Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dfxs0YX0JeHyr96lhkcDtASl578.roa
File: dfxs0YX0JeHyr96lhkcDtASl578.roa (raw, json)
Hash identifier: 3814w8dVLU+ZPejBz2i+/G5WhVQRA2zK8dxDw+Znu0c=
Subject key identifier: 75:FC:6C:D1:85:F4:25:E1:F2:AF:DE:A5:86:47:03:B4:04:A5:E7:BF
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 76
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dfxs0YX0JeHyr96lhkcDtASl578.roa
Signing time: Sat 08 May 2021 04:05:41 +0000
ROA not before: Sat 08 May 2021 04:05:41 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 210.170.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:41 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=75FC6CD185F425E1F2AFDEA5864703B404A5E7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:27:76:29:b4:9e:4c:5c:33:57:6d:3e:6b:
62:41:72:46:fb:b6:83:61:74:0b:7f:67:c2:fb:08:
4e:71:38:19:a4:b5:00:fe:87:3e:b3:6b:aa:73:0c:
21:e7:ad:94:44:9e:fc:26:5c:8a:40:e1:8a:1d:cd:
37:cb:de:f5:cd:50:24:4d:00:b3:41:eb:75:5a:b3:
a3:af:5e:90:ed:41:f7:05:69:28:3e:fb:80:0d:83:
8c:4d:7e:80:c2:25:bd:b9:bd:1a:c0:00:31:c8:de:
d8:f9:60:55:d9:88:41:65:ae:a1:72:67:b5:63:35:
75:9f:53:65:14:28:13:a4:f0:5d:c0:9e:cc:cd:ad:
69:e7:64:eb:48:e9:37:0f:5c:90:57:52:60:52:0a:
b7:91:d1:e7:4e:30:94:84:a4:f8:8d:04:41:77:c4:
ff:98:aa:38:92:84:d8:51:b6:94:cc:ee:ad:36:1f:
ef:d3:80:6c:5d:7e:64:ba:1c:cc:7f:2c:5c:e5:4e:
1b:e5:a7:11:66:a9:a9:35:a9:13:82:0c:41:8a:5d:
f4:26:a6:62:2d:91:19:d1:4d:09:f1:ec:21:79:d7:
bd:c1:5f:66:3e:eb:37:f5:5d:24:f0:b0:37:a1:90:
49:e7:40:3d:c2:da:72:d9:92:79:6b:dc:9c:ff:39:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:6C:D1:85:F4:25:E1:F2:AF:DE:A5:86:47:03:B4:04:A5:E7:BF
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dfxs0YX0JeHyr96lhkcDtASl578.roa
sbgp-ipAddrBlock: critical
IPv4:
210.170.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:47:a9:70:3e:f8:f1:a3:41:8e:91:32:6b:a7:98:28:bd:ca:
c5:6e:fd:fa:39:8f:76:d7:e9:6f:71:fe:4b:ab:df:d7:7e:2a:
bf:fe:60:6f:2f:a6:70:4b:ef:d5:94:44:9c:ed:89:c2:ab:d6:
7f:76:57:3b:4b:02:0c:b4:23:40:e4:2d:44:cc:26:c6:6e:41:
8b:63:42:94:e6:93:83:d3:80:c9:62:b5:6e:b5:1c:ec:7c:f0:
1c:af:23:a9:29:8c:5a:e1:7b:5a:94:bd:8a:24:f5:f7:e1:50:
e3:ed:e6:c0:33:37:24:77:56:b1:17:8c:0d:fe:50:e2:ea:02:
a1:83:ca:69:92:df:73:9a:f9:77:4e:10:49:0d:2c:92:00:9f:
a9:ab:31:ab:48:6f:eb:19:43:c8:73:31:30:21:ac:04:e0:67:
e0:60:df:ad:b2:19:9e:cb:92:df:91:f4:c5:85:89:c3:a3:c6:
24:77:8c:d6:10:c0:4f:c8:0d:94:7b:81:07:c0:d7:67:5d:da:
41:b2:78:af:d1:ef:6a:4d:90:45:a4:7c:f3:aa:62:c0:84:95:
1d:62:a3:1a:66:00:93:a7:30:4e:74:7d:68:cc:ea:f1:fe:a0:
38:d0:be:41:61:76:54:f3:25:5f:b7:51:73:ca:ea:62:2d:ef:
45:45:0e:cb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRkMw
OTkyM0IwNUE3RThGMUFERDlBNTk4NEVEQzE5MzIwREI5NzRCMB4XDTIxMDUwODA0
MDU0MVoXDTIyMDQxNTAxMzAwMVowMzExMC8GA1UEAxMoNzVGQzZDRDE4NUY0MjVF
MUYyQUZERUE1ODY0NzAzQjQwNEE1RTdCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALJFJ3YptJ5MXDNXbT5rYkFyRvu2g2F0C39nwvsITnE4GaS1AP6H
PrNrqnMMIeetlESe/CZcikDhih3NN8ve9c1QJE0As0HrdVqzo69ekO1B9wVpKD77
gA2DjE1+gMIlvbm9GsAAMcje2PlgVdmIQWWuoXJntWM1dZ9TZRQoE6TwXcCezM2t
aedk60jpNw9ckFdSYFIKt5HR504wlISk+I0EQXfE/5iqOJKE2FG2lMzurTYf79OA
bF1+ZLoczH8sXOVOG+WnEWapqTWpE4IMQYpd9CamYi2RGdFNCfHsIXnXvcFfZj7r
N/VdJPCwN6GQSedAPcLactmSeWvcnP85O88CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR1/GzRhfQl4fKv3qWGRwO0BKXnvzAfBgNVHSMEGDAWgBQvwJkjsFp+jxrdmlmE
7cGTINuXSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lEYmwwcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lE
Ymwwcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMzEvZGZ4czBZWDBKZUh5cjk2bGhrY0R0QVNsNTc4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtKqQDANBgkqhkiG9w0BAQsFAAOCAQEA
XUepcD748aNBjpEya6eYKL3KxW79+jmPdtfpb3H+S6vf134qv/5gby+mcEvv1ZRE
nO2JwqvWf3ZXO0sCDLQjQOQtRMwmxm5Bi2NClOaTg9OAyWK1brUc7HzwHK8jqSmM
WuF7WpS9iiT19+FQ4+3mwDM3JHdWsReMDf5Q4uoCoYPKaZLfc5r5d04QSQ0skgCf
qasxq0hv6xlDyHMxMCGsBOBn4GDfrbIZnsuS35H0xYWJw6PGJHeM1hDAT8gNlHuB
B8DXZ13aQbJ4r9Hvak2QRaR886piwISVHWKjGmYAk6cwTnR9aMzq8f6gONC+QWF2
VPMlX7dRc8rqYi3vRUUOyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org