Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7HfCoiL6xzZGXml5y3xOURud4B0.roa
File: 7HfCoiL6xzZGXml5y3xOURud4B0.roa (raw, json)
Hash identifier: tZGKSt49xOdpiq2dmQOSbB6WnjRCQByYCCaUoAW3wzI=
Subject key identifier: EC:77:C2:A2:22:FA:C7:36:46:5E:69:79:CB:7C:4E:51:1B:9D:E0:1D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 010C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7HfCoiL6xzZGXml5y3xOURud4B0.roa
Signing time: Tue 30 May 2023 16:12:34 +0000
ROA not before: Tue 30 May 2023 16:12:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:fa00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:12:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=EC77C2A222FAC736465E6979CB7C4E511B9DE01D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:b7:33:c1:11:11:be:3c:7a:d3:fa:d4:21:
ca:68:35:e2:6b:83:4d:11:1e:c1:a0:fa:2f:e4:bf:
72:20:61:25:82:e3:d5:20:e0:43:b0:6c:83:6c:f9:
f6:83:d6:c4:a4:32:38:8d:f0:6d:c7:e7:91:5d:cc:
56:1c:61:48:5c:c8:be:43:32:5e:c6:b5:43:3a:0b:
aa:ef:36:03:2d:1c:04:10:af:e8:62:7c:86:ba:64:
a9:2f:99:cf:b2:ed:b3:ab:84:08:a7:f7:e1:57:9b:
49:c2:be:b7:0e:89:07:af:7c:16:ba:20:ed:38:2b:
c5:9a:c6:f4:3a:c7:7e:8e:29:fd:9f:e0:92:b4:ae:
9b:ad:d3:38:29:c9:30:4f:78:6b:98:39:be:b8:19:
01:a3:6b:ab:27:15:0b:bf:fd:ec:8f:45:83:75:1c:
a2:59:a1:9d:46:4d:ca:e1:7a:24:17:ab:dc:78:8d:
41:ab:43:94:b2:51:02:ac:68:3d:77:fc:1a:46:e2:
7d:ad:cf:dc:c7:99:0e:37:c4:c9:22:65:aa:6a:54:
87:3d:89:2c:f1:3d:63:01:e5:e6:2c:44:ee:f0:eb:
ba:7f:fb:2a:02:24:11:ce:43:e5:0b:b0:5b:83:b4:
c1:de:6a:8c:dc:40:17:ee:e3:3d:cd:97:a8:53:67:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:C2:A2:22:FA:C7:36:46:5E:69:79:CB:7C:4E:51:1B:9D:E0:1D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7HfCoiL6xzZGXml5y3xOURud4B0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
19:98:df:ca:c9:f1:a5:73:32:10:56:7e:91:fe:ce:1e:cd:7c:
2b:76:5a:08:38:01:24:b1:a3:f4:0e:e3:b8:d0:3e:6e:02:f7:
2c:8a:4e:ac:a6:25:c4:d1:0f:63:a7:09:3d:94:e7:5b:cb:19:
02:72:01:87:ca:28:88:37:d9:c3:bd:c9:02:7e:75:39:71:e9:
df:78:06:7e:48:57:30:cb:79:58:01:fd:bd:7d:13:fa:51:b9:
5e:7c:74:6c:3f:9b:c7:e3:ff:de:fa:9a:b0:8a:f0:1e:40:06:
70:a9:61:a7:2d:b4:ed:4e:b3:16:3d:82:64:24:8c:62:52:fa:
92:08:cf:dc:e5:2e:4b:5e:f5:de:da:7c:73:58:73:b4:bc:de:
41:9a:1b:ba:4e:ca:cc:7e:7e:ec:59:60:f1:f7:49:ef:8e:2a:
df:f1:b3:9a:a5:f2:64:e8:db:85:5e:88:43:24:c6:77:48:26:
7a:a9:e7:49:99:d8:c0:92:cf:6d:8d:1f:cf:3b:53:3d:f0:ed:
71:c6:69:d9:35:66:c0:c9:74:8b:76:3c:14:96:fa:1e:54:7f:
be:3f:b8:c0:f8:7a:56:97:3d:87:a7:a8:10:c5:22:47:83:51:
51:45:c3:1b:b3:da:94:40:d8:d0:0b:f0:9c:cb:32:24:60:8f:
22:f9:aa:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVDNzdDMkEyMjJGQUM3
MzY0NjVFNjk3OUNCN0M0RTUxMUI5REUwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCztbczwRERvjx60/rUIcpoNeJrg00RHsGg+i/kv3IgYSWC49Ug
4EOwbINs+faD1sSkMjiN8G3H55FdzFYcYUhcyL5DMl7GtUM6C6rvNgMtHAQQr+hi
fIa6ZKkvmc+y7bOrhAin9+FXm0nCvrcOiQevfBa6IO04K8WaxvQ6x36OKf2f4JK0
rput0zgpyTBPeGuYOb64GQGja6snFQu//eyPRYN1HKJZoZ1GTcrheiQXq9x4jUGr
Q5SyUQKsaD13/BpG4n2tz9zHmQ43xMkiZapqVIc9iSzxPWMB5eYsRO7w67p/+yoC
JBHOQ+ULsFuDtMHeaozcQBfu4z3Nl6hTZyHnAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU7HfCoiL6xzZGXml5y3xOURud4B0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS83SGZDb2lMNnh6WkdYbWw1eTN4T1VSdWQ0QjAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/owDQYJKoZIhvcNAQELBQADggEBABmY38rJ8aVzMhBWfpH+
zh7NfCt2Wgg4ASSxo/QO47jQPm4C9yyKTqymJcTRD2OnCT2U51vLGQJyAYfKKIg3
2cO9yQJ+dTlx6d94Bn5IVzDLeVgB/b19E/pRuV58dGw/m8fj/976mrCK8B5ABnCp
YacttO1OsxY9gmQkjGJS+pIIz9zlLkte9d7afHNYc7S83kGaG7pOysx+fuxZYPH3
Se+OKt/xs5ql8mTo24VeiEMkxndIJnqp50mZ2MCSz22NH887Uz3w7XHGadk1ZsDJ
dIt2PBSW+h5Uf74/uMD4elaXPYenqBDFIkeDUVFFwxuz2pRA2NAL8JzLMiRgjyL5
qt8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org