Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iMKzOQ_BFbSlCYgUlOC-Om6A4LQ.roa
File: iMKzOQ_BFbSlCYgUlOC-Om6A4LQ.roa (raw, json)
Hash identifier: NQKO2SUN8oy5q+qlQURJUqZ6yupkbG8EnDEqtkyEkaw=
Subject key identifier: 88:C2:B3:39:0F:C1:15:B4:A5:09:88:14:94:E0:BE:3A:6E:80:E0:B4
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 65
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iMKzOQ_BFbSlCYgUlOC-Om6A4LQ.roa
Signing time: Mon 01 Nov 2021 01:28:34 +0000
ROA not before: Mon 01 Nov 2021 01:28:34 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 202.238.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:34 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=88C2B3390FC115B4A509881494E0BE3A6E80E0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:e2:f3:46:5f:d7:0e:f0:7a:2d:a7:b7:52:
66:fc:b4:ec:ee:f2:cf:db:4a:3c:13:64:a5:c3:98:
89:d4:03:c5:2a:5f:1b:c1:79:c9:af:f4:fa:2d:8a:
42:3a:42:64:10:8e:f4:65:1c:f9:56:e6:ae:f2:16:
70:20:1c:3a:42:2e:89:c3:22:ec:b3:f1:bc:68:c3:
21:21:63:35:f4:a2:3f:36:34:aa:d9:19:78:93:a0:
3b:70:32:76:d4:c1:93:32:6d:5e:f4:b9:4f:75:96:
6f:97:7c:40:1a:18:e6:c1:40:e2:f3:6a:4d:9f:98:
e8:05:c2:08:24:e3:48:2e:4b:48:3f:3e:d0:6e:c6:
46:86:7e:dd:60:cc:13:41:2f:a7:88:aa:62:7b:9b:
68:90:47:2a:f0:06:0c:b3:17:ed:12:78:17:0b:f4:
09:63:1b:76:bd:ee:82:87:e3:f8:29:ad:c3:bc:db:
9f:d0:be:bb:d7:dd:53:21:4a:d9:47:12:3f:a5:a1:
61:d4:9a:3a:97:7f:42:95:a0:fe:70:f8:06:f9:d4:
49:23:d0:e7:6a:19:e8:ca:3c:15:33:3e:ca:59:ff:
aa:57:c5:1e:c8:db:93:63:f7:22:16:03:0d:8c:6f:
80:e4:55:03:4d:3a:c9:77:a1:17:50:c4:78:0b:88:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:B3:39:0F:C1:15:B4:A5:09:88:14:94:E0:BE:3A:6E:80:E0:B4
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iMKzOQ_BFbSlCYgUlOC-Om6A4LQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.238.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:b0:87:8c:62:bd:88:44:18:02:d1:0f:c3:ef:4b:ff:11:5a:
97:8a:d4:7d:e3:d9:ee:43:e0:4d:3b:e4:e6:cc:d1:f2:b6:ff:
7d:03:f0:df:c3:8f:9d:45:8f:ea:45:b6:09:9e:3c:3b:42:fb:
38:e7:4e:ea:96:58:44:71:1b:b6:72:d8:5c:9d:a0:5b:87:23:
b4:a6:07:93:b3:94:18:04:d8:9c:6f:bd:05:6c:c0:dd:06:a2:
38:d7:20:2e:d3:d0:ea:90:f4:8a:c2:0d:6b:7b:05:e5:fe:43:
9c:62:f8:bb:93:00:86:16:2b:b0:f1:0d:64:73:97:69:dd:ee:
10:9e:a8:9d:f0:b3:74:2c:84:bf:89:c7:13:77:db:d7:f0:e4:
15:43:45:78:d2:d6:88:a4:74:4d:e5:0b:eb:0f:35:58:91:45:
85:b4:09:4d:1e:92:52:5a:8e:b8:13:5b:14:e6:5b:2b:fe:47:
7f:44:5b:33:cb:ff:74:07:aa:ad:ff:d8:9e:26:87:26:6f:24:
77:77:3f:68:fb:26:48:0f:7a:f4:36:3f:47:21:0c:fc:29:30:
2c:10:48:ae:82:87:b6:ae:7e:ec:7a:dc:55:8f:f0:ff:7e:16:
bb:21:44:72:99:02:be:0b:ec:47:3e:f0:86:aa:c2:ec:ed:e5:
73:81:ce:e9
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzNFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODhDMkIzMzkwRkMxMTVC
NEE1MDk4ODE0OTRFMEJFM0E2RTgwRTBCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMuh4vNGX9cO8Hotp7dSZvy07O7yz9tKPBNkpcOYidQDxSpfG8F5
ya/0+i2KQjpCZBCO9GUc+VbmrvIWcCAcOkIuicMi7LPxvGjDISFjNfSiPzY0qtkZ
eJOgO3AydtTBkzJtXvS5T3WWb5d8QBoY5sFA4vNqTZ+Y6AXCCCTjSC5LSD8+0G7G
RoZ+3WDME0Evp4iqYnubaJBHKvAGDLMX7RJ4Fwv0CWMbdr3ugofj+Cmtw7zbn9C+
u9fdUyFK2UcSP6WhYdSaOpd/QpWg/nD4BvnUSSPQ52oZ6Mo8FTM+yln/qlfFHsjb
k2P3IhYDDYxvgORVA006yXehF1DEeAuIubECAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBSIwrM5D8EVtKUJiBSU4L46boDgtDAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9pTUt6T1FfQkZiU2xDWWdVbE9DLU9tNkE0TFEucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQGyu7AMA0GCSqGSIb3DQEBCwUAA4IBAQBasIeM
Yr2IRBgC0Q/D70v/EVqXitR949nuQ+BNO+TmzNHytv99A/Dfw4+dRY/qRbYJnjw7
Qvs4507qllhEcRu2cthcnaBbhyO0pgeTs5QYBNicb70FbMDdBqI41yAu09DqkPSK
wg1rewXl/kOcYvi7kwCGFiuw8Q1kc5dp3e4Qnqid8LN0LIS/iccTd9vX8OQVQ0V4
0taIpHRN5QvrDzVYkUWFtAlNHpJSWo64E1sU5lsr/kd/RFszy/90B6qt/9ieJocm
byR3dz9o+yZID3r0Nj9HIQz8KTAsEEiugoe2rn7setxVj/D/fha7IURymQK+C+xH
PvCGqsLs7eVzgc7p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org