Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa
File: rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa (raw, json)
Hash identifier: JYTJnqAcdVfp8hgJ+kJFLZANitg3KUuT++L8Wr0YTcs=
Subject key identifier: AD:B3:E7:2E:F3:A6:E5:D4:C1:E8:D2:4E:53:F8:8D:20:47:7C:13:B1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0538
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa
Signing time: Thu 27 Jul 2023 16:54:16 +0000
ROA not before: Thu 27 Jul 2023 16:54:16 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.67.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:16 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=ADB3E72EF3A6E5D4C1E8D24E53F88D20477C13B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:70:68:e9:fb:a7:7a:e2:d5:e8:5b:ce:15:
68:bc:0d:fd:1b:2e:9d:de:43:89:e7:be:1d:5a:4a:
9b:2e:36:20:ae:6f:be:5c:57:ed:f4:35:c2:28:2f:
e8:53:92:5e:e6:31:b7:aa:78:a8:6f:b1:c1:a4:da:
b4:f6:40:42:98:7c:75:47:94:08:65:6a:62:a6:7e:
45:50:10:86:79:b5:cf:b3:f7:41:01:de:d1:fb:af:
19:c7:a4:b2:d8:a1:d2:37:7c:e6:22:5b:1a:a0:d3:
41:98:50:3e:d2:ec:9f:3f:bf:68:ac:14:66:fb:37:
25:7c:05:9f:8f:27:0e:5f:92:99:3a:bb:af:65:7c:
55:cb:11:d0:2f:31:41:be:fb:7a:32:c1:32:aa:65:
04:23:12:93:72:d6:d0:a2:84:d3:63:92:7b:5c:74:
ec:47:4d:60:e0:a1:d9:98:11:da:ab:48:4e:a5:fa:
51:9f:b5:1c:53:f2:04:a0:b9:37:91:7a:20:5b:dc:
9c:7d:86:72:14:11:12:d6:e1:88:f7:22:7d:c1:d6:
7b:40:1f:8a:d8:27:ec:ef:76:f8:99:14:5e:b4:ac:
5a:fb:35:b8:7d:5a:e0:c1:81:4a:37:39:f5:3d:a4:
99:56:6a:97:24:50:7c:f2:13:f6:0e:a4:da:09:96:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:E7:2E:F3:A6:E5:D4:C1:E8:D2:4E:53:F8:8D:20:47:7C:13:B1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rbPnLvOm5dTB6NJOU_iNIEd8E7E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
e2:20:54:2c:43:3c:49:81:49:bc:11:8b:b7:a7:a3:95:f3:20:
5f:9a:60:ea:96:3f:18:e6:92:13:6c:c1:77:87:b5:ea:12:20:
8b:37:9c:75:2d:42:8d:7e:34:e3:57:a8:ec:86:c8:64:e3:a8:
df:a3:76:b3:81:a8:27:69:99:18:a1:36:94:80:db:fe:84:4f:
9d:fb:ca:4d:c6:ff:ed:09:38:4d:1c:a7:ee:4f:0a:cf:1e:16:
68:99:22:18:d2:01:85:72:70:f1:c5:ae:7a:4b:5b:55:fb:6e:
b6:75:24:a2:f5:8a:bc:22:0b:f3:63:ee:47:4b:b6:0e:42:4e:
b2:60:0e:58:61:99:d3:48:7c:fa:d7:06:fc:28:f9:dd:db:f4:
d9:cf:6d:dc:19:fe:a8:b3:d7:9d:18:1f:25:af:04:0f:a8:6a:
5c:84:8f:29:1e:b7:94:ac:f7:30:d7:8e:7a:c0:68:75:ee:91:
a5:fc:e6:46:b5:f9:7d:9f:05:d5:10:ff:15:e6:9f:50:a4:ed:
25:63:2f:06:57:0b:6b:6c:f5:90:b9:b1:c7:ad:36:bd:cf:4c:
3a:41:e1:22:3a:f1:fb:ec:4e:a3:77:01:7f:66:24:8d:b6:30:
6c:51:39:b4:06:32:bf:f4:35:18:ad:c0:a8:74:72:d0:40:1a:
2b:26:1e:d3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU0MTZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFEQjNFNzJFRjNBNkU1
RDRDMUU4RDI0RTUzRjg4RDIwNDc3QzEzQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgb3Bo6funeuLV6FvOFWi8Df0bLp3eQ4nnvh1aSpsuNiCub75c
V+30NcIoL+hTkl7mMbeqeKhvscGk2rT2QEKYfHVHlAhlamKmfkVQEIZ5tc+z90EB
3tH7rxnHpLLYodI3fOYiWxqg00GYUD7S7J8/v2isFGb7NyV8BZ+PJw5fkpk6u69l
fFXLEdAvMUG++3oywTKqZQQjEpNy1tCihNNjkntcdOxHTWDgodmYEdqrSE6l+lGf
tRxT8gSguTeReiBb3Jx9hnIUERLW4Yj3In3B1ntAH4rYJ+zvdviZFF60rFr7Nbh9
WuDBgUo3OfU9pJlWapckUHzyE/YOpNoJlp3vAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrbPnLvOm5dTB6NJOU/iNIEd8E7EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JiUG5Mdk9tNWRUQjZOSk9VX2lOSUVkOEU3RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQBQ9AwDQYJKoZIhvcNAQELBQADggEBAOIgVCxDPEmBSbwRi7eno5XzIF+a
YOqWPxjmkhNswXeHteoSIIs3nHUtQo1+NONXqOyGyGTjqN+jdrOBqCdpmRihNpSA
2/6ET537yk3G/+0JOE0cp+5PCs8eFmiZIhjSAYVycPHFrnpLW1X7brZ1JKL1irwi
C/Nj7kdLtg5CTrJgDlhhmdNIfPrXBvwo+d3b9NnPbdwZ/qiz150YHyWvBA+oalyE
jyket5Ss9zDXjnrAaHXukaX85ka1+X2fBdUQ/xXmn1Ck7SVjLwZXC2ts9ZC5scet
Nr3PTDpB4SI68fvsTqN3AX9mJI22MGxRObQGMr/0NRitwKh0ctBAGismHtM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:18 2025 by rpki-client