzDRLfdfcdu
ZiI0Qfdnsl82eae5VwARBkezNZ2U4IO4aSyCv4IPDDY4JJ8bjvDZAaFttEvd/rgT
7gqiPC3LEkcHQgDpM8V5oM/PjljvuGdbr2vMTgQCkTTl6EVBds9CfAwPTwB2Uax4
fQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:59 2025 by rpki-client