Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
File: frCtemKisH3kFyZJr2p7lZxdnqI.roa (raw, json)
Hash identifier: jRW2W2/nBZWtE7Ubs2P+IRnZjJf/fQbUr06nD8UN9uM=
Subject key identifier: 7E:B0:AD:7A:62:A2:B0:7D:E4:17:26:49:AF:6A:7B:95:9C:5D:9E:A2
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0152
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
Signing time: Wed 15 Feb 2023 02:28:31 +0000
ROA not before: Wed 15 Feb 2023 02:28:31 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.35/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 15 02:28:31 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=7EB0AD7A62A2B07DE4172649AF6A7B959C5D9EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:d1:f7:f9:57:ab:2c:0c:09:ed:87:bb:1e:
a5:89:50:42:8e:43:5c:9a:dd:e3:b3:dc:7b:87:3a:
5d:f3:ff:bf:7f:f2:b8:c0:1c:61:99:e8:e8:2e:54:
9a:cd:d2:b3:a8:fd:9d:09:ca:62:29:ae:ff:2d:2e:
0e:e1:0d:ee:6f:77:05:e2:4e:36:f7:e4:be:35:01:
62:7f:31:54:f4:8f:4a:1a:45:6e:8d:4f:e5:43:57:
e8:56:6b:c1:f7:e4:24:a3:e9:02:c3:1c:51:ab:3c:
0f:65:7c:5d:ac:2d:14:fc:60:10:d0:c8:23:41:8a:
2f:63:21:5b:b6:ad:bd:b3:ef:aa:6c:90:61:66:ed:
81:bc:28:b2:6b:ec:7d:91:af:7b:0c:ad:92:38:5c:
83:b0:32:4e:07:47:ae:a5:92:a5:de:71:0a:2f:ed:
d4:d6:3e:5b:02:c1:78:91:6f:7c:15:a0:e0:49:b5:
ee:4e:14:07:3f:1a:e1:7e:78:9b:0c:3b:9b:88:6c:
c8:6c:20:41:52:5c:c9:8a:79:b8:be:ba:e0:8b:0d:
93:b8:b0:c4:c5:b4:f4:5b:6d:45:e0:5b:a5:6b:fb:
d1:bd:2e:fc:af:fe:c9:84:e1:a7:62:31:9c:be:7b:
ff:60:50:a2:e7:af:fc:ea:37:8d:fe:3d:a3:26:52:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:AD:7A:62:A2:B0:7D:E4:17:26:49:AF:6A:7B:95:9C:5D:9E:A2
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.35/32
Signature Algorithm: sha256WithRSAEncryption
a1:a7:27:27:0f:a3:ff:85:d8:8b:e6:00:43:10:be:b5:fc:80:
91:bb:ba:c2:d8:7b:06:2f:cf:44:3a:07:71:d5:50:56:d6:ec:
b5:ed:f0:90:1b:c4:e5:6f:2f:7f:9a:cf:29:1a:82:1a:39:4e:
fd:d7:af:54:bd:d9:4a:f6:84:33:ca:14:d1:e9:bc:f2:9d:b9:
87:dd:30:02:45:f7:57:07:67:42:00:f1:9b:7e:d7:d3:41:b6:
30:2d:17:48:a7:43:20:98:01:c2:fc:8f:0a:67:95:d1:c1:ef:
f7:d5:31:dd:61:17:b5:75:45:0f:22:f0:27:d1:8c:57:33:e3:
8d:d4:57:fd:88:d4:48:93:a8:3e:63:25:5e:dc:35:e4:63:45:
27:73:fa:bd:cf:61:60:13:bd:98:a4:aa:ec:d8:14:d8:60:34:
1a:77:a6:5c:6e:99:e4:76:8a:d6:2c:12:68:70:ed:27:77:68:
57:10:ef:96:72:5f:9a:9d:69:d4:2c:dc:12:b0:76:e6:e3:f4:
ac:b9:fb:46:28:b6:b8:07:43:7c:a9:97:ce:a1:d8:43:f4:a7:
9f:14:f5:79:81:7d:08:2a:4a:6f:8a:33:a6:cd:57:e8:62:03:
f3:c3:00:be:c1:74:de:65:13:32:9e:f2:93:60:38:5d:be:0c:
be:b9:9e:c2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTUw
MjI4MzFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdFQjBBRDdBNjJBMkIw
N0RFNDE3MjY0OUFGNkE3Qjk1OUM1RDlFQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6PdH3+VerLAwJ7Ye7HqWJUEKOQ1ya3eOz3HuHOl3z/79/8rjA
HGGZ6OguVJrN0rOo/Z0JymIprv8tLg7hDe5vdwXiTjb35L41AWJ/MVT0j0oaRW6N
T+VDV+hWa8H35CSj6QLDHFGrPA9lfF2sLRT8YBDQyCNBii9jIVu2rb2z76pskGFm
7YG8KLJr7H2Rr3sMrZI4XIOwMk4HR66lkqXecQov7dTWPlsCwXiRb3wVoOBJte5O
FAc/GuF+eJsMO5uIbMhsIEFSXMmKebi+uuCLDZO4sMTFtPRbbUXgW6Vr+9G9Lvyv
/smE4adiMZy+e/9gUKLnr/zqN43+PaMmUujxAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUfrCtemKisH3kFyZJr2p7lZxdnqIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9mckN0ZW1LaXNIM2tGeVpKcjJwN2xaeGRucUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaIzANBgkqhkiG9w0BAQsFAAOCAQEAoacnJw+j/4XYi+YAQxC+
tfyAkbu6wth7Bi/PRDoHcdVQVtbste3wkBvE5W8vf5rPKRqCGjlO/devVL3ZSvaE
M8oU0em88p25h90wAkX3VwdnQgDxm37X00G2MC0XSKdDIJgBwvyPCmeV0cHv99Ux
3WEXtXVFDyLwJ9GMVzPjjdRX/YjUSJOoPmMlXtw15GNFJ3P6vc9hYBO9mKSq7NgU
2GA0GnemXG6Z5HaK1iwSaHDtJ3doVxDvlnJfmp1p1CzcErB25uP0rLn7Rii2uAdD
fKmXzqHYQ/SnnxT1eYF9CCpKb4ozps1X6GID88MAvsF03mUTMp7yk2A4Xb4Mvrme
wg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:33 2025 by rpki-client