Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/9kqXjH7gq6CFWsN8kweGPPGfnFU.roa
File: 9kqXjH7gq6CFWsN8kweGPPGfnFU.roa (raw, json)
Hash identifier: IDcwDG+4RJvKfIGfJHTuLJ3w70rR8XecshHoEoc7rTE=
Subject key identifier: F6:4A:97:8C:7E:E0:AB:A0:85:5A:C3:7C:93:07:86:3C:F1:9F:9C:55
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 88
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/9kqXjH7gq6CFWsN8kweGPPGfnFU.roa
Signing time: Mon 01 Jan 2024 01:28:27 +0000
ROA not before: Mon 01 Jan 2024 01:28:27 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 9351
IP address blocks: 202.91.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Jan 1 01:28:27 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=F64A978C7EE0ABA0855AC37C9307863CF19F9C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:0e:50:33:49:a5:06:b3:67:85:56:80:9e:
d8:26:18:97:14:f8:e2:50:8d:8a:5e:ac:49:46:e5:
9b:98:1e:9f:92:c6:0f:5d:4c:89:1b:a4:32:53:bd:
3e:b5:3e:8b:8c:a9:7d:1a:67:11:e2:45:3a:37:b6:
4c:23:d7:80:a8:64:96:fb:ce:3c:07:33:f0:7f:c3:
fc:ec:5b:7d:c3:da:2b:e5:0c:94:c1:8c:2f:0a:14:
51:ac:8a:cc:1b:cf:c3:66:19:b1:4b:ac:6a:0c:d0:
9b:2f:75:72:13:aa:2f:43:d3:a5:e0:af:60:6f:18:
71:ca:5e:b9:a6:0f:30:eb:ea:65:ab:46:d9:0c:bc:
db:41:ab:42:60:5a:91:83:53:62:f3:be:b5:3f:74:
9e:18:46:be:f6:b3:57:90:60:dc:37:dc:e5:f5:af:
e7:dc:ba:8d:fd:64:1f:17:c7:c5:2a:64:36:b7:cb:
34:19:45:d3:30:21:e9:c6:2a:1c:4a:6e:41:e0:9c:
90:b0:66:cc:da:ad:75:d7:3c:14:36:b4:bf:98:71:
ee:8f:57:91:69:5e:55:fc:18:fe:45:7c:12:0a:54:
63:c4:14:04:6b:4f:86:d3:29:92:f5:38:e3:2f:7b:
c8:b7:5e:bf:df:2d:f3:fa:c1:85:99:52:a3:98:dc:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4A:97:8C:7E:E0:AB:A0:85:5A:C3:7C:93:07:86:3C:F1:9F:9C:55
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/9kqXjH7gq6CFWsN8kweGPPGfnFU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
80:63:5f:3d:7c:54:46:a0:62:59:d9:99:0b:2f:d7:c2:65:95:
65:41:9e:8f:1b:eb:3e:c1:b7:ab:c7:fc:d1:96:62:dd:42:27:
5e:19:81:f3:3f:c9:88:9a:c0:a6:ec:e4:da:99:62:75:93:92:
aa:d5:cd:72:53:33:15:63:bb:e5:52:d3:00:56:b8:b8:e5:b7:
77:bf:6b:fa:70:e7:05:f5:4d:e4:ee:e9:94:3d:8d:20:31:03:
92:e8:8d:87:fb:14:b4:15:af:8a:4c:aa:e3:4d:0a:8c:f0:24:
8c:c8:25:de:c1:ce:c6:29:18:49:45:ae:45:e4:22:32:51:ab:
f7:bd:d1:6b:6f:fe:ca:38:f6:0c:66:22:16:28:c7:38:c2:06:
1e:4e:64:f1:33:93:71:38:09:63:c9:64:6b:e4:81:17:2e:b3:
82:f1:0e:74:04:3c:80:d2:41:dc:21:68:a6:6c:07:96:4f:36:
53:57:65:34:67:f1:08:37:0a:3c:d0:cb:fe:c0:02:c9:de:0b:
e2:51:52:bf:cd:4d:24:3c:ad:0c:33:2a:c2:fa:33:e7:69:fb:
cf:b7:10:46:28:ac:81:59:44:88:ff:f3:97:fd:97:4f:2e:1c:
c2:be:05:c2:41:fb:7b:c4:31:f5:3e:77:1d:ab:94:27:9d:bc:
c0:2d:fb:c2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDAxMDEw
MTI4MjdaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY2NEE5NzhDN0VFMEFC
QTA4NTVBQzM3QzkzMDc4NjNDRjE5RjlDNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH9g5QM0mlBrNnhVaAntgmGJcU+OJQjYperElG5ZuYHp+Sxg9d
TIkbpDJTvT61PouMqX0aZxHiRTo3tkwj14CoZJb7zjwHM/B/w/zsW33D2ivlDJTB
jC8KFFGsiswbz8NmGbFLrGoM0JsvdXITqi9D06Xgr2BvGHHKXrmmDzDr6mWrRtkM
vNtBq0JgWpGDU2LzvrU/dJ4YRr72s1eQYNw33OX1r+fcuo39ZB8Xx8UqZDa3yzQZ
RdMwIenGKhxKbkHgnJCwZszarXXXPBQ2tL+Yce6PV5FpXlX8GP5FfBIKVGPEFARr
T4bTKZL1OOMve8i3Xr/fLfP6wYWZUqOY3OiTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9kqXjH7gq6CFWsN8kweGPPGfnFUwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0LzlrcVhqSDdncTZDRldzTjhrd2VHUFBHZm5GVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKW9AwDQYJKoZIhvcNAQELBQADggEBAIBjXz18VEagYlnZmQsv18JllWVB
no8b6z7Bt6vH/NGWYt1CJ14ZgfM/yYiawKbs5NqZYnWTkqrVzXJTMxVju+VS0wBW
uLjlt3e/a/pw5wX1TeTu6ZQ9jSAxA5LojYf7FLQVr4pMquNNCozwJIzIJd7BzsYp
GElFrkXkIjJRq/e90Wtv/so49gxmIhYoxzjCBh5OZPEzk3E4CWPJZGvkgRcus4Lx
DnQEPIDSQdwhaKZsB5ZPNlNXZTRn8Qg3CjzQy/7AAsneC+JRUr/NTSQ8rQwzKsL6
M+dp+8+3EEYorIFZRIj/85f9l08uHMK+BcJB+3vEMfU+dx2rlCedvMAt+8I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:23 2025 by rpki-client