Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/mGtGwHJVye7AtoUETuWmswjGWZs.roa
File: mGtGwHJVye7AtoUETuWmswjGWZs.roa (raw, json)
Hash identifier: VuCqhP4btRHKJZ6OmTewmntxPL0QsRwBMaO4/hiYxTw=
Subject key identifier: 98:6B:46:C0:72:55:C9:EE:C0:B6:85:04:4E:E5:A6:B3:08:C6:59:9B
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: C0
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mGtGwHJVye7AtoUETuWmswjGWZs.roa
Signing time: Fri 01 Apr 2022 01:28:13 +0000
ROA not before: Fri 01 Apr 2022 01:28:13 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 210.226.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:13 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=986B46C07255C9EEC0B685044EE5A6B308C6599B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:43:2c:64:82:5e:4b:b1:cb:5e:12:51:52:
bf:44:19:31:80:d3:69:a7:e0:39:bf:11:42:d6:0f:
e0:38:c7:89:ef:d7:13:da:28:64:4b:4a:3a:55:14:
6e:1d:20:df:83:46:99:3f:2c:28:d3:94:82:02:e1:
72:8f:98:36:46:62:98:30:d8:41:bc:6f:eb:a8:78:
1e:36:b9:7b:12:d6:2b:03:44:2e:c7:95:8c:07:3b:
df:a0:12:82:db:94:88:a3:f6:d8:24:65:ee:1e:17:
4e:d2:cd:0f:8d:2e:a2:d4:f8:4e:0d:9e:26:1c:04:
80:c5:a4:bb:90:99:3e:e6:f5:bc:a2:81:62:3d:2e:
23:1c:90:4f:ae:6b:df:e3:29:56:59:37:04:c7:c9:
f7:6b:62:ce:b6:85:3d:3a:73:4c:64:13:0b:22:e0:
74:df:d6:9c:ff:0c:a5:42:03:90:d4:62:12:ea:f6:
05:8f:9e:2a:e8:88:c9:d7:de:ea:04:ae:4c:bc:56:
19:8f:4a:bc:02:36:81:cd:cd:9b:7e:5c:9d:27:9d:
89:b3:a9:88:7b:72:3a:07:eb:31:a2:dc:bc:31:f3:
8c:65:ec:2d:19:a7:5f:cd:bf:e6:44:e9:8a:6e:0c:
05:6b:1c:98:ee:7d:f9:44:83:1f:ac:f9:bf:57:3b:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:46:C0:72:55:C9:EE:C0:B6:85:04:4E:E5:A6:B3:08:C6:59:9B
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/mGtGwHJVye7AtoUETuWmswjGWZs.roa
sbgp-ipAddrBlock: critical
IPv4:
210.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a6:07:dd:bb:92:1c:e7:0e:37:95:ff:4b:8b:8e:1d:5f:e3:b4:
37:0e:63:83:33:c6:e3:af:f3:34:c9:e6:6c:bf:32:b5:cd:87:
97:ed:9e:c6:a0:fd:1c:47:66:e9:b2:fb:b6:d9:9e:32:37:73:
41:64:82:36:d1:8e:ed:e8:50:7c:1c:d4:9c:20:87:b3:bb:dc:
d1:c0:b4:05:77:56:d4:c4:d6:f7:5d:40:4d:f2:48:a0:77:dd:
bf:5f:d7:f2:48:79:86:ff:93:c5:fc:6c:9b:5e:ac:3e:4d:b8:
e8:aa:d4:d5:dd:fb:5b:96:e4:b6:ee:62:3d:5c:f1:ea:63:62:
5d:39:f7:dc:10:20:d9:20:b5:8a:16:89:68:46:86:55:f4:c7:
ea:af:e6:b6:42:df:cd:ec:e4:0f:0a:d5:86:f8:c2:69:3b:b4:
cb:e9:40:58:e5:59:03:d7:08:38:45:c3:51:b3:49:83:8b:ad:
97:b0:6f:c1:8a:ce:79:ff:22:90:15:7b:88:a2:b2:a8:86:25:
4b:29:e2:0f:24:d4:5e:b0:ba:24:03:df:6c:a4:06:d7:72:f5:
30:d4:4b:d4:27:24:52:6b:95:21:23:07:fc:1a:29:66:1c:dd:
1d:18:33:07:5d:fe:cc:ee:62:f3:1c:f5:52:5d:68:0b:67:83:
d1:8d:dd:c9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTNaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDk4NkI0NkMwNzI1NUM5
RUVDMEI2ODUwNDRFRTVBNkIzMDhDNjU5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPyUMsZIJeS7HLXhJRUr9EGTGA02mn4Dm/EULWD+A4x4nv1xPa
KGRLSjpVFG4dIN+DRpk/LCjTlIIC4XKPmDZGYpgw2EG8b+uoeB42uXsS1isDRC7H
lYwHO9+gEoLblIij9tgkZe4eF07SzQ+NLqLU+E4NniYcBIDFpLuQmT7m9byigWI9
LiMckE+ua9/jKVZZNwTHyfdrYs62hT06c0xkEwsi4HTf1pz/DKVCA5DUYhLq9gWP
niroiMnX3uoErky8VhmPSrwCNoHNzZt+XJ0nnYmzqYh7cjoH6zGi3Lwx84xl7C0Z
p1/Nv+ZE6YpuDAVrHJjufflEgx+s+b9XO2BDAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUmGtGwHJVye7AtoUETuWmswjGWZswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL21HdEd3SEpWeWU3QXRvVUVUdVdtc3dqR1dacy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHS4jANBgkqhkiG9w0BAQsFAAOCAQEA
pgfdu5Ic5w43lf9Li44dX+O0Nw5jgzPG46/zNMnmbL8ytc2Hl+2exqD9HEdm6bL7
ttmeMjdzQWSCNtGO7ehQfBzUnCCHs7vc0cC0BXdW1MTW911ATfJIoHfdv1/X8kh5
hv+Txfxsm16sPk246KrU1d37W5bktu5iPVzx6mNiXTn33BAg2SC1ihaJaEaGVfTH
6q/mtkLfzezkDwrVhvjCaTu0y+lAWOVZA9cIOEXDUbNJg4utl7BvwYrOef8ikBV7
iKKyqIYlSyniDyTUXrC6JAPfbKQG13L1MNRL1CckUmuVISMH/BopZhzdHRgzB13+
zO5i8xz1Ul1oC2eD0Y3dyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org