Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/ECXrYkocZVMOVB44Xj3ewYRpSiI.roa
File: ECXrYkocZVMOVB44Xj3ewYRpSiI.roa (raw, json)
Hash identifier: mAX4aJ2Vu1IdAJQWaJT9HqTMGj1Ngo1SxhnnW0gIMbE=
Subject key identifier: 10:25:EB:62:4A:1C:65:53:0E:54:1E:38:5E:3D:DE:C1:84:69:4A:22
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 18
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/ECXrYkocZVMOVB44Xj3ewYRpSiI.roa
Signing time: Sun 01 Jan 2023 01:30:09 +0000
ROA not before: Sun 01 Jan 2023 01:30:09 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 9351
IP address blocks: 157.70.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Jan 1 01:30:09 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=1025EB624A1C65530E541E385E3DDEC184694A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:53:3b:83:d8:98:af:c4:1a:8b:93:b2:c9:
bd:90:f1:1d:4b:97:69:e0:e3:6a:bf:a7:6a:22:00:
9e:c0:6a:1c:4a:ca:b7:7c:30:1e:fe:09:e7:2b:5b:
43:61:f7:d1:ec:78:70:0b:a5:21:1b:2d:d0:38:d8:
84:b4:72:7b:5e:08:67:8b:87:62:82:b8:18:26:3c:
31:9b:21:68:4d:34:a0:1f:b8:83:82:69:80:15:65:
d1:f1:13:d4:02:28:13:8e:3f:d4:c6:81:50:21:1f:
a8:4b:3e:88:c7:bf:89:bc:03:b6:d7:27:8c:ba:10:
92:16:cd:88:fa:62:d6:73:04:f1:29:ef:5d:c0:a8:
fc:0d:d8:f4:5c:65:56:9d:70:5a:da:31:53:a1:13:
ec:49:93:d2:b3:dc:e5:e7:a8:c0:e4:4a:c1:61:e7:
6b:d4:4e:37:a7:89:b5:c3:7d:4b:44:e9:70:ad:4c:
06:d2:00:07:b5:4e:97:0f:31:79:a6:a3:fc:db:1f:
df:67:60:92:11:6c:2a:70:35:aa:e2:65:66:78:42:
17:b4:ba:1a:07:42:ca:a6:4b:5c:c6:de:13:c2:cf:
b1:84:2a:1c:4f:04:16:6b:33:80:ff:4c:b4:55:70:
41:0d:d7:9f:90:d4:85:ec:34:c5:76:61:dc:e3:e9:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:EB:62:4A:1C:65:53:0E:54:1E:38:5E:3D:DE:C1:84:69:4A:22
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/ECXrYkocZVMOVB44Xj3ewYRpSiI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.70.192.0/20
Signature Algorithm: sha256WithRSAEncryption
92:07:70:62:e6:bd:db:a5:e5:ab:e6:1d:41:4c:c4:99:7f:78:
ca:da:91:8f:aa:79:84:1f:b7:06:4e:05:cc:27:36:d1:d4:0f:
96:ac:a8:be:ba:99:e3:bf:cb:b3:f5:6b:5e:d3:ae:9d:83:11:
f1:cc:62:00:39:f0:2d:bc:11:41:04:86:0b:17:12:74:2a:af:
75:03:68:c9:16:08:f6:89:88:73:9d:59:a2:1d:04:54:b9:e7:
b3:6d:39:6f:c8:ec:93:4b:ab:4e:8d:4c:73:bc:24:d2:83:dc:
67:49:1d:7c:60:b5:8c:23:2c:70:68:aa:aa:83:eb:5a:e8:17:
41:9d:00:b7:10:34:86:fc:81:b2:73:5d:db:27:69:12:ea:27:
f2:2a:4d:8d:7b:bc:1e:04:ec:c9:a4:e6:cb:95:52:88:34:86:
9b:74:ec:2c:0c:08:48:a0:64:8a:43:c2:6e:10:d5:c2:9a:a9:
15:67:b1:aa:20:67:df:a6:0c:f2:4e:20:5b:49:71:ee:a3:1d:
0f:da:60:b6:f6:64:94:de:a2:af:60:90:28:4f:c9:7c:84:64:
fa:48:36:8b:e6:39:21:3e:a5:0a:54:2f:f4:d6:e1:7d:d7:0f:
0f:ae:52:1c:4c:30:9f:b6:8b:c8:2a:cb:ed:13:25:bc:da:49:
98:fd:07:c4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzdC
MzY0RUQwNDU4NTI2RDY2OENFRjhDRUU2NUEwOUREQzJFNERDMB4XDTIzMDEwMTAx
MzAwOVoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMTAyNUVCNjI0QTFDNjU1
MzBFNTQxRTM4NUUzRERFQzE4NDY5NEEyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8OUzuD2JivxBqLk7LJvZDxHUuXaeDjar+naiIAnsBqHErKt3ww
Hv4J5ytbQ2H30ex4cAulIRst0DjYhLRye14IZ4uHYoK4GCY8MZshaE00oB+4g4Jp
gBVl0fET1AIoE44/1MaBUCEfqEs+iMe/ibwDttcnjLoQkhbNiPpi1nME8SnvXcCo
/A3Y9FxlVp1wWtoxU6ET7EmT0rPc5eeowORKwWHna9RON6eJtcN9S0TpcK1MBtIA
B7VOlw8xeaaj/Nsf32dgkhFsKnA1quJlZnhCF7S6GgdCyqZLXMbeE8LPsYQqHE8E
FmszgP9MtFVwQQ3Xn5DUhew0xXZh3OPp7WkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQQJetiShxlUw5UHjhePd7BhGlKIjAfBgNVHSMEGDAWgBRjezZO0EWFJtZozvjO
5loJ3cLk3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L1kzczJUdEJGaFNiV2FNNzR6dVphQ2QzQzVOdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1kzczJUdEJGaFNiV2FNNzR6dVphQ2Qz
QzVOdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvRUNYcllrb2NaVk1PVkI0NFhqM2V3WVJwU2lJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJ1GwDANBgkqhkiG9w0BAQsFAAOCAQEAkgdwYua926Xlq+YdQUzEmX94ytqR
j6p5hB+3Bk4FzCc20dQPlqyovrqZ47/Ls/VrXtOunYMR8cxiADnwLbwRQQSGCxcS
dCqvdQNoyRYI9omIc51Zoh0EVLnns205b8jsk0urTo1Mc7wk0oPcZ0kdfGC1jCMs
cGiqqoPrWugXQZ0AtxA0hvyBsnNd2ydpEuon8ipNjXu8HgTsyaTmy5VSiDSGm3Ts
LAwISKBkikPCbhDVwpqpFWexqiBn36YM8k4gW0lx7qMdD9pgtvZklN6ir2CQKE/J
fIRk+kg2i+Y5IT6lClQv9NbhfdcPD65SHEwwn7aLyCrL7RMlvNpJmP0HxA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:43:17 2025 by rpki-client