Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa
File: thaFG05RDXH9j_VgTx7oiBdDaC0.roa (raw, json)
Hash identifier: Fjksf0Nk5vLsvVfl+23/i/W3FU76g/IA7W6qZzIOm6I=
Subject key identifier: B6:16:85:1B:4E:51:0D:71:FD:8F:F5:60:4F:1E:E8:88:17:43:68:2D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0450
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa
Signing time: Thu 27 Jul 2023 16:43:14 +0000
ROA not before: Thu 27 Jul 2023 16:43:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:43:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=B616851B4E510D71FD8FF5604F1EE8881743682D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:cf:2b:52:21:2e:61:ad:7e:42:5c:73:28:
59:80:1b:4b:c0:33:e0:81:1b:53:77:39:1a:08:fb:
90:c0:0c:81:23:96:18:23:b9:ad:ad:c6:c3:e0:4a:
c6:da:c5:5f:26:3d:01:b6:bc:0f:9d:67:60:6d:87:
bd:ee:11:3b:f4:0b:09:16:de:d4:0c:6c:c1:7c:30:
ad:13:33:78:23:3e:18:4f:be:81:78:f0:43:94:50:
be:f4:2e:8a:48:15:4d:7b:ad:a9:ad:5d:51:8a:48:
19:fb:a6:c1:52:56:7a:51:87:11:dd:28:b0:79:1a:
84:5e:91:8c:43:39:e3:ec:6d:42:42:bf:15:1e:07:
43:99:98:9d:ad:6b:bd:d1:60:43:93:66:a6:78:47:
64:ef:03:f4:67:b4:3b:8e:c5:be:79:e3:19:8c:2f:
dd:13:3a:f2:9d:2a:e2:34:01:08:db:b4:c2:27:98:
c2:26:02:d8:22:33:41:25:38:95:42:f9:4a:14:9d:
79:0d:53:fc:b7:7e:92:d1:c2:f5:63:8b:6c:9e:41:
ed:83:17:58:11:f9:20:50:ae:bd:52:8b:f2:30:3d:
8e:ea:b3:ca:a3:0c:af:dd:ca:35:20:1f:1b:b3:fd:
02:65:9b:ea:a9:4b:dd:fe:75:86:2b:3b:1d:80:e6:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:85:1B:4E:51:0D:71:FD:8F:F5:60:4F:1E:E8:88:17:43:68:2D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/thaFG05RDXH9j_VgTx7oiBdDaC0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.68.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f8:58:2b:87:a8:fd:7a:1c:6f:8b:e5:a0:79:e0:c7:28:c3:
00:77:87:37:ca:6f:23:e2:46:7b:49:3d:b7:5e:ad:8a:84:22:
8a:13:a6:b5:79:0c:3f:cb:5a:a0:f1:fe:54:cc:f5:a0:a6:d3:
63:4b:a9:fe:a1:6a:31:db:ca:26:2e:d6:7b:0a:17:d3:27:90:
a0:1e:d4:7a:ee:00:eb:22:84:49:22:c4:87:71:e5:76:97:88:
8b:ee:8b:33:33:b4:1d:a6:80:75:df:8d:71:bf:1c:34:67:cf:
d2:a0:97:f5:c5:b6:e8:f1:b6:53:02:14:d0:f8:44:ea:cd:3e:
31:c9:45:c6:eb:cd:7d:f7:49:98:45:bf:7b:85:9c:4e:00:73:
9d:d0:c7:a0:4b:69:67:de:1d:b0:8e:5a:be:90:79:a1:97:1b:
c7:8f:6f:00:0b:b8:68:61:cb:39:da:e4:a3:89:be:60:14:f5:
cc:94:d5:6a:25:02:ba:e7:e4:12:44:7d:e7:36:3c:32:a2:d6:
4d:12:2c:63:96:0f:fe:fa:0a:1f:ad:09:7a:07:89:d2:ec:ae:
12:72:9a:e8:16:1f:30:61:6f:bf:27:15:bf:6f:11:24:28:fd:
77:1f:f2:e1:17:cf:39:c1:57:f9:aa:8f:f8:24:aa:13:69:a2:
01:b3:b5:b6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQzMTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI2MTY4NTFCNEU1MTBE
NzFGRDhGRjU2MDRGMUVFODg4MTc0MzY4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6cM8rUiEuYa1+QlxzKFmAG0vAM+CBG1N3ORoI+5DADIEjlhgj
ua2txsPgSsbaxV8mPQG2vA+dZ2Bth73uETv0CwkW3tQMbMF8MK0TM3gjPhhPvoF4
8EOUUL70LopIFU17ramtXVGKSBn7psFSVnpRhxHdKLB5GoRekYxDOePsbUJCvxUe
B0OZmJ2ta73RYEOTZqZ4R2TvA/RntDuOxb554xmML90TOvKdKuI0AQjbtMInmMIm
AtgiM0ElOJVC+UoUnXkNU/y3fpLRwvVji2yeQe2DF1gR+SBQrr1Si/IwPY7qs8qj
DK/dyjUgHxuz/QJlm+qpS93+dYYrOx2A5tWXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUthaFG05RDXH9j/VgTx7oiBdDaC0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3RoYUZHMDVSRFhIOWpfVmdUeDdvaUJkRGFDMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBQkQwDQYJKoZIhvcNAQELBQADggEBAEb4WCuHqP16HG+L5aB54McowwB3
hzfKbyPiRntJPbderYqEIooTprV5DD/LWqDx/lTM9aCm02NLqf6hajHbyiYu1nsK
F9MnkKAe1HruAOsihEkixIdx5XaXiIvuizMztB2mgHXfjXG/HDRnz9Kgl/XFtujx
tlMCFND4ROrNPjHJRcbrzX33SZhFv3uFnE4Ac53Qx6BLaWfeHbCOWr6QeaGXG8eP
bwALuGhhyzna5KOJvmAU9cyU1WolArrn5BJEfec2PDKi1k0SLGOWD/76Ch+tCXoH
idLsrhJymugWHzBhb78nFb9vESQo/Xcf8uEXzznBV/mqj/gkqhNpogGztbY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client