Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/bwzXVsvEAWNaZxZ4jXxm8S6wxIo.roa
File: bwzXVsvEAWNaZxZ4jXxm8S6wxIo.roa (raw, json)
Hash identifier: 2P5zs42ugbZTSBAcDZjSMCmwjHxJ62QA+ClhrtJEL/0=
Subject key identifier: 6F:0C:D7:56:CB:C4:01:63:5A:67:16:78:8D:7C:66:F1:2E:B0:C4:8A
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 5B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/bwzXVsvEAWNaZxZ4jXxm8S6wxIo.roa
Signing time: Mon 01 Nov 2021 01:28:32 +0000
ROA not before: Mon 01 Nov 2021 01:28:32 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 49.239.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:32 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=6F0CD756CBC401635A6716788D7C66F12EB0C48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:36:1f:0b:3f:89:c0:15:94:7a:88:b3:eb:
8d:e5:22:d1:7c:93:96:e3:8e:a9:4e:06:19:55:82:
07:78:e0:9a:38:88:d7:8f:32:a6:44:61:7e:45:3d:
e0:f9:0c:3f:e3:8c:c0:12:5f:79:1c:fc:d8:d9:1d:
31:e3:f1:5e:16:19:d5:70:6a:98:59:b3:db:b7:c0:
a0:3b:b5:1b:8c:91:d5:af:df:15:3a:2a:af:80:e4:
40:78:5c:cb:0b:50:91:b2:c1:e3:18:3d:b9:20:37:
ec:9a:46:91:ee:1a:2f:d6:76:69:cc:0d:3c:40:e3:
aa:44:e2:65:7c:48:f3:16:a1:f2:c1:dc:98:cd:4f:
22:c2:84:a9:60:67:4a:8a:9e:e3:71:6b:c8:54:39:
e0:59:00:00:21:cb:17:83:0d:94:4d:74:00:58:87:
ca:6f:e7:17:b9:1b:ff:7d:e9:6c:cc:10:d5:a3:e9:
4f:65:74:fe:79:e7:bd:d9:11:3a:fb:72:79:f4:cf:
b5:40:48:05:46:a6:1f:7f:eb:0a:48:fe:84:72:b8:
93:57:57:7d:ce:ae:93:bb:a3:a6:57:f7:a2:38:9a:
83:c6:3b:00:b8:2b:fd:22:3c:78:ec:ab:7b:f0:83:
14:c6:cc:a3:2b:68:47:51:0d:b6:56:b3:b1:cd:21:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0C:D7:56:CB:C4:01:63:5A:67:16:78:8D:7C:66:F1:2E:B0:C4:8A
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/bwzXVsvEAWNaZxZ4jXxm8S6wxIo.roa
sbgp-ipAddrBlock: critical
IPv4:
49.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:0c:b1:aa:a2:c0:ea:e9:a5:6b:b4:14:9e:8c:eb:0c:76:ea:
2a:dd:42:fa:7b:0e:3e:62:fe:4a:36:62:da:97:0e:6a:18:02:
aa:bf:b9:7b:50:dc:91:1e:0c:82:a9:0f:07:34:26:32:79:f5:
2b:d0:45:2b:5f:12:61:ba:a9:01:42:a4:e2:9f:9f:f4:fd:ee:
35:23:43:40:69:be:65:50:78:69:bc:18:10:ce:51:76:a5:94:
22:9f:d0:22:aa:16:cf:46:4c:47:1f:62:fb:90:9e:f0:80:b4:
70:91:0c:e2:59:df:55:54:a0:30:3a:ae:77:cb:20:b4:86:b6:
2e:a5:f0:b7:0f:aa:3c:94:2a:14:02:50:a0:b1:6a:6a:0e:50:
30:7f:d0:9a:dc:b0:3f:78:8a:92:1b:70:cf:87:dd:15:16:ce:
84:80:61:44:ba:10:80:d1:97:3c:8f:fc:43:c4:81:3b:b4:1e:
75:e7:3a:85:1b:bd:69:fe:7d:3f:55:1b:fb:e7:95:a9:48:bf:
47:d7:46:63:e0:7e:dd:ee:df:39:00:f4:db:3c:62:27:73:59:
6b:19:e3:0f:c6:16:f5:05:18:e3:e9:f5:e3:e1:7d:09:96:cc:
8f:d3:a6:78:66:18:4a:9c:21:37:2c:da:c5:5f:f0:c1:96:a6:
e4:ee:58:43
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzMloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNkYwQ0Q3NTZDQkM0MDE2
MzVBNjcxNjc4OEQ3QzY2RjEyRUIwQzQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN9qNh8LP4nAFZR6iLPrjeUi0XyTluOOqU4GGVWCB3jgmjiI148y
pkRhfkU94PkMP+OMwBJfeRz82NkdMePxXhYZ1XBqmFmz27fAoDu1G4yR1a/fFToq
r4DkQHhcywtQkbLB4xg9uSA37JpGke4aL9Z2acwNPEDjqkTiZXxI8xah8sHcmM1P
IsKEqWBnSoqe43FryFQ54FkAACHLF4MNlE10AFiHym/nF7kb/33pbMwQ1aPpT2V0
/nnnvdkROvtyefTPtUBIBUamH3/rCkj+hHK4k1dXfc6uk7ujplf3ojiag8Y7ALgr
/SI8eOyre/CDFMbMoytoR1ENtlazsc0hQ+ECAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBRvDNdWy8QBY1pnFniNfGbxLrDEijAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9id3pYVnN2RUFXTmFaeFo0alh4bThTNnd4SW8ucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQGMe9AMA0GCSqGSIb3DQEBCwUAA4IBAQBKDLGq
osDq6aVrtBSejOsMduoq3UL6ew4+Yv5KNmLalw5qGAKqv7l7UNyRHgyCqQ8HNCYy
efUr0EUrXxJhuqkBQqTin5/0/e41I0NAab5lUHhpvBgQzlF2pZQin9AiqhbPRkxH
H2L7kJ7wgLRwkQziWd9VVKAwOq53yyC0hrYupfC3D6o8lCoUAlCgsWpqDlAwf9Ca
3LA/eIqSG3DPh90VFs6EgGFEuhCA0Zc8j/xDxIE7tB515zqFG71p/n0/VRv755Wp
SL9H10Zj4H7d7t85APTbPGInc1lrGeMPxhb1BRjj6fXj4X0JlsyP06Z4ZhhKnCE3
LNrFX/DBlqbk7lhD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org