Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TnuH2qaB4ptJ_j1S6U7frhSiuHM.roa
File: TnuH2qaB4ptJ_j1S6U7frhSiuHM.roa (raw, json)
Hash identifier: 7mrQLdIKsEEc50jKQroXHrcMxb/ySTVNY/2gLFla9Kg=
Subject key identifier: 4E:7B:87:DA:A6:81:E2:9B:49:FE:3D:52:E9:4E:DF:AE:14:A2:B8:73
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: B5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TnuH2qaB4ptJ_j1S6U7frhSiuHM.roa
Signing time: Fri 01 Apr 2022 01:28:11 +0000
ROA not before: Fri 01 Apr 2022 01:28:11 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 123.224.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:11 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=4E7B87DAA681E29B49FE3D52E94EDFAE14A2B873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:ba:3c:90:62:68:cb:bc:b2:65:64:3f:0c:
11:ff:5e:71:60:60:29:19:2f:31:8f:3e:c5:74:eb:
59:d8:10:c8:55:cd:13:1e:65:89:7b:f8:83:33:f8:
7e:a4:fa:32:23:15:60:3e:3b:df:d9:eb:21:71:3e:
c0:0f:68:96:94:7b:bd:c7:23:51:24:79:05:34:c2:
f0:f7:39:10:cf:b1:3d:c1:28:9c:8c:55:9f:e4:0d:
3a:14:14:6a:c6:4e:5a:c4:f8:c7:ad:49:91:0d:32:
87:22:88:c3:0a:87:03:41:b6:d2:3b:3b:be:c7:f3:
9b:ef:be:11:c1:28:9c:2c:30:ce:15:b5:44:b1:f1:
0b:6c:88:97:b6:9c:ea:37:f2:58:aa:60:49:02:d5:
c2:89:b2:ac:35:1f:94:3d:78:ea:23:10:e7:5d:79:
34:fe:72:c7:c1:c5:5f:c5:df:d3:f7:a6:6f:b9:a5:
be:43:ca:12:d5:37:7a:ea:a6:2a:75:1c:0a:5f:1d:
e5:0b:95:58:81:d6:e4:11:43:60:26:8d:71:c8:ea:
e8:9d:6f:b0:39:e1:f4:76:1f:c1:ca:d0:4d:17:14:
f9:9d:bf:ef:5c:ee:99:a1:2d:26:10:83:0d:e9:64:
1d:22:57:2e:bb:7c:82:1d:b5:cd:5f:18:db:53:1e:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:87:DA:A6:81:E2:9B:49:FE:3D:52:E9:4E:DF:AE:14:A2:B8:73
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TnuH2qaB4ptJ_j1S6U7frhSiuHM.roa
sbgp-ipAddrBlock: critical
IPv4:
123.224.0.0/14
Signature Algorithm: sha256WithRSAEncryption
76:40:ad:c1:da:89:5f:80:9c:55:c8:db:5c:b0:05:2e:51:7a:
83:ab:56:48:ac:85:5a:da:9a:e4:86:a1:61:73:75:0d:93:0d:
6a:39:bf:42:0a:c4:6e:8c:81:e9:e5:e0:5a:15:f7:36:83:19:
90:9e:99:4e:85:86:14:db:6b:38:e2:4c:37:6e:c2:5a:a3:4d:
09:0e:13:6a:f2:c6:bd:5d:09:1b:42:7c:8c:14:53:a3:b0:89:
b6:02:ce:12:d8:c0:cf:ba:84:e9:09:aa:2f:67:f5:ac:be:8d:
77:0b:f6:17:16:bc:a0:17:51:93:da:e1:5b:91:02:b7:0b:bf:
e5:77:8b:8f:c8:3d:d9:96:99:31:d0:85:5f:fe:08:28:2b:45:
b3:7d:46:3e:31:6a:4c:b3:db:39:8d:82:92:6e:99:f2:a1:b0:
ac:74:c5:34:9f:71:71:a9:69:1f:99:79:da:09:9e:d9:af:60:
4b:cf:1a:0b:c7:e4:84:cc:35:76:14:9e:05:53:40:3d:39:22:
22:84:44:97:30:4f:64:df:86:c7:25:67:19:0b:6e:58:66:22:
3a:59:dc:27:ee:c8:c4:d6:d9:f1:73:c0:6e:50:7a:4e:66:5b:
04:84:81:5c:be:24:e1:96:d9:17:eb:59:24:fe:d2:61:0f:81:
bb:21:12:66
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTFaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDRFN0I4N0RBQTY4MUUy
OUI0OUZFM0Q1MkU5NEVERkFFMTRBMkI4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXHLo8kGJoy7yyZWQ/DBH/XnFgYCkZLzGPPsV061nYEMhVzRMe
ZYl7+IMz+H6k+jIjFWA+O9/Z6yFxPsAPaJaUe73HI1EkeQU0wvD3ORDPsT3BKJyM
VZ/kDToUFGrGTlrE+MetSZENMociiMMKhwNBttI7O77H85vvvhHBKJwsMM4VtUSx
8QtsiJe2nOo38liqYEkC1cKJsqw1H5Q9eOojEOddeTT+csfBxV/F39P3pm+5pb5D
yhLVN3rqpip1HApfHeULlViB1uQRQ2AmjXHI6uidb7A54fR2H8HK0E0XFPmdv+9c
7pmhLSYQgw3pZB0iVy67fIIdtc1fGNtTHpELAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUTnuH2qaB4ptJ/j1S6U7frhSiuHMwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL1RudUgycWFCNHB0Sl9qMVM2VTdmcmhTaXVITS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJ74DANBgkqhkiG9w0BAQsFAAOCAQEA
dkCtwdqJX4CcVcjbXLAFLlF6g6tWSKyFWtqa5IahYXN1DZMNajm/QgrEboyB6eXg
WhX3NoMZkJ6ZToWGFNtrOOJMN27CWqNNCQ4TavLGvV0JG0J8jBRTo7CJtgLOEtjA
z7qE6QmqL2f1rL6Ndwv2Fxa8oBdRk9rhW5ECtwu/5XeLj8g92ZaZMdCFX/4IKCtF
s31GPjFqTLPbOY2Ckm6Z8qGwrHTFNJ9xcalpH5l52gme2a9gS88aC8fkhMw1dhSe
BVNAPTkiIoRElzBPZN+GxyVnGQtuWGYiOlncJ+7IxNbZ8XPAblB6TmZbBISBXL4k
4ZbZF+tZJP7SYQ+BuyESZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org