Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/o3MSlSyM2BAEGghqwJj6ziFHNMo.roa
File: o3MSlSyM2BAEGghqwJj6ziFHNMo.roa (raw, json)
Hash identifier: IeFal56DoN1p6JyseNC+iFS7US3ZkOYNu5PEhCjdGX0=
Subject key identifier: A3:73:12:95:2C:8C:D8:10:04:1A:08:6A:C0:98:FA:CE:21:47:34:CA
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: D8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/o3MSlSyM2BAEGghqwJj6ziFHNMo.roa
Signing time: Tue 01 Nov 2022 07:29:33 +0000
ROA not before: Tue 01 Nov 2022 07:29:33 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2497
IP address blocks: 133.238.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 07:29:33 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=A37312952C8CD810041A086AC098FACE214734CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:51:32:5c:0d:d1:dc:90:f5:56:86:da:62:
c5:47:48:c6:5d:6f:f3:8d:32:b4:14:7f:8c:ba:74:
1b:51:13:66:b0:93:ea:01:92:b1:ac:1c:e5:65:a3:
f5:43:e7:60:de:00:30:2c:0c:f3:45:37:40:2c:6e:
b3:90:d7:a5:a1:e4:b4:85:e6:56:8e:99:7d:42:ba:
a7:19:a8:25:c5:54:c7:cf:4a:9f:5a:97:39:d4:9d:
4c:9a:0a:06:b4:39:a6:32:cd:1d:f5:50:59:ee:1e:
ca:65:bc:04:f6:f2:8b:eb:83:da:6f:27:57:0d:89:
2b:71:7a:ca:33:b8:99:5a:5d:0a:4e:2e:dd:f8:11:
81:c0:07:b9:2c:eb:ad:4f:dc:84:09:77:2a:a4:b6:
96:65:f7:8c:db:2a:7b:ef:6e:48:4c:f9:bb:d0:00:
99:57:3e:23:e7:0c:3d:66:1f:1c:f8:1d:b8:0e:e0:
48:6e:87:d3:9d:7b:2c:05:aa:29:e7:c9:17:69:3f:
b6:b6:da:ab:99:9a:cc:c0:4d:5c:51:1b:b7:e2:c8:
07:2b:fd:e2:c7:20:67:e5:f6:b2:d0:71:70:9a:8e:
6e:bd:3a:03:b0:3f:cd:a4:7c:be:6c:c9:af:1a:7b:
55:71:21:ac:e5:85:5b:51:b6:2b:8d:22:1a:3f:b0:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:12:95:2C:8C:D8:10:04:1A:08:6A:C0:98:FA:CE:21:47:34:CA
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/o3MSlSyM2BAEGghqwJj6ziFHNMo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.238.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:df:84:30:20:13:c5:3d:f6:74:17:22:95:71:08:50:07:bb:
27:f9:af:16:ff:50:be:41:31:cb:4a:de:be:7c:33:70:96:17:
f7:b7:a2:21:6e:e4:c2:a2:8e:56:9b:b6:ae:d5:94:fd:81:ae:
dc:6f:e9:d6:bf:6b:71:07:ec:28:aa:c1:3a:f5:c5:a6:6d:20:
79:a1:78:68:e2:c7:c9:e3:70:95:6e:24:8b:73:57:66:25:b8:
b5:4f:18:41:f1:9b:64:62:ef:08:40:5d:c4:3e:7f:9e:40:a4:
c9:6e:e4:8b:4c:f2:b9:d9:b9:9a:f9:04:30:1a:a4:43:27:cf:
39:10:7c:36:ca:9d:44:fd:73:a5:30:80:86:76:4d:ef:f0:ed:
46:62:47:91:df:fc:ab:f3:b6:39:ab:f0:a4:0a:1c:0f:65:49:
88:89:aa:3a:b4:d6:21:e4:ea:7a:fb:a3:c7:42:bb:90:e3:4b:
86:0a:1d:2a:ed:06:86:89:39:59:6b:21:0c:8d:c0:7a:45:72:
a5:de:37:ad:56:ba:e5:06:61:f0:55:a3:b0:43:35:3f:92:56:
30:5a:24:45:1f:b5:e7:43:5c:3e:1b:43:04:21:1f:28:fe:c9:
82:f3:f1:83:71:6d:75:3c:bf:a1:f7:93:10:1e:6a:a7:eb:bf:
7e:e2:bf:16
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjExMDEw
NzI5MzNaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzNzMxMjk1MkM4Q0Q4
MTAwNDFBMDg2QUMwOThGQUNFMjE0NzM0Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNIFEyXA3R3JD1VobaYsVHSMZdb/ONMrQUf4y6dBtRE2awk+oB
krGsHOVlo/VD52DeADAsDPNFN0AsbrOQ16Wh5LSF5laOmX1CuqcZqCXFVMfPSp9a
lznUnUyaCga0OaYyzR31UFnuHsplvAT28ovrg9pvJ1cNiStxesozuJlaXQpOLt34
EYHAB7ks661P3IQJdyqktpZl94zbKnvvbkhM+bvQAJlXPiPnDD1mHxz4HbgO4Ehu
h9OdeywFqinnyRdpP7a22quZmszATVxRG7fiyAcr/eLHIGfl9rLQcXCajm69OgOw
P82kfL5sya8ae1VxIazlhVtRtiuNIho/sBN/AgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUo3MSlSyM2BAEGghqwJj6ziFHNMowHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbzNNU2xTeU0yQkFFR2docXdKajZ6aUZITk1vLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BIXuEDANBgkqhkiG9w0BAQsFAAOCAQEAm9+EMCATxT32dBcilXEIUAe7J/mvFv9Q
vkExy0revnwzcJYX97eiIW7kwqKOVpu2rtWU/YGu3G/p1r9rcQfsKKrBOvXFpm0g
eaF4aOLHyeNwlW4ki3NXZiW4tU8YQfGbZGLvCEBdxD5/nkCkyW7ki0zyudm5mvkE
MBqkQyfPORB8NsqdRP1zpTCAhnZN7/DtRmJHkd/8q/O2OavwpAocD2VJiImqOrTW
IeTqevujx0K7kONLhgodKu0Ghok5WWshDI3AekVypd43rVa65QZh8FWjsEM1P5JW
MFokRR+150NcPhtDBCEfKP7JgvPxg3FtdTy/ofeTEB5qp+u/fuK/Fg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:50 2025 by rpki-client