Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/zM2UDRJiP5c38lmc2daOnYDPgTA.roa
File: zM2UDRJiP5c38lmc2daOnYDPgTA.roa (raw, json)
Hash identifier: sLiYou4nsSRvbF3x9ghwtsZwn3Ca6v5wKVq7JG3PvJc=
Subject key identifier: CC:CD:94:0D:12:62:3F:97:37:F2:59:9C:D9:D6:8E:9D:80:CF:81:30
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 88
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zM2UDRJiP5c38lmc2daOnYDPgTA.roa
Signing time: Wed 29 Dec 2021 09:13:37 +0000
ROA not before: Wed 29 Dec 2021 09:13:37 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 32787
IP address blocks: 210.130.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 29 09:13:37 2021 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=CCCD940D12623F9737F2599CD9D68E9D80CF8130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:77:f6:a5:1a:80:77:5b:70:29:ee:86:16:
68:1d:d5:34:b9:fd:7b:25:f3:bf:cb:42:3f:24:c7:
81:d0:7f:6b:f2:57:59:af:b9:58:3a:e6:6e:f4:1e:
2a:00:e4:f4:ed:59:41:1e:38:6e:cb:25:d0:a7:65:
f8:f5:39:2c:ad:d0:84:a9:21:87:75:c0:56:4d:e3:
9a:e7:94:c2:a4:f8:c1:39:2b:2c:45:e6:c6:91:df:
41:56:c5:f7:c5:2a:ec:7a:00:ae:8e:e3:9e:9e:db:
27:c9:32:e3:31:71:27:4e:24:61:d8:82:ba:1d:95:
cb:a6:d2:17:b3:f7:c8:04:02:ba:17:10:fd:91:7c:
37:cb:2c:3d:4c:c6:2c:b3:96:69:21:65:19:cb:7c:
87:b2:34:25:00:79:35:d6:42:67:64:ba:03:11:1c:
b9:a0:bb:16:bb:40:fb:87:37:32:aa:4c:e9:82:ba:
24:fe:aa:e1:01:11:b1:b0:e4:6d:70:29:af:dd:e6:
26:91:86:eb:81:6c:7d:9b:2f:40:73:5b:5f:5a:16:
6f:95:f9:e9:28:eb:be:57:d5:3f:c7:01:65:f7:8c:
97:f6:d3:40:73:18:d2:f6:45:ed:de:e5:0c:94:41:
b1:57:cb:4e:65:e4:22:b0:1d:ab:ae:34:fe:ea:0d:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:94:0D:12:62:3F:97:37:F2:59:9C:D9:D6:8E:9D:80:CF:81:30
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zM2UDRJiP5c38lmc2daOnYDPgTA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f6:3d:15:2a:70:5e:0a:8c:ca:ce:c4:65:27:d5:d7:c1:bf:
f3:20:98:69:e1:5b:15:86:a8:0f:8f:c2:92:60:2c:a7:d3:81:
eb:34:ba:d0:e8:29:e5:ad:d9:ca:fa:d8:17:db:29:67:c8:5b:
1e:d0:b5:8a:55:06:c2:f0:b8:aa:d5:7b:eb:f8:9f:18:c6:07:
bd:f6:c7:07:ee:4e:25:44:b3:91:9c:1f:92:4e:f8:8c:4e:d0:
94:75:dc:5e:c3:96:39:fe:77:a9:5f:81:25:d3:1f:f7:ff:66:
f7:93:62:cf:f2:46:63:8f:f0:cc:04:a3:c1:85:a4:1e:4e:a8:
c5:9b:a5:67:0e:81:e3:28:58:71:1c:bf:bb:52:d9:05:a4:cb:
b2:17:d1:6a:b6:6b:13:be:53:4a:3f:7a:d2:ba:6e:19:e7:5a:
47:9c:8d:da:91:1b:0c:7d:f2:80:bd:f5:57:3a:3c:1a:f8:65:
76:31:5b:29:f5:97:1f:d3:b8:a9:02:d3:28:e6:10:cb:06:3a:
78:d1:ac:44:3c:98:5f:50:f1:f5:cb:ff:ec:ba:c3:62:9b:f9:
6e:b3:03:09:1d:e8:03:40:a7:5c:24:d1:97:01:25:30:fc:3d:
29:fa:e7:16:27:2c:8e:11:07:6b:a7:06:1e:f6:0a:93:8c:f0:
95:c3:07:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMTEyMjkw
OTEzMzdaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDQ0Q5NDBEMTI2MjNG
OTczN0YyNTk5Q0Q5RDY4RTlEODBDRjgxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEl3f2pRqAd1twKe6GFmgd1TS5/Xsl87/LQj8kx4HQf2vyV1mv
uVg65m70HioA5PTtWUEeOG7LJdCnZfj1OSyt0ISpIYd1wFZN45rnlMKk+ME5KyxF
5saR30FWxffFKux6AK6O456e2yfJMuMxcSdOJGHYgrodlcum0hez98gEAroXEP2R
fDfLLD1MxiyzlmkhZRnLfIeyNCUAeTXWQmdkugMRHLmguxa7QPuHNzKqTOmCuiT+
quEBEbGw5G1wKa/d5iaRhuuBbH2bL0BzW19aFm+V+eko675X1T/HAWX3jJf200Bz
GNL2Re3e5QyUQbFXy05l5CKwHauuNP7qDZtLAgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUzM2UDRJiP5c38lmc2daOnYDPgTAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvek0yVURSSmlQNWMzOGxtYzJkYU9uWURQZ1RBLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEANKC0TANBgkqhkiG9w0BAQsFAAOCAQEAp/Y9
FSpwXgqMys7EZSfV18G/8yCYaeFbFYaoD4/CkmAsp9OB6zS60Ogp5a3ZyvrYF9sp
Z8hbHtC1ilUGwvC4qtV76/ifGMYHvfbHB+5OJUSzkZwfkk74jE7QlHXcXsOWOf53
qV+BJdMf9/9m95Niz/JGY4/wzASjwYWkHk6oxZulZw6B4yhYcRy/u1LZBaTLshfR
arZrE75TSj960rpuGedaR5yN2pEbDH3ygL31Vzo8GvhldjFbKfWXH9O4qQLTKOYQ
ywY6eNGsRDyYX1Dx9cv/7LrDYpv5brMDCR3oA0CnXCTRlwElMPw9KfrnFicsjhEH
a6cGHvYKk4zwlcMHrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org