Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/2X4E7RyMBQaaFPVcd5Cvi0YPh7o.roa
File: 2X4E7RyMBQaaFPVcd5Cvi0YPh7o.roa (raw, json)
Hash identifier: bXv1QgmnLYKYjw3vveb2EfY/VIm5rSiRjiA0tUeskwc=
Subject key identifier: D9:7E:04:ED:1C:8C:05:06:9A:14:F5:5C:77:90:AF:8B:46:0F:87:BA
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 43
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/2X4E7RyMBQaaFPVcd5Cvi0YPh7o.roa
Signing time: Thu 13 Apr 2023 09:54:21 +0000
ROA not before: Thu 13 Apr 2023 09:54:21 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9370
IP address blocks: 2001:e47::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Apr 13 09:54:21 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=D97E04ED1C8C05069A14F55C7790AF8B460F87BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:d9:60:e5:4e:4e:05:a8:64:7d:95:4b:57:
01:cc:32:2c:4d:50:92:eb:7d:3e:2a:43:01:da:91:
6f:83:1a:b8:bf:f6:3d:86:70:55:2d:b9:bf:8a:39:
dc:12:6b:19:ac:f4:ab:85:94:05:15:f5:ee:63:3f:
6e:22:91:9a:39:d7:41:13:e2:68:9d:63:be:93:2e:
23:4f:40:11:71:7d:e7:79:56:f1:5a:ae:04:71:23:
97:0a:bc:06:d6:8d:c6:75:68:21:99:f0:5c:ff:29:
5b:ee:ea:8e:65:f2:d5:44:a5:6d:60:f7:8a:05:86:
a1:2a:01:f6:0b:f4:51:9a:79:fd:93:ac:2d:ae:73:
72:40:6a:4e:60:7b:aa:fb:57:c9:ee:6a:39:5f:16:
78:04:32:57:31:22:8f:c2:2f:da:e2:f3:de:e6:5e:
1b:09:be:84:9c:5d:ce:c1:d4:10:cc:e2:c9:35:98:
02:92:1e:1a:8b:3c:88:cf:5a:aa:c5:6c:1e:b0:c2:
5c:f6:82:3c:3a:50:c4:46:d9:90:ed:11:76:32:fb:
04:fc:1f:6d:10:68:60:ed:e8:24:7c:61:91:70:ed:
c0:a1:90:7e:2a:92:e4:38:99:85:ec:d1:02:eb:0e:
ba:d8:53:b9:b7:81:a9:18:c7:1d:45:61:b3:9c:61:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:04:ED:1C:8C:05:06:9A:14:F5:5C:77:90:AF:8B:46:0F:87:BA
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/2X4E7RyMBQaaFPVcd5Cvi0YPh7o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:e47::/32
Signature Algorithm: sha256WithRSAEncryption
be:b5:31:6a:c7:d7:d4:ef:d5:70:89:a3:a2:47:48:0e:45:dd:
df:07:95:b1:9a:70:e1:13:6c:ef:43:5c:3c:24:62:10:2c:75:
30:1a:bb:da:89:e9:1f:f2:b8:04:0d:a3:53:c3:1b:57:f9:42:
a4:96:44:b2:a7:3b:28:b4:a2:a5:f7:29:48:82:a8:2b:85:a5:
1d:cb:4f:22:e5:bf:37:10:9a:e1:67:17:59:c9:4e:33:fc:19:
b4:bd:34:93:28:2e:05:ed:48:7e:b4:a5:bd:72:f5:5e:a6:eb:
6b:ad:50:d7:87:9e:fc:df:00:6a:88:ed:3c:3b:30:60:43:8b:
b9:0f:60:82:88:c4:cc:3b:ac:ab:eb:ff:7b:58:1a:62:8a:02:
6a:d2:73:fb:d2:64:5a:4e:bc:0d:89:68:63:62:08:17:c4:7b:
bf:eb:d7:d9:be:86:ce:57:df:b1:f6:d2:0e:73:52:e5:31:8a:
40:8e:a8:38:62:3e:fe:d3:e3:56:64:82:92:73:50:2a:d7:4c:
cc:78:66:ca:d1:48:85:b7:3f:02:ee:bc:fb:dc:b7:c8:c5:b6:
f9:e8:62:12:ac:04:45:3a:01:b2:e5:f0:16:91:21:0d:87:60:
30:e9:ad:03:42:03:e8:a7:a9:e6:bb:76:64:1d:7b:d7:0b:d4:
ec:45:91:b7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTIzMDQxMzA5
NTQyMVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRDk3RTA0RUQxQzhDMDUw
NjlBMTRGNTVDNzc5MEFGOEI0NjBGODdCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKY+2WDlTk4FqGR9lUtXAcwyLE1Qkut9PipDAdqRb4MauL/2PYZw
VS25v4o53BJrGaz0q4WUBRX17mM/biKRmjnXQRPiaJ1jvpMuI09AEXF953lW8Vqu
BHEjlwq8BtaNxnVoIZnwXP8pW+7qjmXy1USlbWD3igWGoSoB9gv0UZp5/ZOsLa5z
ckBqTmB7qvtXye5qOV8WeAQyVzEij8Iv2uLz3uZeGwm+hJxdzsHUEMziyTWYApIe
Gos8iM9aqsVsHrDCXPaCPDpQxEbZkO0RdjL7BPwfbRBoYO3oJHxhkXDtwKGQfiqS
5DiZhezRAusOuthTubeBqRjHHUVhs5xhNn0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTZfgTtHIwFBpoU9Vx3kK+LRg+HujAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4LzJYNEU3UnlNQlFhYUZQVmNkNUN2aTBZUGg3by5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQ5HMA0GCSqGSIb3DQEBCwUAA4IBAQC+tTFqx9fU79VwiaOiR0gO
Rd3fB5WxmnDhE2zvQ1w8JGIQLHUwGrvaiekf8rgEDaNTwxtX+UKklkSypzsotKKl
9ylIgqgrhaUdy08i5b83EJrhZxdZyU4z/Bm0vTSTKC4F7Uh+tKW9cvVeputrrVDX
h5783wBqiO08OzBgQ4u5D2CCiMTMO6yr6/97WBpiigJq0nP70mRaTrwNiWhjYggX
xHu/69fZvobOV9+x9tIOc1LlMYpAjqg4Yj7+0+NWZIKSc1Aq10zMeGbK0UiFtz8C
7rz73LfIxbb56GISrARFOgGy5fAWkSENh2Aw6a0DQgPop6nmu3ZkHXvXC9TsRZG3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org