Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/f4WQccGDuv0FwcSdbbzj-IzC_co.roa
File: f4WQccGDuv0FwcSdbbzj-IzC_co.roa (raw, json)
Hash identifier: Uu0eHHNcFzEOfe4mSY2C2rLZ6L3HdO9xbRE/J/zOwmo=
Subject key identifier: 7F:85:90:71:C1:83:BA:FD:05:C1:C4:9D:6D:BC:E3:F8:8C:C2:FD:CA
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 70
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/f4WQccGDuv0FwcSdbbzj-IzC_co.roa
Signing time: Wed 01 Sep 2021 01:30:25 +0000
ROA not before: Wed 01 Sep 2021 01:30:25 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 153.121.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:25 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=7F859071C183BAFD05C1C49D6DBCE3F88CC2FDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:7a:d4:4e:db:0d:e6:26:cd:22:8b:7e:47:
78:c9:c6:7a:88:0f:73:41:5a:40:9e:1e:ca:b5:05:
3f:19:ea:09:b1:a3:96:f3:8b:18:10:2f:19:6b:9a:
db:6d:d9:80:2d:96:bf:cd:e0:01:bc:0d:a3:02:6f:
e6:f1:9e:5a:99:99:94:68:17:72:93:c7:62:c0:94:
4c:16:d3:6f:5c:5a:a2:ba:83:2e:25:44:e2:cd:d3:
d1:e0:d2:3f:e5:8b:d4:f8:6a:9b:59:fe:46:1c:55:
52:3d:cc:97:f1:64:ad:28:00:cf:bd:a6:ca:ab:bf:
d8:46:3b:4f:fc:05:33:90:97:e1:46:9c:16:c7:dc:
fc:70:f7:ca:6f:58:2d:c8:94:c3:c3:e3:8b:2f:48:
50:53:16:3f:0b:15:52:54:e3:a7:15:3d:e3:57:05:
17:00:28:17:e1:71:d0:a8:ea:a9:91:e0:a3:bb:e3:
38:cd:1b:c3:e5:4b:14:69:cd:c6:31:93:9f:20:cf:
7f:52:30:a8:67:c0:a6:aa:2f:65:b0:51:1f:52:4e:
75:14:10:68:96:c1:fe:15:f3:6c:b1:bd:47:7e:81:
4f:b0:87:b5:a2:87:b7:ce:2e:e3:19:d0:34:66:39:
3b:7e:bc:cf:a8:e9:5c:88:81:fb:33:74:6e:7e:dc:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:90:71:C1:83:BA:FD:05:C1:C4:9D:6D:BC:E3:F8:8C:C2:FD:CA
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/f4WQccGDuv0FwcSdbbzj-IzC_co.roa
sbgp-ipAddrBlock: critical
IPv4:
153.121.32.0/19
Signature Algorithm: sha256WithRSAEncryption
74:a0:47:d8:98:85:3c:c7:df:59:fc:ed:7e:6d:84:17:2e:a3:
75:f4:3a:af:81:99:50:39:4a:c7:4e:bd:27:9c:58:ea:d4:8e:
3b:12:b1:84:71:1e:47:e2:94:fe:17:5b:62:4a:04:0a:51:97:
e3:c1:99:b6:5a:e5:8f:40:3d:de:45:88:cf:71:4b:19:e8:8f:
06:bb:71:d2:cf:c8:47:eb:0b:03:df:e7:ec:36:aa:6b:d8:e9:
d2:bd:27:ad:c8:bd:3c:0e:ce:c2:af:40:25:cf:ae:35:1b:17:
5b:0e:4d:bd:14:df:88:a5:08:8d:03:b0:6f:1c:3a:10:c9:e7:
3c:1c:fc:b6:24:43:e0:47:a4:0f:10:0e:cf:73:67:46:16:d8:
4a:42:5f:b6:6c:a2:aa:ab:9e:e6:e7:1c:7e:20:79:42:bb:03:
2e:bb:d3:fd:61:88:4b:f0:a9:a6:a8:0e:aa:5b:46:72:1e:d0:
32:00:61:68:99:08:6b:bd:7e:b3:6a:08:d0:6b:89:28:52:01:
62:e1:12:0f:84:7e:a8:28:19:99:ba:39:45:c7:01:f7:8b:96:
c6:fb:38:df:52:9c:ce:34:4d:3c:94:43:c7:0a:2b:b1:26:d7:
31:14:56:0e:06:42:79:37:f5:77:2a:a4:de:cc:57:c2:1d:42:
11:b8:cc:68
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QTIx
QkRGRjJEQ0FGQ0MxMzhGNUJGRDZDMDMzMEQwMjE5RTBGNTMyMB4XDTIxMDkwMTAx
MzAyNVoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoN0Y4NTkwNzFDMTgzQkFG
RDA1QzFDNDlENkRCQ0UzRjg4Q0MyRkRDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL6JetRO2w3mJs0ii35HeMnGeogPc0FaQJ4eyrUFPxnqCbGjlvOL
GBAvGWua223ZgC2Wv83gAbwNowJv5vGeWpmZlGgXcpPHYsCUTBbTb1xaorqDLiVE
4s3T0eDSP+WL1Phqm1n+RhxVUj3Ml/FkrSgAz72myqu/2EY7T/wFM5CX4UacFsfc
/HD3ym9YLciUw8Pjiy9IUFMWPwsVUlTjpxU941cFFwAoF+Fx0KjqqZHgo7vjOM0b
w+VLFGnNxjGTnyDPf1IwqGfApqovZbBRH1JOdRQQaJbB/hXzbLG9R36BT7CHtaKH
t84u4xnQNGY5O368z6jpXIiB+zN0bn7c/08CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR/hZBxwYO6/QXBxJ1tvOP4jML9yjAfBgNVHSMEGDAWgBSaIb3/Lcr8wTj1v9bA
Mw0CGeD1MjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ3L21pRzlfeTNLX01FNDliX1d3RE1OQWhuZzlUSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21pRzlfeTNLX01FNDliX1d3RE1OQWhu
ZzlUSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDcvZjRXUWNjR0R1djBGd2NTZGJiemotSXpDX2NvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBZl5IDANBgkqhkiG9w0BAQsFAAOCAQEA
dKBH2JiFPMffWfztfm2EFy6jdfQ6r4GZUDlKx069J5xY6tSOOxKxhHEeR+KU/hdb
YkoEClGX48GZtlrlj0A93kWIz3FLGeiPBrtx0s/IR+sLA9/n7Daqa9jp0r0nrci9
PA7Owq9AJc+uNRsXWw5NvRTfiKUIjQOwbxw6EMnnPBz8tiRD4EekDxAOz3NnRhbY
SkJftmyiqque5uccfiB5QrsDLrvT/WGIS/CppqgOqltGch7QMgBhaJkIa71+s2oI
0GuJKFIBYuESD4R+qCgZmbo5RccB94uWxvs431KczjRNPJRDxworsSbXMRRWDgZC
eTf1dyqk3sxXwh1CEbjMaA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:00:01 2025 by rpki-client