Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KwoAp1uEX3yEOLZUGNYKizDx_w.roa
File: 8KwoAp1uEX3yEOLZUGNYKizDx_w.roa (raw, json)
Hash identifier: SeKjM6SB01QaSZtEbhDlIEMgJLtnerhHUxWHJRrNJ1I=
Subject key identifier: F0:AC:28:02:9D:6E:11:7D:F2:10:E2:D9:50:63:58:2A:2C:C3:C7:FC
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: E4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KwoAp1uEX3yEOLZUGNYKizDx_w.roa
Signing time: Wed 01 Feb 2023 01:29:14 +0000
ROA not before: Wed 01 Feb 2023 01:29:14 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 2497
IP address blocks: 220.156.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Feb 1 01:29:14 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=F0AC28029D6E117DF210E2D95063582A2CC3C7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:3b:48:27:fc:e2:14:75:b7:6d:35:31:cc:
44:85:d3:b0:ff:26:c5:5c:24:28:b0:54:7e:54:52:
b6:aa:f4:bd:7b:73:3c:8c:c9:3f:9e:f6:99:64:41:
10:ec:4e:a9:3c:bc:66:10:2e:d3:8b:1d:6c:cd:d9:
5f:4a:35:f6:79:da:73:b8:f8:bb:f9:0b:47:a3:c8:
21:c0:ed:e7:a9:cc:18:a2:2d:64:50:e7:51:5b:ae:
69:2d:89:5e:e6:f7:2e:c9:d8:50:a1:db:06:d1:ca:
89:0f:5e:8c:82:2e:d2:ab:5d:a6:cc:07:45:2f:4e:
ec:ec:0b:68:10:3d:a0:7a:5e:ab:d7:33:73:3d:05:
68:3d:bb:5d:c1:9c:44:54:fc:3b:9e:e9:0a:4e:cf:
aa:f5:27:89:c4:0b:35:67:59:40:8a:6d:03:1b:50:
3c:8f:e7:12:ab:70:15:5e:2a:c5:d7:cd:0c:f3:50:
93:4a:b9:84:52:e2:eb:b9:34:4a:c2:0b:35:81:53:
0f:08:bf:6c:a2:c6:93:dc:83:47:3c:df:30:6c:cd:
11:8e:ad:fb:70:0c:9f:09:63:30:60:c9:1e:25:c7:
20:56:5b:dd:92:44:44:52:e4:b1:b9:61:c1:68:64:
6d:e4:34:2f:bb:f2:96:55:7c:a9:e9:e5:23:2e:3d:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:28:02:9D:6E:11:7D:F2:10:E2:D9:50:63:58:2A:2C:C3:C7:FC
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8KwoAp1uEX3yEOLZUGNYKizDx_w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.156.64.0/19
Signature Algorithm: sha256WithRSAEncryption
85:4b:bb:77:1a:74:f7:9a:ab:57:9a:59:42:e6:22:7a:a4:07:
30:c0:f7:28:a0:82:ac:bf:f7:9d:b0:5a:6d:11:b5:ce:0a:6d:
9f:42:54:1b:be:a9:05:e4:db:8c:1c:7d:8f:0a:44:0a:68:50:
6c:5b:2b:f3:42:ac:3b:6d:64:58:e9:b0:fa:0a:ba:c4:4f:a3:
45:55:3d:85:7d:21:91:e9:80:92:e5:ee:50:54:9c:29:85:eb:
dd:7e:79:bb:fc:7d:9f:ca:13:e4:8b:06:76:68:7c:97:d3:37:
6a:9d:d3:a5:60:63:bc:68:27:35:8e:ec:45:53:9d:0d:0f:cc:
2b:5a:1b:74:0c:6f:09:ef:01:2a:2c:13:d9:9d:bf:2a:9f:93:
1b:42:d7:6d:7e:96:0c:17:2c:4d:1d:fa:63:bc:40:20:bd:fd:
95:fc:47:7a:f0:31:f5:42:22:9a:09:85:9b:0d:af:2c:26:9a:
d6:be:8c:4d:d6:39:86:03:1f:d7:88:9e:b0:90:fb:ba:5a:6e:
8b:69:f6:72:a8:a9:60:57:a6:3b:ab:53:0e:87:3a:3a:10:ae:
b2:38:0d:25:ac:8d:59:79:99:87:fe:0b:3a:1b:e9:af:a5:4b:
fd:42:58:c2:f0:e1:0a:45:94:38:02:51:97:9b:d5:15:e7:10:
92:87:6e:82
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzAyMDEw
MTI5MTRaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwQUMyODAyOUQ2RTEx
N0RGMjEwRTJEOTUwNjM1ODJBMkNDM0M3RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdzztIJ/ziFHW3bTUxzESF07D/JsVcJCiwVH5UUraq9L17czyM
yT+e9plkQRDsTqk8vGYQLtOLHWzN2V9KNfZ52nO4+Lv5C0ejyCHA7eepzBiiLWRQ
51FbrmktiV7m9y7J2FCh2wbRyokPXoyCLtKrXabMB0UvTuzsC2gQPaB6XqvXM3M9
BWg9u13BnERU/Due6QpOz6r1J4nECzVnWUCKbQMbUDyP5xKrcBVeKsXXzQzzUJNK
uYRS4uu5NErCCzWBUw8Iv2yixpPcg0c83zBszRGOrftwDJ8JYzBgyR4lxyBWW92S
RERS5LG5YcFoZG3kNC+78pZVfKnp5SMuPVYrAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQU8KwoAp1uEX3yEOLZUGNYKizDx/wwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvOEt3b0FwMXVFWDN5RU9MWlVHTllLaXpEeF93LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdycQDANBgkqhkiG9w0BAQsFAAOCAQEAhUu7dxp095qrV5pZQuYieqQHMMD3KKCC
rL/3nbBabRG1zgptn0JUG76pBeTbjBx9jwpECmhQbFsr80KsO21kWOmw+gq6xE+j
RVU9hX0hkemAkuXuUFScKYXr3X55u/x9n8oT5IsGdmh8l9M3ap3TpWBjvGgnNY7s
RVOdDQ/MK1obdAxvCe8BKiwT2Z2/Kp+TG0LXbX6WDBcsTR36Y7xAIL39lfxHevAx
9UIimgmFmw2vLCaa1r6MTdY5hgMf14iesJD7ulpui2n2cqipYFemO6tTDoc6OhCu
sjgNJayNWXmZh/4LOhvpr6VL/UJYwvDhCkWUOAJRl5vVFecQkodugg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org