Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/zsW9j2kXLtzBwsdTOlQFy51AZ1g.roa
File: zsW9j2kXLtzBwsdTOlQFy51AZ1g.roa (raw, json)
Hash identifier: B5nsu3le3K/kRU40iGJFrx7z5H+O8y7fh9g/VxvAZao=
Subject key identifier: CE:C5:BD:8F:69:17:2E:DC:C1:C2:C7:53:3A:54:05:CB:9D:40:67:58
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: 7E
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/zsW9j2kXLtzBwsdTOlQFy51AZ1g.roa
Signing time: Thu 14 Dec 2023 23:07:10 +0000
ROA not before: Thu 14 Dec 2023 23:07:10 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 0
IP address blocks: 210.173.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Dec 14 23:07:10 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=CEC5BD8F69172EDCC1C2C7533A5405CB9D406758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:1e:74:58:1f:47:dd:93:7c:0a:3d:42:4c:
56:9b:af:df:9c:86:f7:06:b3:5b:5c:1b:39:8e:10:
01:e9:50:2b:6c:13:9b:7b:d3:b2:c7:16:8c:37:bb:
6f:86:9d:78:42:50:00:5e:93:3c:b5:57:e7:93:64:
08:31:5d:be:f1:c2:58:52:76:93:ed:d9:85:87:40:
7d:8b:be:1b:4f:db:19:2b:46:87:4a:e0:3e:6f:d9:
79:81:fd:94:24:3a:bd:a0:fd:c6:a0:02:8c:99:27:
02:5c:de:85:7d:24:3f:3b:b9:cb:ba:b8:d0:c2:6f:
aa:df:9e:61:0e:c7:5f:ea:90:e0:f6:54:65:4c:99:
b8:98:31:28:5f:d9:66:52:e5:95:ed:96:bb:43:9b:
6f:db:8c:1b:35:da:10:0b:ec:1a:cd:59:0d:2c:68:
bb:ae:82:50:ce:05:e5:dd:d9:ca:a4:0e:de:01:20:
bf:36:f7:15:40:d7:5d:6d:23:df:62:35:9f:1c:3b:
c3:7a:0f:43:92:f1:0b:52:7e:7d:e3:53:2c:2b:fe:
a9:e0:0c:76:f0:38:9c:f2:77:39:1a:80:f6:6a:a9:
0b:0d:a1:4a:6d:d2:e1:e2:33:31:d6:24:3e:e4:4c:
b3:76:62:37:e7:d2:78:9b:81:c4:df:ed:e4:14:9b:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:BD:8F:69:17:2E:DC:C1:C2:C7:53:3A:54:05:CB:9D:40:67:58
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/zsW9j2kXLtzBwsdTOlQFy51AZ1g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.176.0/23
Signature Algorithm: sha256WithRSAEncryption
74:cb:52:89:3c:b2:98:c5:83:d8:44:29:99:cd:1f:b5:8b:11:
a9:f5:47:2e:c9:49:ca:33:1a:08:47:4c:53:6b:8f:e6:eb:c9:
18:69:e5:6d:34:4f:d3:14:b5:6c:6c:b3:8b:dd:28:85:09:d7:
5a:d0:a0:c8:f3:fd:e3:f3:85:00:e7:a8:32:d8:9c:4c:4a:40:
72:10:55:08:25:f5:37:6c:81:3f:9e:a8:fc:3c:90:48:d9:b6:
21:fc:18:55:b3:69:35:5f:d2:63:08:c1:41:ab:92:8c:b6:a0:
24:36:42:4d:c0:1b:98:13:f1:67:e8:cd:17:43:b2:e5:23:47:
2f:ae:83:4e:2c:3e:1f:48:de:b8:8a:28:7c:26:3d:bc:53:3f:
c2:4f:b3:7a:aa:9c:5c:63:d4:74:c7:59:31:e1:32:7d:af:57:
9a:76:8e:dc:7d:13:4b:94:20:2d:0b:10:68:ee:bd:b9:cc:80:
ec:b4:a3:11:ed:8c:11:e2:63:51:6a:5a:0d:06:af:8f:7a:64:
74:6f:09:7d:08:d7:9d:63:27:23:88:84:76:17:fd:1e:40:5f:
87:9c:14:2e:e9:91:c6:6c:74:f4:49:9a:a1:a7:94:f8:6d:71:
07:c8:27:92:75:aa:0e:74:03:9d:73:dc:51:88:f5:e1:5d:db:
d2:00:19:8b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx
OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIzMTIxNDIz
MDcxMFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQ0VDNUJEOEY2OTE3MkVE
Q0MxQzJDNzUzM0E1NDA1Q0I5RDQwNjc1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANsKHnRYH0fdk3wKPUJMVpuv35yG9wazW1wbOY4QAelQK2wTm3vT
sscWjDe7b4adeEJQAF6TPLVX55NkCDFdvvHCWFJ2k+3ZhYdAfYu+G0/bGStGh0rg
Pm/ZeYH9lCQ6vaD9xqACjJknAlzehX0kPzu5y7q40MJvqt+eYQ7HX+qQ4PZUZUyZ
uJgxKF/ZZlLlle2Wu0Obb9uMGzXaEAvsGs1ZDSxou66CUM4F5d3ZyqQO3gEgvzb3
FUDXXW0j32I1nxw7w3oPQ5LxC1J+feNTLCv+qeAMdvA4nPJ3ORqA9mqpCw2hSm3S
4eIzMdYkPuRMs3ZiN+fSeJuBxN/t5BSbwrMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTOxb2PaRcu3MHCx1M6VAXLnUBnWDAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi
NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz
Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDcvenNXOWoya1hMdHpCd3NkVE9sUUZ5NTFBWjFnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdKtsDANBgkqhkiG9w0BAQsFAAOCAQEAdMtSiTyymMWD2EQpmc0ftYsRqfVH
LslJyjMaCEdMU2uP5uvJGGnlbTRP0xS1bGyzi90ohQnXWtCgyPP94/OFAOeoMtic
TEpAchBVCCX1N2yBP56o/DyQSNm2IfwYVbNpNV/SYwjBQauSjLagJDZCTcAbmBPx
Z+jNF0Oy5SNHL66DTiw+H0jeuIoofCY9vFM/wk+zeqqcXGPUdMdZMeEyfa9XmnaO
3H0TS5QgLQsQaO69ucyA7LSjEe2MEeJjUWpaDQavj3pkdG8JfQjXnWMnI4iEdhf9
HkBfh5wULumRxmx09EmaoaeU+G1xB8gnknWqDnQDnXPcUYj14V3b0gAZiw==
-----END CERTIFICATE-----
Generated at Sun May 4 07:54:12 2025 by rpki-client