Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/5FHyNGYZ8WsRLQ0Z21gJQFTsZco.roa
File: 5FHyNGYZ8WsRLQ0Z21gJQFTsZco.roa (raw, json)
Hash identifier: a7AzlxExZDZxe6OaWL6E7/68UQKRbEhRI+BldF7opqg=
Subject key identifier: E4:51:F2:34:66:19:F1:6B:11:2D:0D:19:DB:58:09:40:54:EC:65:CA
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 24
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/5FHyNGYZ8WsRLQ0Z21gJQFTsZco.roa
Signing time: Fri 29 Sep 2023 06:36:52 +0000
ROA not before: Fri 29 Sep 2023 06:36:52 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 103.29.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:52 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=E451F2346619F16B112D0D19DB58094054EC65CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:26:b5:83:ce:67:38:b4:27:fd:e5:bd:9d:
3d:a8:bb:49:4d:78:a6:c0:34:1f:3d:ff:80:11:80:
2f:2b:aa:d6:9d:9c:88:58:2c:da:ca:58:57:3c:d3:
3f:e2:f7:26:f9:91:20:64:ec:ca:9a:82:db:b8:3c:
a0:eb:e2:bb:7d:b9:c4:74:50:fc:20:db:5f:c3:b3:
99:2f:52:ea:90:60:63:58:c0:f3:6c:72:7b:ff:c2:
b1:16:01:c9:80:f8:dc:2e:10:0c:7b:5e:e7:4a:d3:
4b:f2:29:cd:d3:38:27:80:56:de:e0:d3:a8:df:fe:
38:97:a9:a9:0e:36:d0:3c:d8:ab:a3:5f:c3:6c:2f:
c1:85:d0:42:f7:05:68:3a:44:09:9a:61:6d:78:19:
53:8e:2d:a6:b0:a8:78:4a:eb:8c:bc:c2:a4:43:2e:
71:b3:6e:30:17:62:1b:2f:3b:c6:77:ba:ae:d2:d2:
b6:35:c2:c8:8e:0c:3e:6d:8d:56:07:92:f0:72:7c:
f5:82:9c:9a:2c:9c:30:52:30:a0:9d:e1:61:a0:97:
1c:fb:d0:21:65:a4:b6:1c:16:90:fa:86:44:01:64:
93:ae:0d:d3:1a:4c:0a:b5:ed:f4:a6:e0:4d:a6:be:
90:2c:f4:e7:43:36:e1:1b:02:d9:93:8d:2b:ca:a1:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:F2:34:66:19:F1:6B:11:2D:0D:19:DB:58:09:40:54:EC:65:CA
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/5FHyNGYZ8WsRLQ0Z21gJQFTsZco.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.48.0/22
Signature Algorithm: sha256WithRSAEncryption
13:d0:5a:ef:55:be:26:94:d2:67:b3:c6:c4:4a:9e:cf:e4:1d:
5c:9c:be:1d:57:99:ec:f0:0d:be:6b:19:fa:fb:88:29:fa:d0:
2c:95:12:1c:3b:7a:91:d0:93:e8:09:bc:95:47:59:62:d8:d5:
04:24:b3:67:13:d4:1e:2b:7d:ea:5d:0c:9c:24:1f:58:a0:dc:
38:9b:10:42:44:b7:bb:51:61:47:8f:0f:6c:de:08:cc:89:9f:
6e:96:13:37:d7:a5:7e:9e:52:04:7f:29:5a:c5:f7:09:eb:4a:
6a:be:81:21:84:59:fa:0f:56:a8:aa:94:da:27:3b:83:61:24:
52:6b:37:07:b0:60:69:c8:bb:81:f1:07:7a:0f:47:a7:39:4d:
c5:4a:c9:69:a8:12:4d:9f:eb:03:bb:87:ba:58:1f:99:8d:c7:
ae:03:0c:cd:ac:47:91:a1:ec:03:ae:5e:ce:75:c1:8b:bb:e8:
e6:6e:ef:09:f9:5b:e2:b0:6f:25:a6:3f:eb:17:71:22:e9:68:
fd:ea:d8:62:66:ee:80:bd:32:18:e7:b0:3c:a4:d9:d3:f1:14:
f5:31:9a:28:f8:8a:68:5e:2e:e1:33:d4:e5:72:8c:68:11:a7:
8a:c5:53:10:e7:4f:61:82:95:89:26:97:91:54:94:81:62:66:
cb:10:6e:51
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1MloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRTQ1MUYyMzQ2NjE5RjE2
QjExMkQwRDE5REI1ODA5NDA1NEVDNjVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCjJrWDzmc4tCf95b2dPai7SU14psA0Hz3/gBGALyuq1p2ciFgs
2spYVzzTP+L3JvmRIGTsypqC27g8oOviu325xHRQ/CDbX8OzmS9S6pBgY1jA82xy
e//CsRYByYD43C4QDHte50rTS/IpzdM4J4BW3uDTqN/+OJepqQ420DzYq6Nfw2wv
wYXQQvcFaDpECZphbXgZU44tprCoeErrjLzCpEMucbNuMBdiGy87xne6rtLStjXC
yI4MPm2NVgeS8HJ89YKcmiycMFIwoJ3hYaCXHPvQIWWkthwWkPqGRAFkk64N0xpM
CrXt9KbgTaa+kCz050M24RsC2ZONK8qh56ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTkUfI0ZhnxaxEtDRnbWAlAVOxlyjAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvNUZIeU5HWVo4V3NSTFEwWjIxZ0pRRlRzWmNvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcdMDANBgkqhkiG9w0BAQsFAAOCAQEAE9Ba71W+JpTSZ7PGxEqez+QdXJy+
HVeZ7PANvmsZ+vuIKfrQLJUSHDt6kdCT6Am8lUdZYtjVBCSzZxPUHit96l0MnCQf
WKDcOJsQQkS3u1FhR48PbN4IzImfbpYTN9elfp5SBH8pWsX3CetKar6BIYRZ+g9W
qKqU2ic7g2EkUms3B7Bgaci7gfEHeg9HpzlNxUrJaagSTZ/rA7uHulgfmY3HrgMM
zaxHkaHsA65eznXBi7vo5m7vCflb4rBvJaY/6xdxIulo/erYYmbugL0yGOewPKTZ
0/EU9TGaKPiKaF4u4TPU5XKMaBGnisVTEOdPYYKViSaXkVSUgWJmyxBuUQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:11 2025 by rpki-client