Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/NAxcKLMraABwT_3ljGTSmdlnq4U.roa
File: NAxcKLMraABwT_3ljGTSmdlnq4U.roa (raw, json)
Hash identifier: hvlVaAF0orboeMhyTYrNIf4tjhuKVdlOslZGQFPgzBI=
Subject key identifier: 34:0C:5C:28:B3:2B:68:00:70:4F:FD:E5:8C:64:D2:99:D9:67:AB:85
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: C1
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/NAxcKLMraABwT_3ljGTSmdlnq4U.roa
Signing time: Sun 01 Jan 2023 01:29:13 +0000
ROA not before: Sun 01 Jan 2023 01:29:13 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 10021
IP address blocks: 117.55.216.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:13 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=340C5C28B32B6800704FFDE58C64D299D967AB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:75:44:d4:33:98:fb:00:03:f7:90:39:7e:
fe:c8:d9:a3:4e:c7:ba:0b:70:f6:96:a8:c2:42:68:
56:1b:2d:f4:9e:5c:d7:dd:41:2b:55:3f:94:1f:1d:
4f:17:9a:a9:56:9c:36:56:84:44:20:67:02:83:e2:
e8:b6:27:7c:f5:e1:43:54:e5:d7:6f:9e:7c:1a:db:
e6:9a:c3:bb:bf:87:c2:f5:f0:29:5f:dd:9f:d8:e6:
85:41:28:2f:ac:dc:4c:63:b0:43:7f:c5:19:4d:9e:
bf:e8:9e:4c:43:fb:76:05:0f:9b:61:21:b2:3c:65:
9e:ac:1d:3e:80:f7:c8:c1:0c:98:fa:01:ca:fb:1c:
86:27:5c:2d:9d:9a:92:3a:07:7a:c4:06:73:1c:02:
8c:6f:b7:a6:66:3d:c6:f3:dc:39:1c:e5:ba:a6:19:
13:ce:3e:0d:08:2d:84:7b:ad:97:a3:1f:a9:d1:8b:
fb:bf:8d:c4:37:c6:48:98:9c:c2:95:24:11:72:e8:
17:91:9a:30:6a:4a:53:eb:6a:c8:8b:3a:06:1f:07:
c1:b5:16:c4:c0:c5:1e:28:ab:5f:db:00:07:ee:cf:
4b:b2:ed:c8:93:c1:ae:0c:2e:f7:09:19:07:a5:57:
5e:65:b8:4b:a9:c2:42:19:53:3d:70:70:02:3a:87:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:5C:28:B3:2B:68:00:70:4F:FD:E5:8C:64:D2:99:D9:67:AB:85
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/NAxcKLMraABwT_3ljGTSmdlnq4U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.216.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:3d:8c:46:cb:13:35:43:c3:86:cb:eb:9c:a7:e1:3d:b8:98:
77:40:2f:41:44:76:8a:5c:4d:75:43:6a:6e:58:d3:01:19:36:
3d:b4:47:b3:00:7f:91:ee:bb:eb:2e:08:98:42:df:a1:6b:00:
5a:3c:c1:0f:bc:12:71:d8:8d:d9:fd:97:31:e3:93:57:1f:05:
cb:01:2c:69:18:23:4f:e4:d2:7e:07:01:8c:02:6d:31:5a:55:
78:41:fa:b5:7b:42:a4:51:6f:15:a5:e2:91:d4:ac:5f:c0:67:
15:3f:07:7a:d5:3a:8f:74:d8:37:02:b6:f3:f5:31:c3:be:cf:
5f:60:d3:28:8b:e7:57:37:ae:8d:8f:f1:02:96:ea:b9:96:c0:
83:17:00:d6:eb:86:2b:55:86:78:ce:50:b9:5a:0a:35:a0:c9:
6c:2c:df:79:e8:f4:20:0a:a9:90:e6:ec:1c:b4:5f:0b:f0:0f:
d7:67:90:a0:b5:8d:d2:03:e9:d0:4e:cd:5c:f3:c2:9f:8c:76:
6a:41:02:55:98:e5:e1:c9:55:da:9f:ee:5d:08:b3:f8:94:af:
ba:d9:d9:b1:fd:6e:99:43:12:7c:22:0d:79:6c:81:83:94:a8:
a9:4b:44:ab:c7:cf:cc:0d:98:ca:f1:04:14:74:66:2a:fe:2f:
f8:52:cd:8f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzAxMDEw
MTI5MTNaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0MEM1QzI4QjMyQjY4
MDA3MDRGRkRFNThDNjREMjk5RDk2N0FCODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/WnVE1DOY+wAD95A5fv7I2aNOx7oLcPaWqMJCaFYbLfSeXNfd
QStVP5QfHU8XmqlWnDZWhEQgZwKD4ui2J3z14UNU5ddvnnwa2+aaw7u/h8L18Clf
3Z/Y5oVBKC+s3ExjsEN/xRlNnr/onkxD+3YFD5thIbI8ZZ6sHT6A98jBDJj6Acr7
HIYnXC2dmpI6B3rEBnMcAoxvt6ZmPcbz3Dkc5bqmGRPOPg0ILYR7rZejH6nRi/u/
jcQ3xkiYnMKVJBFy6BeRmjBqSlPrasiLOgYfB8G1FsTAxR4oq1/bAAfuz0uy7ciT
wa4MLvcJGQelV15luEupwkIZUz1wcAI6hyHtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNAxcKLMraABwT/3ljGTSmdlnq4UwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L05BeGNLTE1yYUFCd1RfM2xqR1RTbWRsbnE0VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN1N9gwDQYJKoZIhvcNAQELBQADggEBALw9jEbLEzVDw4bL65yn4T24mHdA
L0FEdopcTXVDam5Y0wEZNj20R7MAf5Huu+suCJhC36FrAFo8wQ+8EnHYjdn9lzHj
k1cfBcsBLGkYI0/k0n4HAYwCbTFaVXhB+rV7QqRRbxWl4pHUrF/AZxU/B3rVOo90
2DcCtvP1McO+z19g0yiL51c3ro2P8QKW6rmWwIMXANbrhitVhnjOULlaCjWgyWws
33no9CAKqZDm7By0XwvwD9dnkKC1jdID6dBOzVzzwp+MdmpBAlWY5eHJVdqf7l0I
s/iUr7rZ2bH9bplDEnwiDXlsgYOUqKlLRKvHz8wNmMrxBBR0Zir+L/hSzY8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org