Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/wa9kuD2MjsqRajClgTFfGqrhs40.roa
File: wa9kuD2MjsqRajClgTFfGqrhs40.roa (raw, json)
Hash identifier: mTAAum8y6yk6wylm0cp813/VoP1zhm66G6QxF7NzAJo=
Subject key identifier: C1:AF:64:B8:3D:8C:8E:CA:91:6A:30:A5:81:31:5F:1A:AA:E1:B3:8D
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 31
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/wa9kuD2MjsqRajClgTFfGqrhs40.roa
Signing time: Mon 01 Nov 2021 01:28:29 +0000
ROA not before: Mon 01 Nov 2021 01:28:29 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:29 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=C1AF64B83D8C8ECA916A30A581315F1AAAE1B38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:4c:aa:9a:a8:cc:d5:b8:a2:f9:05:2e:52:
e6:d8:17:7a:80:aa:c6:b8:04:bf:42:03:16:a7:f9:
ea:ca:e6:50:06:01:8b:98:01:ec:bd:cb:cf:30:78:
a2:fd:ee:e3:09:05:af:e6:4b:dd:d4:8f:49:3e:6a:
a2:51:0c:b4:90:b3:a1:7a:5b:d2:73:48:6a:38:2d:
50:08:86:c5:cd:18:03:3d:fa:a3:7a:50:f9:41:d5:
d0:3b:30:fa:ea:55:4a:46:2d:d6:30:de:c8:d7:a9:
19:23:14:99:c5:c3:56:d2:d5:be:b6:62:85:e4:92:
47:a1:a2:af:b4:88:b4:05:70:7e:32:69:aa:25:4f:
9c:41:33:62:ed:77:06:c8:b7:98:d2:b2:99:b1:a3:
56:dd:f3:2f:e5:e6:63:d2:3c:f2:1f:2d:70:5d:ef:
a1:86:cf:02:6f:37:f3:dd:91:53:c6:37:d8:65:71:
3e:2c:83:f8:93:b2:f6:ad:82:48:04:b5:3b:7a:4a:
cf:06:dd:19:2a:31:22:6f:6d:71:40:08:df:54:75:
ea:c2:e9:bf:09:62:82:62:86:2d:3c:33:c7:13:f9:
24:7b:e6:06:22:af:1a:6e:8c:af:94:55:42:89:75:
5a:2e:ae:3d:be:46:c6:02:e8:e8:ab:0e:ea:f1:31:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:64:B8:3D:8C:8E:CA:91:6A:30:A5:81:31:5F:1A:AA:E1:B3:8D
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/wa9kuD2MjsqRajClgTFfGqrhs40.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.216.0/21
Signature Algorithm: sha256WithRSAEncryption
51:c2:19:7c:f2:b8:85:59:17:7f:5a:b5:72:c0:98:20:e3:65:
75:76:7a:1b:2f:a9:48:ad:03:71:91:f0:a9:ce:e0:b0:44:55:
e5:9a:67:c3:ad:21:1d:26:1b:88:7f:c2:3c:18:3b:db:1b:04:
09:92:06:53:e6:c3:d7:d1:91:aa:36:f8:79:d2:f1:11:e6:ea:
e5:fa:60:74:a7:d2:01:8b:e1:8a:c6:2d:10:12:d5:4f:b1:d0:
cd:7e:5d:7a:8b:f9:be:16:85:a6:c1:e6:fa:8e:71:6c:1e:b1:
3c:56:33:6e:b4:4e:9c:a6:05:24:3f:49:a0:e7:f5:bf:55:74:
e8:2d:9d:36:89:bb:5a:0a:c4:40:ba:37:5f:b5:1d:7a:f3:77:
e1:3d:a7:60:86:f2:40:6f:65:a8:b1:d2:ae:fa:5f:92:6b:71:
d4:3b:88:fd:3b:73:47:56:38:18:8e:35:a8:d1:07:40:10:27:
3d:c4:30:e6:3d:25:db:33:dd:bc:a3:8d:e8:7c:a6:9e:53:78:
f5:92:6a:b7:10:e8:d1:5f:22:43:d2:73:e8:65:4a:39:67:43:
3a:21:54:9a:53:2d:76:67:ac:b8:c4:41:ff:90:ca:bf:4a:12:
39:e8:dc:7d:11:f8:70:2a:86:04:6c:4c:34:18:47:bf:ef:17:
e5:ef:91:ea
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5
NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTIxMTEwMTAx
MjgyOVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQzFBRjY0QjgzRDhDOEVD
QTkxNkEzMEE1ODEzMTVGMUFBQUUxQjM4RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/sTKqaqMzVuKL5BS5S5tgXeoCqxrgEv0IDFqf56srmUAYBi5gB
7L3LzzB4ov3u4wkFr+ZL3dSPST5qolEMtJCzoXpb0nNIajgtUAiGxc0YAz36o3pQ
+UHV0Dsw+upVSkYt1jDeyNepGSMUmcXDVtLVvrZiheSSR6Gir7SItAVwfjJpqiVP
nEEzYu13Bsi3mNKymbGjVt3zL+XmY9I88h8tcF3voYbPAm83892RU8Y32GVxPiyD
+JOy9q2CSAS1O3pKzwbdGSoxIm9tcUAI31R16sLpvwligmKGLTwzxxP5JHvmBiKv
Gm6Mr5RVQol1Wi6uPb5GxgLo6KsO6vExak0CAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBTBr2S4PYyOypFqMKWBMV8aquGzjTAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B
SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5
cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi93YTlrdUQyTWpzcVJhakNsZ1RGZkdxcmhzNDAucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDnUHYMA0GCSqGSIb3DQEBCwUAA4IBAQBRwhl8
8riFWRd/WrVywJgg42V1dnobL6lIrQNxkfCpzuCwRFXlmmfDrSEdJhuIf8I8GDvb
GwQJkgZT5sPX0ZGqNvh50vER5url+mB0p9IBi+GKxi0QEtVPsdDNfl16i/m+FoWm
web6jnFsHrE8VjNutE6cpgUkP0mg5/W/VXToLZ02ibtaCsRAujdftR1683fhPadg
hvJAb2WosdKu+l+Sa3HUO4j9O3NHVjgYjjWo0QdAECc9xDDmPSXbM928o43ofKae
U3j1kmq3EOjRXyJD0nPoZUo5Z0M6IVSaUy12Z6y4xEH/kMq/ShI56Nx9EfhwKoYE
bEw0GEe/7xfl75Hq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org