Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/K_VgG8-nFPty6SaU95Mj0v84omk.roa
File: K_VgG8-nFPty6SaU95Mj0v84omk.roa (raw, json)
Hash identifier: BydAKxYP0vhmHQP+1EldKjeGc8uleKUZeFa8nd2FYVI=
Subject key identifier: 2B:F5:60:1B:CF:A7:14:FB:72:E9:26:94:F7:93:23:D2:FF:38:A2:69
Certificate issuer: /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial: 30
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/K_VgG8-nFPty6SaU95Mj0v84omk.roa
Signing time: Fri 01 Apr 2022 01:33:04 +0000
ROA not before: Fri 01 Apr 2022 01:33:04 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 0
IP address blocks: 2001:7fa:7::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Validity
Not Before: Apr 1 01:33:04 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=2BF5601BCFA714FB72E92694F79323D2FF38A269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:9f:0f:c3:16:ee:4a:46:41:e4:7c:62:18:
61:37:b9:32:52:bc:81:c1:83:09:48:1a:59:73:f6:
8e:b4:71:f8:42:58:28:ed:55:e9:6f:0b:56:1d:f0:
ab:d9:6d:39:88:5e:aa:fc:59:08:22:1a:54:f0:a8:
52:3a:5b:f0:80:d9:c1:d8:54:23:d1:4e:39:98:80:
3c:5f:21:93:04:c0:ca:a0:6c:2c:db:66:cd:3c:e9:
da:f5:c2:dc:c3:ba:93:06:27:ab:0d:2e:83:b1:b2:
48:aa:cd:07:ab:a6:3e:f7:08:14:91:71:49:f0:47:
de:13:ab:bb:15:70:a8:6b:69:7c:df:1b:e9:54:d8:
be:b6:d1:0c:4a:3b:d3:68:b0:e8:a5:d0:4f:89:bc:
7c:ec:58:14:1e:d6:1f:ac:87:ae:7d:60:b2:f8:6d:
ee:72:28:0e:0a:cc:4d:60:ed:dd:81:a6:95:fa:e3:
d6:d6:b0:7b:a1:ef:5d:be:24:17:2e:d2:b8:ca:50:
bc:8e:c1:aa:0f:91:84:4d:7e:cb:16:3f:b6:40:5e:
69:10:d3:23:ee:a0:4a:ac:80:b6:b0:b2:37:3e:31:
2e:c7:12:a2:67:e9:7c:c2:23:89:4f:cc:7f:cc:0c:
b0:52:44:05:19:8d:84:19:7a:5e:b8:0a:ff:2e:86:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:60:1B:CF:A7:14:FB:72:E9:26:94:F7:93:23:D2:FF:38:A2:69
X509v3 Authority Key Identifier:
keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/K_VgG8-nFPty6SaU95Mj0v84omk.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:7::/48
Signature Algorithm: sha256WithRSAEncryption
96:01:bf:89:20:dc:a3:25:89:25:56:7b:3d:67:f0:43:71:70:
aa:22:5a:12:72:44:d9:b3:8d:e2:89:9d:95:f0:a0:7a:72:c1:
af:48:3c:fa:9b:73:b5:76:80:90:39:1a:fb:c1:39:bd:b2:17:
c1:86:24:a1:55:17:1e:bb:8f:04:6d:79:0a:70:c0:f7:a6:8f:
67:87:af:f2:86:31:fe:b8:18:62:86:db:11:87:c8:e1:40:6d:
ad:77:34:e3:22:36:7d:ae:12:2a:91:0c:15:60:4d:96:fb:d3:
8e:0f:05:ae:2e:e9:86:1d:53:0e:27:b4:49:c6:70:1a:5f:e6:
b7:bc:d6:17:e4:3c:31:4e:54:27:c7:69:fa:d6:eb:c0:76:53:
3c:11:89:38:a6:ae:85:64:91:89:19:ec:cd:2f:59:36:a8:79:
9d:0a:1b:0d:12:9b:55:8c:2f:e3:cb:34:11:99:45:f4:48:75:
1d:3e:5d:ec:05:0d:d3:ef:1e:f7:f8:8c:aa:38:2a:71:20:cf:
58:0c:88:31:fa:32:0e:a7:69:99:2e:f3:21:f9:f0:82:00:a4:
9a:36:85:8a:55:fe:a7:59:bf:51:9d:e2:f2:5e:fb:67:e1:ad:
30:6f:eb:c4:f9:32:ec:b8:13:17:87:35:16:1a:77:f3:f3:88:
fc:93:3b:7a
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQTZC
NDlCMDc1MkFEM0JFM0RENjgzQjhBRUVBMjIwNUY1QUZEMjc5MB4XDTIyMDQwMTAx
MzMwNFoXDTIzMDMzMTEzMTA1N1owMzExMC8GA1UEAxMoMkJGNTYwMUJDRkE3MTRG
QjcyRTkyNjk0Rjc5MzIzRDJGRjM4QTI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL7Fnw/DFu5KRkHkfGIYYTe5MlK8gcGDCUgaWXP2jrRx+EJYKO1V
6W8LVh3wq9ltOYheqvxZCCIaVPCoUjpb8IDZwdhUI9FOOZiAPF8hkwTAyqBsLNtm
zTzp2vXC3MO6kwYnqw0ug7GySKrNB6umPvcIFJFxSfBH3hOruxVwqGtpfN8b6VTY
vrbRDEo702iw6KXQT4m8fOxYFB7WH6yHrn1gsvht7nIoDgrMTWDt3YGmlfrj1taw
e6HvXb4kFy7SuMpQvI7Bqg+RhE1+yxY/tkBeaRDTI+6gSqyAtrCyNz4xLscSomfp
fMIjiU/Mf8wMsFJEBRmNhBl6XrgK/y6Gm+0CAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQr9WAbz6cU+3LpJpT3kyPS/ziiaTAfBgNVHSMEGDAWgBTqa0mwdSrTvj3Wg7iu
6iIF9a/SeTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvNm10SnNIVXEwNzQ5MW9PNHJ1b2lCZld2MG5rLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNm10SnNIVXEwNzQ5MW9PNHJ1b2lC
Zld2MG5rLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDAzL0tfVmdHOC1uRlB0eTZTYVU5NU1qMHY4NG9tay5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQf6AAcwDQYJKoZIhvcNAQEL
BQADggEBAJYBv4kg3KMliSVWez1n8ENxcKoiWhJyRNmzjeKJnZXwoHpywa9IPPqb
c7V2gJA5GvvBOb2yF8GGJKFVFx67jwRteQpwwPemj2eHr/KGMf64GGKG2xGHyOFA
ba13NOMiNn2uEiqRDBVgTZb7044PBa4u6YYdUw4ntEnGcBpf5re81hfkPDFOVCfH
afrW68B2UzwRiTimroVkkYkZ7M0vWTaoeZ0KGw0Sm1WML+PLNBGZRfRIdR0+XewF
DdPvHvf4jKo4KnEgz1gMiDH6Mg6naZku8yH58IIApJo2hYpV/qdZv1Gd4vJe+2fh
rTBv68T5Muy4ExeHNRYad/PziPyTO3o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:06 2025 by rpki-client