Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa
File: xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa (raw, json)
Hash identifier: cALE/y/2k7VtsD3MjxWR1HCZ8sGi5roNPJVuJ6mMcN0=
Subject key identifier: C4:0E:CE:83:9D:8B:46:4D:D6:A1:2C:24:AB:FF:61:CB:D6:72:D0:AE
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 1E
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa
Signing time: Wed 10 Jan 2024 01:03:00 +0000
ROA not before: Wed 10 Jan 2024 01:03:00 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 157.65.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 10 01:03:00 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=C40ECE839D8B464DD6A12C24ABFF61CBD672D0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:d4:26:d9:c5:a6:ef:95:d1:e5:a2:5f:6d:
32:98:ab:7b:48:f6:59:e8:18:00:d0:f2:57:85:51:
94:84:94:29:2b:5a:d4:ca:a9:fc:2e:22:32:bf:f3:
19:97:14:92:b3:d3:e7:85:e8:57:8e:61:d7:28:1b:
64:8a:6d:95:84:38:46:7f:92:5a:57:ff:c1:78:be:
ac:f2:4b:03:09:5e:1b:ef:96:69:55:3f:2e:cf:29:
ea:2f:98:42:51:3a:bc:f9:4d:1a:09:51:1d:1d:3a:
c3:73:db:3f:1f:44:e5:f8:dc:29:ff:ec:4d:24:ad:
00:32:13:6c:c0:d7:94:93:ed:e5:b8:8c:72:c4:02:
46:cb:cc:1e:18:0a:98:e7:08:f2:78:f0:fc:6c:cf:
74:88:20:a5:d6:b5:1e:2c:15:b0:35:28:4e:f8:51:
37:ed:61:65:73:fa:dd:b3:81:6c:2b:79:a0:26:65:
3f:3c:e3:b6:07:dc:bb:b0:e7:0b:33:a1:d5:3a:17:
fa:09:96:66:ee:39:89:35:7d:27:40:9f:9a:9e:c6:
5c:f5:98:93:4b:d5:73:e4:72:69:72:54:ce:76:c9:
3d:0a:01:46:7f:3f:3b:7d:fd:d3:32:5e:2a:bf:45:
bf:09:10:19:76:e4:c7:55:3b:9a:29:a9:b0:cf:d2:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:CE:83:9D:8B:46:4D:D6:A1:2C:24:AB:FF:61:CB:D6:72:D0:AE
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xA7Og52LRk3WoSwkq_9hy9Zy0K4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.32.0/19
Signature Algorithm: sha256WithRSAEncryption
54:4f:69:2e:40:d2:85:e8:1e:c2:bd:1d:09:73:bc:6a:d3:59:
a7:8a:d2:a3:e1:01:0c:b3:85:04:21:ad:ee:a2:4c:93:5e:fd:
16:03:cf:de:7e:2f:f2:2d:fb:25:7a:fa:28:86:7d:68:82:e8:
06:ef:2c:eb:b1:4c:49:2a:a2:b0:e7:6f:f5:c1:04:ee:79:e4:
49:10:d5:c7:75:70:69:0f:33:e6:5a:1b:eb:55:94:7d:82:b9:
d8:2b:d7:13:da:05:b1:ed:30:fc:ee:7c:55:8a:cd:d8:59:75:
da:fc:3b:91:da:8f:d8:bd:ec:52:9d:bf:f8:5d:9e:89:59:91:
38:f1:54:ba:e1:c2:c0:e1:92:ec:08:ef:c5:9d:b2:a0:23:82:
16:ea:9b:6b:b7:75:4c:f2:80:75:13:36:09:ec:db:50:fa:db:
d5:82:f9:d1:48:41:dd:b5:16:14:c0:bd:a5:75:b7:24:66:a9:
7a:46:a5:68:2d:5a:de:f9:3d:ba:61:e9:bd:73:a9:76:c5:86:
37:cb:d1:68:bf:be:3a:ae:15:20:25:65:5f:b4:72:25:8b:64:
99:b4:f0:db:fe:0a:7b:69:d4:a5:f9:e2:d4:dd:8d:93:b3:6b:
a9:6c:28:5b:ad:a9:db:16:e7:3b:ca:5b:3f:94:25:33:c1:f9:
fe:a6:54:4d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx
MDMwMFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQzQwRUNFODM5RDhCNDY0
REQ2QTEyQzI0QUJGRjYxQ0JENjcyRDBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPOJ1CbZxabvldHlol9tMpire0j2WegYANDyV4VRlISUKSta1Mqp
/C4iMr/zGZcUkrPT54XoV45h1ygbZIptlYQ4Rn+SWlf/wXi+rPJLAwleG++WaVU/
Ls8p6i+YQlE6vPlNGglRHR06w3PbPx9E5fjcKf/sTSStADITbMDXlJPt5biMcsQC
RsvMHhgKmOcI8njw/GzPdIggpda1HiwVsDUoTvhRN+1hZXP63bOBbCt5oCZlPzzj
tgfcu7DnCzOh1ToX+gmWZu45iTV9J0Cfmp7GXPWYk0vVc+RyaXJUznbJPQoBRn8/
O3390zJeKr9FvwkQGXbkx1U7mimpsM/SW4MCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBTEDs6DnYtGTdahLCSr/2HL1nLQrjAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3hBN09nNTJMUmszV29Td2txXzloeTlaeTBLNC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAWdQSAwDQYJKoZIhvcNAQELBQADggEBAFRPaS5A0oXoHsK9HQlzvGrTWaeK0qPh
AQyzhQQhre6iTJNe/RYDz95+L/It+yV6+iiGfWiC6AbvLOuxTEkqorDnb/XBBO55
5EkQ1cd1cGkPM+ZaG+tVlH2Cudgr1xPaBbHtMPzufFWKzdhZddr8O5Haj9i97FKd
v/hdnolZkTjxVLrhwsDhkuwI78WdsqAjghbqm2u3dUzygHUTNgns21D629WC+dFI
Qd21FhTAvaV1tyRmqXpGpWgtWt75Pbph6b1zqXbFhjfL0Wi/vjquFSAlZV+0ciWL
ZJm08Nv+Cntp1KX54tTdjZOza6lsKFutqdsW5zvKWz+UJTPB+f6mVE0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:11 2025 by rpki-client