Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/CqZPJlX1jd_LiGqUIkL0mS_Cr5A.roa
File: CqZPJlX1jd_LiGqUIkL0mS_Cr5A.roa (raw, json)
Hash identifier: bopuFR0eIFdw2mkp3SttbNhpD3MppfuWlD4tnBCnHLQ=
Subject key identifier: 0A:A6:4F:26:55:F5:8D:DF:CB:88:6A:94:22:42:F4:99:2F:C2:AF:90
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 5C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CqZPJlX1jd_LiGqUIkL0mS_Cr5A.roa
Signing time: Mon 01 Nov 2021 01:28:32 +0000
ROA not before: Mon 01 Nov 2021 01:28:32 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 103.2.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:32 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=0AA64F2655F58DDFCB886A942242F4992FC2AF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:6a:de:d4:c3:ec:6e:5e:73:06:6a:cc:05:
31:39:5c:3a:6b:52:5e:8f:d7:9a:39:e3:c1:a4:1f:
ec:88:77:4a:1c:a2:8a:2e:00:2f:b9:da:c4:96:d9:
48:df:51:5c:2d:ca:bd:31:22:37:c5:25:61:39:97:
77:1f:b4:4e:ab:cc:0b:a1:69:9f:7b:94:8b:b6:eb:
fe:dd:1e:8c:b7:85:7d:db:8c:a4:9d:98:5a:67:0d:
ce:ad:ff:31:09:c9:bb:83:1e:c6:e5:aa:43:fa:80:
29:ae:88:0b:51:51:b0:6d:d6:b4:1c:d6:38:95:ef:
08:9a:1b:63:45:db:5d:79:1a:50:c5:56:c2:7c:1c:
c7:e1:2e:29:90:f8:26:ef:3c:49:53:41:57:89:85:
12:e6:27:4c:26:5b:0a:3a:fb:03:6f:9a:cf:62:5a:
e6:a5:85:da:35:7e:a5:82:a3:26:9f:18:6e:2c:4d:
07:3e:af:d7:39:83:20:fd:0a:f5:3e:69:ba:59:95:
3e:a8:5f:7d:aa:e9:d4:c9:bf:b3:bf:93:e9:61:2e:
cc:54:81:01:ff:00:73:11:f1:e1:34:f9:cf:63:1d:
a5:f9:b9:89:5f:6b:55:75:92:06:d4:c5:31:c0:17:
1b:17:77:9d:da:61:82:6a:cc:ca:dc:2c:76:2d:1b:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:4F:26:55:F5:8D:DF:CB:88:6A:94:22:42:F4:99:2F:C2:AF:90
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CqZPJlX1jd_LiGqUIkL0mS_Cr5A.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.57.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2b:77:2c:2a:e5:45:08:7f:89:2d:26:45:54:78:29:f8:1a:
c0:0e:ef:0a:de:f8:7c:fe:2e:0d:cd:f2:54:b5:81:ed:74:00:
c7:13:44:94:a3:59:78:a2:ae:77:37:d8:58:d8:28:5a:77:21:
18:f8:2e:4b:0b:16:b7:1d:72:78:f3:75:b6:50:1f:ef:43:9b:
06:5c:ed:58:8a:b7:b7:c2:e3:d7:8b:ea:5f:c1:0e:c6:f9:ff:
f5:02:89:32:8f:92:3d:d2:a3:7d:35:8a:40:51:3d:9b:98:b9:
c8:a0:1b:58:8c:fe:5b:f3:1d:cd:73:24:33:80:2f:63:f7:f9:
c0:b9:bb:a3:b0:45:18:b9:f2:01:17:b1:aa:14:bd:a0:97:96:
71:61:29:56:f0:d7:e9:24:58:98:19:93:f9:64:d4:6a:0a:3e:
37:b5:4d:fc:9d:83:7e:62:24:83:d9:e5:8d:8e:2d:0e:bc:ee:
b6:18:05:b2:73:a4:a5:9d:15:ae:43:94:dc:26:8b:f1:02:14:
00:3b:8c:41:f9:f2:05:60:89:4d:56:69:1f:25:a1:44:37:0d:
f0:bc:9f:8b:b0:08:0f:4c:76:27:75:ee:e9:be:86:73:d6:05:
49:54:be:f8:ea:88:89:89:1d:03:e9:d9:2a:d4:7e:95:e5:bd:
eb:67:e4:67
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzMloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMEFBNjRGMjY1NUY1OERE
RkNCODg2QTk0MjI0MkY0OTkyRkMyQUY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMjMat7Uw+xuXnMGaswFMTlcOmtSXo/XmjnjwaQf7Ih3Shyiii4A
L7naxJbZSN9RXC3KvTEiN8UlYTmXdx+0TqvMC6Fpn3uUi7br/t0ejLeFfduMpJ2Y
WmcNzq3/MQnJu4MexuWqQ/qAKa6IC1FRsG3WtBzWOJXvCJobY0XbXXkaUMVWwnwc
x+EuKZD4Ju88SVNBV4mFEuYnTCZbCjr7A2+az2Ja5qWF2jV+pYKjJp8YbixNBz6v
1zmDIP0K9T5pulmVPqhffarp1Mm/s7+T6WEuzFSBAf8AcxHx4TT5z2Mdpfm5iV9r
VXWSBtTFMcAXGxd3ndphgmrMytwsdi0bAQsCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBQKpk8mVfWN38uIapQiQvSZL8KvkDAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9DcVpQSmxYMWpkX0xpR3FVSWtMMG1TX0NyNUEucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAZwI5MA0GCSqGSIb3DQEBCwUAA4IBAQBJK3cs
KuVFCH+JLSZFVHgp+BrADu8K3vh8/i4NzfJUtYHtdADHE0SUo1l4oq53N9hY2Cha
dyEY+C5LCxa3HXJ483W2UB/vQ5sGXO1Yire3wuPXi+pfwQ7G+f/1Aokyj5I90qN9
NYpAUT2bmLnIoBtYjP5b8x3NcyQzgC9j9/nAubujsEUYufIBF7GqFL2gl5ZxYSlW
8NfpJFiYGZP5ZNRqCj43tU38nYN+YiSD2eWNji0OvO62GAWyc6SlnRWuQ5TcJovx
AhQAO4xB+fIFYIlNVmkfJaFENw3wvJ+LsAgPTHYnde7pvoZz1gVJVL746oiJiR0D
6dkq1H6V5b3rZ+Rn
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org