Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa
File: 7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa (raw, json)
Hash identifier: qx7XqSjStnbp4GJmlDfsbpSFaWQ4q+EDHlJGrRRlKRE=
Subject key identifier: EC:68:AA:5D:F4:C6:94:02:A2:0A:91:69:5C:4D:A5:A9:87:96:01:9D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0208
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa
Signing time: Tue 30 May 2023 16:29:28 +0000
ROA not before: Tue 30 May 2023 16:29:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 183.73.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:29:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=EC68AA5DF4C69402A20A91695C4DA5A98796019D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:bf:52:a9:05:dd:0c:eb:18:5d:93:ad:88:
fa:4a:04:78:24:62:6d:7a:f9:df:ec:8f:aa:01:b1:
26:10:f6:2f:b0:89:9d:50:32:12:09:c3:01:74:d9:
2e:31:b9:43:88:7f:5e:86:ed:82:fd:e9:bd:29:7b:
a0:40:5a:54:f2:c6:c2:95:d1:3e:a2:67:c5:86:c8:
48:45:a3:75:90:62:ca:51:b4:59:0c:11:f9:12:e2:
79:6d:db:d1:ef:64:1e:29:32:49:d5:c3:07:ef:da:
78:37:29:e8:fc:d6:91:90:1e:d9:6f:0b:ec:31:2d:
a0:9e:a3:c3:d7:1c:44:b9:7a:7d:8b:b3:80:fa:97:
ef:53:ef:e7:a4:84:34:51:19:60:d4:ac:64:1a:9f:
6d:32:a1:bf:db:44:88:ad:1b:31:5e:51:ed:a1:b2:
29:2d:be:95:6e:d8:b5:5f:93:bc:96:e0:c1:7d:62:
f5:90:76:85:67:0e:2d:d3:b9:70:67:63:b5:19:fe:
55:3d:43:bb:ad:9f:10:7f:9b:cc:42:cc:d1:36:7c:
fa:9d:7f:00:8b:b5:ff:84:50:70:0c:34:83:22:30:
da:34:4f:4b:1b:20:25:30:b9:87:6f:51:16:24:14:
76:36:a1:b8:7c:90:39:a2:85:d4:3a:6e:f3:55:98:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:AA:5D:F4:C6:94:02:A2:0A:91:69:5C:4D:A5:A9:87:96:01:9D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7GiqXfTGlAKiCpFpXE2lqYeWAZ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.73.0.0/20
Signature Algorithm: sha256WithRSAEncryption
96:83:ad:1e:32:ae:c5:e2:9f:f9:10:4c:78:78:37:26:82:59:
a2:ee:8c:3d:b1:90:df:e2:f7:fe:38:20:26:53:42:6f:f5:c7:
09:44:9d:ee:a8:a8:90:92:05:08:a4:ab:e5:85:94:0d:12:2d:
27:fc:a3:64:10:33:84:7d:dd:6c:62:40:83:01:58:32:56:a7:
fa:b0:e0:49:ba:b9:0b:2d:3b:82:95:8e:d7:76:0d:6b:7a:f9:
f1:97:f7:0c:d0:32:96:02:0d:38:19:40:14:b1:6c:61:37:74:
9c:dd:c1:b0:96:9c:ab:89:4c:7d:49:46:5c:11:cf:79:f2:c6:
c8:68:3d:5f:ea:33:1f:97:07:a3:e3:1a:ee:06:1e:7d:a8:25:
74:b2:6f:f8:59:d7:9e:24:9f:43:78:29:18:3f:50:bb:ec:57:
d1:a4:7a:ca:0d:a1:53:9b:79:4b:14:35:ac:b0:31:be:44:c6:
42:9c:ee:38:8b:eb:75:84:72:1e:a2:2d:12:78:e4:38:05:da:
26:9b:10:92:ca:0c:ff:0a:1a:01:4a:44:89:79:1f:4b:ca:f8:
a6:fd:20:3e:99:a2:f1:b7:71:05:3c:82:d5:f0:a6:15:e3:d5:
60:a0:9a:f8:60:8f:7a:eb:22:df:0f:96:1d:c8:00:64:84:30:
8a:c8:b9:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjI5MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVDNjhBQTVERjRDNjk0
MDJBMjBBOTE2OTVDNERBNUE5ODc5NjAxOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkXL9SqQXdDOsYXZOtiPpKBHgkYm16+d/sj6oBsSYQ9i+wiZ1Q
MhIJwwF02S4xuUOIf16G7YL96b0pe6BAWlTyxsKV0T6iZ8WGyEhFo3WQYspRtFkM
EfkS4nlt29HvZB4pMknVwwfv2ng3Kej81pGQHtlvC+wxLaCeo8PXHES5en2Ls4D6
l+9T7+ekhDRRGWDUrGQan20yob/bRIitGzFeUe2hsiktvpVu2LVfk7yW4MF9YvWQ
doVnDi3TuXBnY7UZ/lU9Q7utnxB/m8xCzNE2fPqdfwCLtf+EUHAMNIMiMNo0T0sb
ICUwuYdvURYkFHY2obh8kDmihdQ6bvNVmJYJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7GiqXfTGlAKiCpFpXE2lqYeWAZ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzdHaXFYZlRHbEFLaUNwRnBYRTJscVllV0FaMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS3SQAwDQYJKoZIhvcNAQELBQADggEBAJaDrR4yrsXin/kQTHh4NyaCWaLu
jD2xkN/i9/44ICZTQm/1xwlEne6oqJCSBQikq+WFlA0SLSf8o2QQM4R93WxiQIMB
WDJWp/qw4Em6uQstO4KVjtd2DWt6+fGX9wzQMpYCDTgZQBSxbGE3dJzdwbCWnKuJ
TH1JRlwRz3nyxshoPV/qMx+XB6PjGu4GHn2oJXSyb/hZ154kn0N4KRg/ULvsV9Gk
esoNoVObeUsUNaywMb5ExkKc7jiL63WEch6iLRJ45DgF2iabEJLKDP8KGgFKRIl5
H0vK+Kb9ID6ZovG3cQU8gtXwphXj1WCgmvhgj3rrIt8Plh3IAGSEMIrIuT8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org