Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/zK_9dCLhc1_8RbOnhFOpxi7kizg.roa
File: zK_9dCLhc1_8RbOnhFOpxi7kizg.roa (raw, json)
Hash identifier: ZqmNv+zBWr6GcDQAfL5qI6ehMRQzHBExQVIpXrH9d7M=
Subject key identifier: CC:AF:FD:74:22:E1:73:5F:FC:45:B3:A7:84:53:A9:C6:2E:E4:8B:38
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 21
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/zK_9dCLhc1_8RbOnhFOpxi7kizg.roa
Signing time: Wed 19 Jul 2023 06:09:41 +0000
ROA not before: Wed 19 Jul 2023 06:09:41 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 131934
IP address blocks: 103.28.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Jul 19 06:09:41 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=CCAFFD7422E1735FFC45B3A78453A9C62EE48B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:fd:3c:14:2c:a0:2d:49:5a:5f:70:b5:9d:
d7:ba:d8:c4:6c:4b:b4:7f:a2:e8:35:1a:17:d1:d2:
33:6b:74:e9:26:00:e9:cb:50:40:d2:41:81:59:39:
9d:cf:69:2e:60:1a:7b:ba:0a:f7:53:6f:ce:f8:d9:
01:58:d8:b5:bc:ad:ea:ad:61:f4:3d:06:0b:83:9a:
72:a9:67:47:e1:9b:2b:84:16:e1:1b:86:70:7d:5c:
35:31:ec:b2:b3:22:ff:b7:6e:d8:12:65:42:45:42:
84:90:d5:b6:5b:42:cf:0b:bd:63:e8:24:5c:c6:a6:
55:4b:3f:ef:39:fe:17:5a:2f:eb:89:f6:8f:bb:4e:
0f:b6:78:9c:26:3d:c1:f9:92:51:a9:7f:4f:22:61:
0f:82:ac:d6:89:8c:a4:12:15:bd:36:ff:c6:b0:0b:
35:c9:a3:84:1d:2f:f8:5a:ee:a7:14:db:55:72:5e:
71:82:aa:3b:68:5c:a8:e7:83:6f:bf:40:34:08:da:
b3:26:aa:b3:76:72:a3:e2:eb:a6:05:0c:9e:ce:d0:
76:7f:69:4a:c9:ca:6d:b4:7e:d1:a5:42:f2:f4:a4:
36:89:7b:42:00:20:53:da:9a:f8:a2:80:6d:7e:49:
cd:1a:11:05:c5:87:29:61:7e:56:2a:1c:7e:80:0f:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:FD:74:22:E1:73:5F:FC:45:B3:A7:84:53:A9:C6:2E:E4:8B:38
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/zK_9dCLhc1_8RbOnhFOpxi7kizg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.96.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3f:ed:e3:82:cf:ae:e3:74:ee:ec:bd:95:d9:d1:d1:da:97:
2e:37:bc:fe:26:01:ec:9d:8a:49:8d:c8:fa:29:e6:6f:b0:1b:
93:7c:f0:4f:57:29:f1:fe:5d:fc:d1:9c:6d:8f:c8:5f:db:a6:
e0:e8:45:eb:f9:ec:98:60:e4:c6:c1:52:44:b5:23:4d:4c:db:
eb:83:2d:d5:30:21:7c:7c:f7:51:df:44:98:5a:bc:3f:03:be:
f7:59:8c:c7:f0:c6:a8:8e:1b:09:97:3f:48:18:6f:c0:52:56:
b0:9a:72:d7:c0:4d:c7:95:33:f7:fd:55:d5:f2:50:5c:e0:c4:
48:d9:5c:0d:42:ae:14:81:ae:d5:74:e5:e7:97:0c:a8:50:75:
54:c4:0f:3c:f1:99:5b:44:18:fd:88:2f:32:c7:e8:c2:5c:d8:
39:0c:bc:42:20:0c:c0:0d:0d:07:ef:35:04:e5:aa:7b:50:cc:
d0:7e:32:c3:19:73:4e:aa:86:f8:dd:a7:f6:a8:e3:55:10:b0:
21:80:32:74:b6:2f:c9:9e:d6:9e:6a:b2:74:7e:d8:c8:43:bd:
bf:9c:04:35:e2:a0:cd:86:66:f6:38:59:d0:35:5e:19:89:73:
fd:33:4c:c6:36:20:2c:50:ed:9e:e6:8a:8f:de:af:a6:14:8c:
cb:7e:19:03
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTIzMDcxOTA2
MDk0MVoXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoQ0NBRkZENzQyMkUxNzM1
RkZDNDVCM0E3ODQ1M0E5QzYyRUU0OEIzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL6M/TwULKAtSVpfcLWd17rYxGxLtH+i6DUaF9HSM2t06SYA6ctQ
QNJBgVk5nc9pLmAae7oK91NvzvjZAVjYtbyt6q1h9D0GC4OacqlnR+GbK4QW4RuG
cH1cNTHssrMi/7du2BJlQkVChJDVtltCzwu9Y+gkXMamVUs/7zn+F1ov64n2j7tO
D7Z4nCY9wfmSUal/TyJhD4Ks1omMpBIVvTb/xrALNcmjhB0v+FrupxTbVXJecYKq
O2hcqOeDb79ANAjasyaqs3Zyo+LrpgUMns7Qdn9pSsnKbbR+0aVC8vSkNol7QgAg
U9qa+KKAbX5JzRoRBcWHKWF+ViocfoAPYvMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTMr/10IuFzX/xFs6eEU6nGLuSLODAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvektfOWRDTGhjMV84UmJPbmhGT3B4aTdraXpnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmccYDANBgkqhkiG9w0BAQsFAAOCAQEAAz/t44LPruN07uy9ldnR0dqXLje8
/iYB7J2KSY3I+inmb7Abk3zwT1cp8f5d/NGcbY/IX9um4OhF6/nsmGDkxsFSRLUj
TUzb64Mt1TAhfHz3Ud9EmFq8PwO+91mMx/DGqI4bCZc/SBhvwFJWsJpy18BNx5Uz
9/1V1fJQXODESNlcDUKuFIGu1XTl55cMqFB1VMQPPPGZW0QY/YgvMsfowlzYOQy8
QiAMwA0NB+81BOWqe1DM0H4ywxlzTqqG+N2n9qjjVRCwIYAydLYvyZ7WnmqydH7Y
yEO9v5wENeKgzYZm9jhZ0DVeGYlz/TNMxjYgLFDtnuaKj96vphSMy34ZAw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:43 2025 by rpki-client