Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KIXqPfhNmNxUT1tNkHYVLjZJ7Ac.roa
File: KIXqPfhNmNxUT1tNkHYVLjZJ7Ac.roa (raw, json)
Hash identifier: ss41PuHCxpidTysDZJBBWgjgoNoOp7K39FOGI3nQhN0=
Subject key identifier: 28:85:EA:3D:F8:4D:98:DC:54:4F:5B:4D:90:76:15:2E:36:49:EC:07
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KIXqPfhNmNxUT1tNkHYVLjZJ7Ac.roa
Signing time: Wed 24 May 2023 16:37:10 +0000
ROA not before: Wed 24 May 2023 16:37:10 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:37:10 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2885EA3DF84D98DC544F5B4D9076152E3649EC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:b7:00:97:b7:cb:91:07:85:34:43:94:10:
3e:96:cf:81:87:9d:04:c1:55:7c:69:29:2e:4b:93:
21:1d:4a:2a:30:ad:22:b9:c5:e7:e6:80:52:de:fd:
d6:27:02:f1:28:eb:33:69:bf:b4:9b:d7:34:1a:b5:
61:cf:c3:05:6d:30:4c:be:6e:f3:38:8d:22:09:0a:
dd:24:73:91:ae:31:9a:20:e0:be:72:65:f6:8c:6f:
67:7b:c8:95:52:7f:fb:cd:ea:77:91:47:e9:f1:d0:
99:e6:35:50:be:52:3b:10:a2:8f:82:91:60:3b:6e:
38:4b:90:50:62:71:26:f7:9d:22:09:55:5f:76:44:
be:2f:d3:f9:9e:df:01:60:9b:5f:48:83:c2:00:4a:
4e:38:7f:b1:05:ee:df:3e:91:a0:01:f6:0c:3b:87:
52:79:64:14:28:24:cf:45:d7:63:99:44:7e:1b:7f:
f1:b4:33:19:21:b0:a6:28:05:f0:02:23:4e:74:05:
0d:96:10:04:64:a4:08:83:7e:f0:3e:a1:5c:f1:ed:
96:cf:8a:4f:5c:9e:8d:c6:33:22:88:6d:be:22:9a:
cf:78:0b:ef:41:77:11:0e:d6:db:ac:49:fd:cc:a0:
1f:74:4a:3f:6a:03:3c:70:b4:13:51:37:40:1b:1c:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:85:EA:3D:F8:4D:98:DC:54:4F:5B:4D:90:76:15:2E:36:49:EC:07
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KIXqPfhNmNxUT1tNkHYVLjZJ7Ac.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.96.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:ef:d3:52:81:74:b5:f5:97:59:ed:9c:93:31:2e:8f:8b:be:
7e:af:87:4e:6d:55:ed:71:bf:9b:23:3a:18:3e:27:05:19:a3:
cb:b6:1c:29:0d:0d:40:1a:a8:21:d2:36:73:8f:e6:e7:f3:8e:
c9:38:ab:64:31:17:15:bc:04:4e:5d:41:8f:91:4f:1f:83:72:
76:d8:bb:4d:61:ec:6f:d7:4b:69:ef:63:9c:c8:ca:14:c7:1e:
90:c7:bb:80:d2:b0:05:56:ad:1d:93:8e:15:50:c5:ec:af:0f:
68:29:33:f3:d2:cf:81:a8:e7:9b:35:d7:a6:21:90:17:2f:b6:
70:47:86:23:4f:a2:df:e7:e4:23:f6:46:5a:52:b1:a1:e1:38:
d5:ea:de:80:2d:a9:50:64:0d:98:ac:06:d2:d1:15:0b:4c:c2:
01:46:1b:4b:83:55:1b:d9:46:e9:64:cc:64:ab:98:e2:a6:4a:
b5:a3:7d:58:fe:aa:3c:5a:47:78:88:8e:f2:60:6e:11:77:16:
a6:86:5d:59:53:e8:7b:15:f6:88:ee:ab:5d:aa:fd:0d:48:4b:
4d:9d:67:4c:a4:f0:43:68:ef:6b:40:89:57:70:b1:76:4d:4e:
64:12:02:6a:04:c0:44:91:c3:9f:8e:3f:1f:59:9a:c2:17:4e:
19:3b:6d:f3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjM3MTBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI4ODVFQTNERjg0RDk4
REM1NDRGNUI0RDkwNzYxNTJFMzY0OUVDMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIobcAl7fLkQeFNEOUED6Wz4GHnQTBVXxpKS5LkyEdSiowrSK5
xefmgFLe/dYnAvEo6zNpv7Sb1zQatWHPwwVtMEy+bvM4jSIJCt0kc5GuMZog4L5y
ZfaMb2d7yJVSf/vN6neRR+nx0JnmNVC+UjsQoo+CkWA7bjhLkFBicSb3nSIJVV92
RL4v0/me3wFgm19Ig8IASk44f7EF7t8+kaAB9gw7h1J5ZBQoJM9F12OZRH4bf/G0
MxkhsKYoBfACI050BQ2WEARkpAiDfvA+oVzx7ZbPik9cno3GMyKIbb4ims94C+9B
dxEO1tusSf3MoB90Sj9qAzxwtBNRN0AbHCURAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKIXqPfhNmNxUT1tNkHYVLjZJ7AcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0tJWHFQZmhObU54VVQxdE5rSFlWTGpaSjdBYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBT2AwDQYJKoZIhvcNAQELBQADggEBALnv01KBdLX1l1ntnJMxLo+Lvn6v
h05tVe1xv5sjOhg+JwUZo8u2HCkNDUAaqCHSNnOP5ufzjsk4q2QxFxW8BE5dQY+R
Tx+DcnbYu01h7G/XS2nvY5zIyhTHHpDHu4DSsAVWrR2TjhVQxeyvD2gpM/PSz4Go
55s116YhkBcvtnBHhiNPot/n5CP2RlpSsaHhONXq3oAtqVBkDZisBtLRFQtMwgFG
G0uDVRvZRulkzGSrmOKmSrWjfVj+qjxaR3iIjvJgbhF3FqaGXVlT6HsV9ojuq12q
/Q1IS02dZ0yk8ENo72tAiVdwsXZNTmQSAmoEwESRw5+OPx9ZmsIXThk7bfM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:49 2025 by rpki-client