Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/h2enH-gjRx0p4bOppAycpSF-UgM.roa
File: h2enH-gjRx0p4bOppAycpSF-UgM.roa (raw, json)
Hash identifier: dLXtWqXylh+rc3v9c+725mT1TLegxR7OGXIzxsL3iTA=
Subject key identifier: 87:67:A7:1F:E8:23:47:1D:29:E1:B3:A9:A4:0C:9C:A5:21:7E:52:03
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: A0
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/h2enH-gjRx0p4bOppAycpSF-UgM.roa
Signing time: Tue 01 Nov 2022 01:28:06 +0000
ROA not before: Tue 01 Nov 2022 01:28:06 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 8220
IP address blocks: 27.110.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Nov 1 01:28:06 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=8767A71FE823471D29E1B3A9A40C9CA5217E5203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:e6:4b:a6:39:77:10:23:96:b1:6b:86:cf:
41:b4:01:dc:1a:20:00:bf:d3:06:8c:ab:71:c5:4b:
ee:5b:13:16:b2:09:9e:92:56:d2:69:81:55:e7:93:
01:93:48:4b:5e:8c:65:16:b9:36:d6:a0:6e:90:46:
9c:6c:37:42:80:36:44:45:ff:36:3d:33:4b:1b:69:
c1:17:4d:06:02:0c:29:a7:bd:c4:e6:12:f5:4c:ff:
0b:36:a8:a8:f7:6f:7a:36:e6:c4:7a:5b:ed:ed:2a:
45:88:61:14:93:67:50:6e:77:26:2b:51:63:9c:c7:
db:bc:cc:21:6c:ef:5a:65:2c:70:2c:a5:b9:f7:61:
9a:21:78:1d:d0:2e:1e:77:9a:dc:0d:4b:ce:6a:e4:
84:90:09:7d:2c:2b:90:6b:ab:76:c0:08:4e:63:4d:
dc:e3:0f:70:c2:ec:cb:90:21:5c:a0:ac:4e:ae:5c:
d9:ef:17:2b:43:04:1b:bf:55:bd:8e:41:2c:d9:bf:
4e:51:6a:b0:5d:5b:11:7c:12:3f:17:14:d7:d1:29:
53:14:14:9d:e5:d0:c7:20:3d:cb:ed:88:17:cc:01:
d0:b7:86:da:0d:bf:20:a7:e6:12:57:c3:12:44:89:
1e:5d:5e:f8:d2:8e:86:57:d0:aa:e3:61:a8:64:50:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:A7:1F:E8:23:47:1D:29:E1:B3:A9:A4:0C:9C:A5:21:7E:52:03
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/h2enH-gjRx0p4bOppAycpSF-UgM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.24.0/21
Signature Algorithm: sha256WithRSAEncryption
09:0e:a3:ef:ef:e9:92:88:f1:f4:36:3d:3c:05:27:50:ef:5a:
93:5b:0c:ce:a9:d0:84:49:17:d4:ac:04:f4:10:69:dc:73:ee:
81:fc:6a:43:cc:66:b6:d8:28:c8:2c:c0:94:18:26:85:da:75:
8a:34:92:fc:6d:d1:ae:64:cf:3f:41:87:ff:59:9e:08:ef:6f:
cf:8b:49:bd:30:f6:4b:60:2c:e6:6b:19:eb:4e:87:b7:9f:59:
c1:f7:58:e1:73:77:8e:67:26:21:a6:bf:53:f0:c9:53:dd:c5:
56:3c:d3:cd:67:10:4a:41:f1:c7:49:04:4d:e6:8d:a8:d8:d4:
bc:72:c1:b5:e9:5b:62:ff:58:7b:0d:77:b5:6c:c8:26:09:5d:
cd:c7:dd:fe:08:46:ef:86:f6:3e:42:db:83:a6:cd:d8:95:28:
b8:18:b4:c8:a7:30:07:dd:b7:64:2f:8f:d3:cd:97:97:21:f8:
f6:c6:1e:5b:d6:24:f9:2a:5a:91:96:e5:d0:7c:db:09:8b:3a:
5a:96:2f:44:a1:cf:13:fb:8a:8a:70:ab:95:0a:ff:2f:71:f4:
26:77:e9:4e:a1:fe:86:3f:55:9c:c8:6d:a4:bb:75:22:43:40:
33:a5:1a:60:27:b9:8d:be:d2:5d:c7:e4:fe:d2:eb:b4:28:fa:
38:28:95:11
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMjExMDEw
MTI4MDZaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3NjdBNzFGRTgyMzQ3
MUQyOUUxQjNBOUE0MEM5Q0E1MjE3RTUyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOp+ZLpjl3ECOWsWuGz0G0AdwaIAC/0waMq3HFS+5bExayCZ6S
VtJpgVXnkwGTSEtejGUWuTbWoG6QRpxsN0KANkRF/zY9M0sbacEXTQYCDCmnvcTm
EvVM/ws2qKj3b3o25sR6W+3tKkWIYRSTZ1BudyYrUWOcx9u8zCFs71plLHAspbn3
YZoheB3QLh53mtwNS85q5ISQCX0sK5Brq3bACE5jTdzjD3DC7MuQIVygrE6uXNnv
FytDBBu/Vb2OQSzZv05RarBdWxF8Ej8XFNfRKVMUFJ3l0McgPcvtiBfMAdC3htoN
vyCn5hJXwxJEiR5dXvjSjoZX0KrjYahkUMCRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUh2enH+gjRx0p4bOppAycpSF+UgMwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L2gyZW5ILWdqUngwcDRiT3BwQXljcFNGLVVnTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMbbhgwDQYJKoZIhvcNAQELBQADggEBAAkOo+/v6ZKI8fQ2PTwFJ1DvWpNb
DM6p0IRJF9SsBPQQadxz7oH8akPMZrbYKMgswJQYJoXadYo0kvxt0a5kzz9Bh/9Z
ngjvb8+LSb0w9ktgLOZrGetOh7efWcH3WOFzd45nJiGmv1PwyVPdxVY8081nEEpB
8cdJBE3mjajY1LxywbXpW2L/WHsNd7VsyCYJXc3H3f4IRu+G9j5C24OmzdiVKLgY
tMinMAfdt2Qvj9PNl5ch+PbGHlvWJPkqWpGW5dB82wmLOlqWL0ShzxP7iopwq5UK
/y9x9CZ36U6h/oY/VZzIbaS7dSJDQDOlGmAnuY2+0l3H5P7S67Qo+jgolRE=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:05 2025 by rpki-client