Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/goltG4kIAtf-C9Lrdj024mPsQE0.roa
File: goltG4kIAtf-C9Lrdj024mPsQE0.roa (raw, json)
Hash identifier: RzecnpxE5DtyjYLkYWl60Wd2JGxnNHWSyg6/pXlcNA4=
Subject key identifier: 82:89:6D:1B:89:08:02:D7:FE:0B:D2:EB:76:3D:36:E2:63:EC:40:4D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 55
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/goltG4kIAtf-C9Lrdj024mPsQE0.roa
Signing time: Mon 01 Nov 2021 01:28:29 +0000
ROA not before: Mon 01 Nov 2021 01:28:29 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 202.16.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:29 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=82896D1B890802D7FE0BD2EB763D36E263EC404D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:6a:06:76:c6:a3:07:ca:b1:d4:48:56:bd:
b0:da:79:6e:1c:0f:11:e2:14:e6:e3:ee:99:f8:16:
f9:03:2d:a0:5e:2f:9e:81:d5:f8:95:96:e7:2d:dc:
c5:30:53:3e:3b:a6:f1:e2:a8:1d:ae:48:67:53:be:
ed:6d:12:7b:0e:e0:fc:51:0d:d1:d6:71:8b:57:25:
a4:04:e5:ea:d7:b3:b8:be:15:0f:f4:0d:7f:c3:2e:
7c:95:d0:a7:3f:52:cd:b0:47:cc:0b:f8:49:18:2c:
cd:0b:4a:cc:4b:c9:ec:bf:97:37:f9:38:bb:fa:22:
41:3b:e9:23:eb:b6:42:73:83:e5:95:96:ac:3b:a1:
68:14:90:01:20:0d:d4:91:80:2c:05:9e:67:3f:e3:
ad:a8:00:0d:f3:10:91:84:0a:af:87:2a:1e:e1:29:
b3:cc:25:24:ef:7f:7b:57:e9:e4:6f:9a:6f:8b:64:
d5:27:e4:d8:40:1b:bf:62:73:65:1c:6b:0c:c7:bc:
61:2a:2a:40:6f:9f:cc:7e:dc:87:cb:95:9d:6b:31:
37:37:d1:53:b3:8e:6b:95:0d:6b:84:5f:11:c1:19:
58:ab:d4:93:db:b3:b8:7c:54:07:82:a5:9e:50:16:
f7:c8:39:b6:3e:54:2a:40:6e:bc:d1:7b:46:65:3c:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:6D:1B:89:08:02:D7:FE:0B:D2:EB:76:3D:36:E2:63:EC:40:4D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/goltG4kIAtf-C9Lrdj024mPsQE0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.16.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:62:4f:b7:d0:18:28:32:7f:6b:76:40:d1:d4:cc:ca:46:9a:
07:95:07:e1:0e:9e:66:8c:c9:9f:c3:2c:5e:27:90:cf:bc:39:
24:ef:67:40:fc:2a:75:df:9f:90:bb:5d:59:7e:ae:31:1b:10:
b0:10:e5:da:66:ac:77:7c:e9:7b:25:aa:42:ca:19:b8:2f:9f:
d1:d1:65:e4:b0:67:61:f1:35:bf:52:2f:ad:d3:b9:c3:42:45:
a1:fb:92:b9:1d:53:1e:4d:53:9d:8a:f6:0e:73:bb:bd:02:e8:
64:42:af:67:a1:42:79:4b:db:a5:f7:8d:16:a8:c0:ba:c5:46:
c3:49:cc:3e:ea:e5:fb:2b:a0:8f:a8:30:97:13:46:6a:38:94:
e6:80:48:32:91:18:c5:fb:29:c3:c0:7a:f8:73:ef:ea:ea:76:
0f:7d:27:b7:3e:0f:6f:36:3c:80:b6:35:55:24:44:6d:5b:70:
5d:1a:41:10:9b:a2:d7:bc:a5:f7:8b:79:86:23:13:4c:4e:a6:
d3:dc:f9:f8:db:8e:33:ca:9b:06:8c:17:c0:38:9d:05:32:92:
74:77:bb:a6:4f:1c:d0:ec:1a:81:9f:87:2b:aa:37:a3:10:1a:
be:29:f4:a2:1f:d4:77:26:ca:80:d9:f0:bf:76:5c:56:c4:0b:
2f:b3:58:f3
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgyOVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODI4OTZEMUI4OTA4MDJE
N0ZFMEJEMkVCNzYzRDM2RTI2M0VDNDA0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJDYagZ2xqMHyrHUSFa9sNp5bhwPEeIU5uPumfgW+QMtoF4vnoHV
+JWW5y3cxTBTPjum8eKoHa5IZ1O+7W0Sew7g/FEN0dZxi1clpATl6tezuL4VD/QN
f8MufJXQpz9SzbBHzAv4SRgszQtKzEvJ7L+XN/k4u/oiQTvpI+u2QnOD5ZWWrDuh
aBSQASAN1JGALAWeZz/jragADfMQkYQKr4cqHuEps8wlJO9/e1fp5G+ab4tk1Sfk
2EAbv2JzZRxrDMe8YSoqQG+fzH7ch8uVnWsxNzfRU7OOa5UNa4RfEcEZWKvUk9uz
uHxUB4KlnlAW98g5tj5UKkBuvNF7RmU82dcCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBSCiW0biQgC1/4L0ut2PTbiY+xATTAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9nb2x0RzRrSUF0Zi1DOUxyZGowMjRtUHNRRTAucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDyhBoMA0GCSqGSIb3DQEBCwUAA4IBAQCjYk+3
0BgoMn9rdkDR1MzKRpoHlQfhDp5mjMmfwyxeJ5DPvDkk72dA/Cp135+Qu11Zfq4x
GxCwEOXaZqx3fOl7JapCyhm4L5/R0WXksGdh8TW/Ui+t07nDQkWh+5K5HVMeTVOd
ivYOc7u9AuhkQq9noUJ5S9ul940WqMC6xUbDScw+6uX7K6CPqDCXE0ZqOJTmgEgy
kRjF+ynDwHr4c+/q6nYPfSe3Pg9vNjyAtjVVJERtW3BdGkEQm6LXvKX3i3mGIxNM
TqbT3Pn4244zypsGjBfAOJ0FMpJ0d7umTxzQ7BqBn4crqjejEBq+KfSiH9R3JsqA
2fC/dlxWxAsvs1jz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org