Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/A971ll4Rnm6xbuAr4Fdz8K9Tock.roa
File: A971ll4Rnm6xbuAr4Fdz8K9Tock.roa (raw, json)
Hash identifier: hVuwmPE4tBXJWuioTSvyBNVCs8+FX9XA5L0TJoxGfZ4=
Subject key identifier: 03:DE:F5:96:5E:11:9E:6E:B1:6E:E0:2B:E0:57:73:F0:AF:53:A1:C9
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: D5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/A971ll4Rnm6xbuAr4Fdz8K9Tock.roa
Signing time: Fri 01 Apr 2022 01:28:19 +0000
ROA not before: Fri 01 Apr 2022 01:28:19 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 202.191.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:19 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=03DEF5965E119E6EB16EE02BE05773F0AF53A1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:5a:35:00:94:1a:d1:30:60:21:1b:69:4f:
ec:f7:62:ac:75:b8:6b:fb:d4:25:3c:52:2f:58:62:
74:96:e4:96:e3:4c:ee:de:7a:d0:f8:16:68:dc:4a:
83:78:1c:20:27:72:7b:80:95:3e:f7:0c:22:b8:6c:
d3:34:86:9d:ce:cb:b2:13:b3:f0:fd:4a:ec:e7:30:
44:3d:74:ef:9d:01:f9:44:0b:18:f0:5b:95:06:89:
d1:ee:48:dd:5d:b2:fc:8a:29:ef:6f:d1:c3:11:a2:
6f:99:83:05:87:3f:8a:f0:62:be:a5:f7:92:45:26:
a1:cd:58:e6:9e:f7:b9:2b:4c:80:48:1f:6c:c1:dc:
94:40:59:09:5b:f9:6f:e1:c3:9a:f1:44:16:dc:76:
31:c0:37:30:16:56:54:e4:c1:57:5c:43:c2:35:14:
49:5d:98:38:ed:eb:49:c8:89:95:69:10:c5:8d:d2:
5c:8a:6a:49:32:e6:37:9d:d5:85:44:73:23:9f:ca:
69:a3:99:dd:1d:dd:66:2b:3e:8d:f9:26:70:ad:54:
75:65:f0:a8:e1:20:fa:34:d4:49:84:3d:5f:0e:8d:
79:b3:f3:ad:ae:b6:00:a0:c7:1c:38:ae:5d:3d:25:
ff:7b:6b:46:48:04:3f:07:43:97:64:4b:4a:f7:22:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:F5:96:5E:11:9E:6E:B1:6E:E0:2B:E0:57:73:F0:AF:53:A1:C9
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/A971ll4Rnm6xbuAr4Fdz8K9Tock.roa
sbgp-ipAddrBlock: critical
IPv4:
202.191.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:62:8a:fc:11:24:0f:db:5f:76:a4:14:e5:80:a9:fe:01:31:
c7:82:88:d5:43:26:70:a0:f4:75:41:c8:ef:9c:fc:e1:2c:9c:
27:4d:22:ea:c8:3d:2a:78:5c:00:e3:2b:bc:56:9d:71:92:3f:
9a:f5:f5:1e:28:60:d1:6a:f7:83:7f:19:02:f9:d2:79:76:a1:
0c:65:52:b9:5d:b8:7f:d1:09:fe:0b:59:ea:54:f0:f2:60:27:
2b:10:8c:15:64:9d:35:d7:98:dc:84:e0:24:d9:b9:18:65:85:
fb:9f:30:34:1c:dd:f5:86:17:06:d3:cd:51:67:7d:c5:4f:34:
2d:4d:73:d8:00:26:cb:64:d3:30:4e:18:0d:6e:1c:11:34:83:
a5:7e:1d:d1:2b:56:d7:6f:74:c1:d9:f1:f4:5a:29:56:72:8f:
14:48:e3:b3:57:1c:52:e8:b9:79:8a:34:60:0e:89:3f:28:44:
6e:1e:a2:08:24:bb:4f:aa:65:5d:07:30:8d:d2:fe:bf:34:5d:
46:0e:86:d8:4b:7e:72:b0:68:f8:fa:c2:27:46:8c:58:e6:4b:
cd:be:75:c8:9c:e4:e0:c2:ed:2b:36:a2:fb:d4:60:b3:17:9f:
dd:ba:69:ed:3e:f6:db:b8:c1:b2:a0:98:af:83:05:9c:fd:31:
df:43:bb:05
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTlaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDAzREVGNTk2NUUxMTlF
NkVCMTZFRTAyQkUwNTc3M0YwQUY1M0ExQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC64Vo1AJQa0TBgIRtpT+z3Yqx1uGv71CU8Ui9YYnSW5JbjTO7e
etD4FmjcSoN4HCAncnuAlT73DCK4bNM0hp3Oy7ITs/D9SuznMEQ9dO+dAflECxjw
W5UGidHuSN1dsvyKKe9v0cMRom+ZgwWHP4rwYr6l95JFJqHNWOae97krTIBIH2zB
3JRAWQlb+W/hw5rxRBbcdjHANzAWVlTkwVdcQ8I1FEldmDjt60nIiZVpEMWN0lyK
akky5jed1YVEcyOfymmjmd0d3WYrPo35JnCtVHVl8KjhIPo01EmEPV8OjXmz862u
tgCgxxw4rl09Jf97a0ZIBD8HQ5dkS0r3IhG3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUA971ll4Rnm6xbuAr4Fdz8K9TockwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL0E5NzFsbDRSbm02eGJ1QXI0RmR6OEs5VG9jay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKvxAwDQYJKoZIhvcNAQELBQADggEB
AM5iivwRJA/bX3akFOWAqf4BMceCiNVDJnCg9HVByO+c/OEsnCdNIurIPSp4XADj
K7xWnXGSP5r19R4oYNFq94N/GQL50nl2oQxlUrlduH/RCf4LWepU8PJgJysQjBVk
nTXXmNyE4CTZuRhlhfufMDQc3fWGFwbTzVFnfcVPNC1Nc9gAJstk0zBOGA1uHBE0
g6V+HdErVtdvdMHZ8fRaKVZyjxRI47NXHFLouXmKNGAOiT8oRG4eoggku0+qZV0H
MI3S/r80XUYOhthLfnKwaPj6widGjFjmS82+dcic5ODC7Ss2ovvUYLMXn926ae0+
9tu4wbKgmK+DBZz9Md9DuwU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org