Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa
File: YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa (raw, json)
Hash identifier: XzQkvT+vMp0y/kOPqpbH2fA+D/BlOlesvooZku8oYFY=
Subject key identifier: 62:06:97:8D:A4:1F:BE:7B:DD:67:B8:55:AA:6C:DD:10:2B:0E:67:07
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 3A
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa
Signing time: Thu 25 Jan 2024 01:02:32 +0000
ROA not before: Thu 25 Jan 2024 01:02:32 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.200.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 25 01:02:32 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=6206978DA41FBE7BDD67B855AA6CDD102B0E6707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:8c:6b:57:21:2d:89:ba:2d:c2:b5:93:a3:
6c:b5:ef:20:3c:49:58:81:ef:8a:63:e3:de:88:58:
db:1f:d7:5c:c7:5f:ee:ba:2b:19:e5:ac:c8:0b:74:
c6:c9:21:1b:bd:15:be:cf:e6:c1:02:c5:78:d6:40:
e1:ea:62:bf:3b:95:dd:13:9a:c7:d2:ad:44:44:fa:
7b:3d:52:ea:03:56:03:4f:1f:18:02:2d:eb:37:3b:
ff:c5:12:7c:b0:3e:ca:be:bd:d1:97:7a:78:e8:12:
20:68:3a:b0:99:87:89:7e:49:3b:ab:bd:33:05:a9:
2f:c3:09:61:fd:df:cf:68:9c:92:44:cd:85:55:52:
a0:a2:2d:53:6e:e7:94:d7:93:ec:72:0a:32:59:57:
85:15:b4:81:f5:81:4e:a4:d8:76:2d:7c:92:6d:98:
87:92:ab:26:97:0a:82:d8:7b:2e:87:ab:a4:6b:e8:
4d:10:f7:2a:a4:0f:63:02:da:9c:26:8a:fc:a3:35:
23:73:c3:45:ec:3b:9b:13:6f:81:49:be:e4:0e:d8:
6a:83:f7:a8:a9:ed:9b:26:2e:97:72:d3:36:18:49:
cd:11:38:e1:2d:f3:7b:08:bb:c6:d0:19:ef:81:8f:
8f:49:8f:7d:19:40:02:b5:66:60:17:96:bc:35:98:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:97:8D:A4:1F:BE:7B:DD:67:B8:55:AA:6C:DD:10:2B:0E:67:07
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YgaXjaQfvnvdZ7hVqmzdECsOZwc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:33:ea:7d:bd:4f:0d:6d:8a:b5:cd:0d:69:4d:bb:57:cb:6e:
fd:52:25:53:b7:41:7b:c9:0d:7d:9c:0a:06:ad:fa:07:6a:40:
a8:8a:64:7a:49:bc:6b:af:37:f8:60:2e:cd:22:dc:5c:3b:48:
08:2b:02:6f:bd:7f:e5:5e:e7:4a:7a:d7:e8:7a:ec:88:e6:07:
02:d3:92:f4:38:9c:91:29:fe:c6:15:14:c8:49:f1:ce:77:7b:
63:ea:74:7c:fd:2d:e3:d8:69:48:df:13:b3:df:c9:8e:03:e1:
f1:25:1c:a2:a8:45:83:0b:88:ac:b3:e2:0a:52:47:81:41:20:
73:ee:1d:07:2e:8e:e9:0b:34:bc:2a:12:c2:35:4f:3a:f9:bd:
fb:fa:1a:31:fa:eb:76:a1:58:36:f1:15:3f:76:ec:a2:36:cf:
6b:6c:95:e5:e8:ee:69:27:71:6a:1b:7d:68:fa:dc:37:1f:6c:
c0:84:1c:3c:bb:b6:65:1b:35:34:0f:1c:8d:02:47:80:ae:f6:
71:35:9c:12:65:d9:aa:7f:fa:15:0d:68:5b:00:6b:a4:f4:05:
86:4f:79:46:b9:aa:f7:9b:00:02:f9:94:99:5a:d8:74:e6:10:
24:f6:74:40:ff:51:7f:aa:96:60:c7:ff:91:16:92:9b:1c:9f:
c5:a2:4b:9c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDEyNTAx
MDIzMloXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoNjIwNjk3OERBNDFGQkU3
QkRENjdCODU1QUE2Q0REMTAyQjBFNjcwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK7WjGtXIS2Jui3CtZOjbLXvIDxJWIHvimPj3ohY2x/XXMdf7ror
GeWsyAt0xskhG70Vvs/mwQLFeNZA4epivzuV3ROax9KtRET6ez1S6gNWA08fGAIt
6zc7/8USfLA+yr690Zd6eOgSIGg6sJmHiX5JO6u9MwWpL8MJYf3fz2ickkTNhVVS
oKItU27nlNeT7HIKMllXhRW0gfWBTqTYdi18km2Yh5KrJpcKgth7LoerpGvoTRD3
KqQPYwLanCaK/KM1I3PDRew7mxNvgUm+5A7YaoP3qKntmyYul3LTNhhJzRE44S3z
ewi7xtAZ74GPj0mPfRlAArVmYBeWvDWYbbECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRiBpeNpB++e91nuFWqbN0QKw5nBzAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L1lnYVhqYVFmdm52ZFo3aFZxbXpkRUNzT1p3Yy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGg+MgwDQYJKoZIhvcNAQELBQADggEBAHoz6n29Tw1tirXNDWlNu1fLbv1SJVO3
QXvJDX2cCgat+gdqQKiKZHpJvGuvN/hgLs0i3Fw7SAgrAm+9f+Ve50p61+h67Ijm
BwLTkvQ4nJEp/sYVFMhJ8c53e2PqdHz9LePYaUjfE7PfyY4D4fElHKKoRYMLiKyz
4gpSR4FBIHPuHQcujukLNLwqEsI1Tzr5vfv6GjH663ahWDbxFT927KI2z2tsleXo
7mkncWobfWj63DcfbMCEHDy7tmUbNTQPHI0CR4Cu9nE1nBJl2ap/+hUNaFsAa6T0
BYZPeUa5qvebAAL5lJla2HTmECT2dED/UX+qlmDH/5EWkpscn8WiS5w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:25 2025 by rpki-client