Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/OnspXNwhzKmPGdQTfZjlknL8Jok.roa
File: OnspXNwhzKmPGdQTfZjlknL8Jok.roa (raw, json)
Hash identifier: Pnso5aLF66FjY9hyMBw7yZwlHmykI+hyI6f3ex5YH7U=
Subject key identifier: 3A:7B:29:5C:DC:21:CC:A9:8F:19:D4:13:7D:98:E5:92:72:FC:26:89
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 91
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OnspXNwhzKmPGdQTfZjlknL8Jok.roa
Signing time: Sat 05 Jun 2021 03:47:28 +0000
ROA not before: Sat 05 Jun 2021 03:47:28 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 125.200.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:28 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=3A7B295CDC21CCA98F19D4137D98E59272FC2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:03:ac:07:64:db:03:82:e3:a7:8f:76:b8:
0b:84:1c:83:87:38:5a:63:3c:9c:a5:0e:32:f0:c2:
4c:a5:e7:47:1d:16:e2:06:a5:92:b0:50:93:f7:47:
87:b1:22:76:b7:2a:e7:7a:57:f6:51:11:3c:7f:dd:
ac:b7:58:54:6c:2d:12:35:f2:52:f8:c2:b0:fa:f1:
01:9a:57:5a:ae:29:ae:88:41:26:ba:0f:c3:f7:6d:
a6:46:da:aa:9c:e7:91:39:2e:15:5d:c9:2e:96:c4:
c1:b8:1c:b0:91:c6:ed:ec:34:b7:7f:52:3f:d9:76:
ac:ae:86:bc:a9:b2:19:7c:1b:38:3b:61:0a:39:ad:
f4:bd:5e:a7:d2:9f:77:b9:e8:6c:20:6f:52:d7:10:
79:f0:34:6b:6a:c3:de:69:72:50:3c:fb:21:aa:53:
c7:d9:33:de:bc:c4:b0:20:3e:01:34:0e:31:13:b4:
d4:dc:9b:09:2b:b0:46:56:2f:89:7c:7c:15:20:25:
08:97:56:60:78:d4:cf:2c:bc:c2:43:17:fe:f1:d7:
8b:8d:21:f3:a4:0f:71:0f:4e:1f:ca:74:e9:cd:91:
65:50:7b:ed:08:36:46:92:6f:33:2a:96:75:77:52:
bd:86:f8:78:fa:e1:38:4a:62:3f:e2:f3:2b:4d:a9:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:29:5C:DC:21:CC:A9:8F:19:D4:13:7D:98:E5:92:72:FC:26:89
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OnspXNwhzKmPGdQTfZjlknL8Jok.roa
sbgp-ipAddrBlock: critical
IPv4:
125.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
86:90:98:18:75:4c:99:1b:59:dd:31:2b:59:a9:b5:65:f4:b1:
65:16:ce:4a:1b:97:a2:de:7c:34:64:eb:5f:04:24:f0:0e:07:
b3:2b:c2:7c:65:d9:31:65:32:88:a2:d7:eb:78:10:2b:ef:06:
99:7b:61:78:5f:88:e1:75:41:88:b9:e6:84:60:9a:b9:77:c3:
60:b4:6d:c9:54:56:9e:51:d8:48:9c:55:bc:e8:6c:0a:1b:4b:
47:f8:e3:8a:a8:24:ea:06:c6:79:80:64:95:c0:79:e2:8b:e5:
0b:a2:bc:11:bf:50:ee:78:f3:6f:a4:00:0c:92:5f:10:21:b9:
5a:32:9f:bf:c2:2e:df:46:ba:e5:79:c5:2c:68:3e:f3:f9:63:
77:8c:7e:d6:14:a0:bc:e8:d5:26:a0:31:1d:81:69:fe:54:d6:
c1:82:95:d7:fa:3c:1e:7f:35:73:ba:1f:cc:d5:ea:7c:bf:f9:
75:5a:85:d2:34:75:94:08:b8:88:54:22:df:51:b0:ce:fc:9c:
8a:a0:cc:ec:dc:67:d2:b9:5d:5c:d0:99:a6:70:bc:89:18:92:
38:e7:a9:0b:30:bb:e8:20:42:16:d7:f5:8c:4f:12:dc:8c:9d:
68:af:51:03:d9:b6:36:21:74:cf:4a:70:1b:e1:5f:07:43:b5:
78:3f:e3:db
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMTA2MDUw
MzQ3MjhaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBN0IyOTVDREMyMUND
QTk4RjE5RDQxMzdEOThFNTkyNzJGQzI2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGmwOsB2TbA4Ljp492uAuEHIOHOFpjPJylDjLwwkyl50cdFuIG
pZKwUJP3R4exIna3Kud6V/ZRETx/3ay3WFRsLRI18lL4wrD68QGaV1quKa6IQSa6
D8P3baZG2qqc55E5LhVdyS6WxMG4HLCRxu3sNLd/Uj/Zdqyuhrypshl8Gzg7YQo5
rfS9XqfSn3e56Gwgb1LXEHnwNGtqw95pclA8+yGqU8fZM968xLAgPgE0DjETtNTc
mwkrsEZWL4l8fBUgJQiXVmB41M8svMJDF/7x14uNIfOkD3EPTh/KdOnNkWVQe+0I
NkaSbzMqlnV3Ur2G+Hj64ThKYj/i8ytNqSCNAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUOnspXNwhzKmPGdQTfZjlknL8JokwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL09uc3BYTndoekttUEdkUVRmWmpsa25MOEpvay5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwN9yDANBgkqhkiG9w0BAQsFAAOCAQEA
hpCYGHVMmRtZ3TErWam1ZfSxZRbOShuXot58NGTrXwQk8A4HsyvCfGXZMWUyiKLX
63gQK+8GmXtheF+I4XVBiLnmhGCauXfDYLRtyVRWnlHYSJxVvOhsChtLR/jjiqgk
6gbGeYBklcB54ovlC6K8Eb9Q7njzb6QADJJfECG5WjKfv8Iu30a65XnFLGg+8/lj
d4x+1hSgvOjVJqAxHYFp/lTWwYKV1/o8Hn81c7ofzNXqfL/5dVqF0jR1lAi4iFQi
31GwzvyciqDM7Nxn0rldXNCZpnC8iRiSOOepCzC76CBCFtf1jE8S3IydaK9RA9m2
NiF0z0pwG+FfB0O1eD/j2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org