Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/PBkKJLRTdTLNu9lrX5bWRk-ziGs.roa
File: PBkKJLRTdTLNu9lrX5bWRk-ziGs.roa (raw, json)
Hash identifier: kUdux8G8ZznIgBat6OHKLe713SROB6Kgxn2AB9nzkfA=
Subject key identifier: 3C:19:0A:24:B4:53:75:32:CD:BB:D9:6B:5F:96:D6:46:4F:B3:88:6B
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0108
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/PBkKJLRTdTLNu9lrX5bWRk-ziGs.roa
Signing time: Sat 01 Jan 2022 01:31:17 +0000
ROA not before: Sat 01 Jan 2022 01:31:17 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 112.78.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:17 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=3C190A24B4537532CDBBD96B5F96D6464FB3886B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:41:3f:b4:3c:13:ad:da:23:17:f1:de:05:
66:57:66:0b:51:33:a1:88:6a:8d:a1:bb:50:48:03:
8c:03:40:88:37:0b:0f:de:c4:6c:3e:34:ba:b2:71:
e2:11:98:5f:71:74:58:be:fa:07:60:4b:d9:90:30:
d6:b6:82:f1:03:e5:8b:2b:8f:bc:8c:73:a1:fb:d1:
a9:dd:56:6b:c8:fb:98:8e:f4:d3:77:3a:e8:3f:67:
38:3a:ae:d7:6d:f8:9e:45:ff:d1:b2:4d:a3:f2:15:
d3:de:d7:85:8e:03:8d:3d:bc:74:aa:bb:7f:78:ac:
3a:de:3c:d6:0e:21:2c:0a:f0:aa:f4:57:74:11:5d:
06:b8:9f:eb:ca:c3:16:8d:58:1e:b5:b4:c9:ae:2e:
07:14:28:d5:be:55:80:33:fe:7c:ee:4a:82:06:81:
fd:e4:2d:5d:1b:da:92:54:79:b8:7b:06:7d:30:1d:
19:75:b8:96:c3:a6:7d:99:a7:b9:4d:c4:62:76:10:
45:bb:eb:7c:ea:ae:02:e3:5e:b1:3d:e2:97:6e:d0:
56:ac:71:bf:97:bd:dc:69:68:7e:8a:fd:28:a1:a9:
a5:f4:26:3f:52:8e:59:3d:a1:49:e3:e8:ac:86:de:
3b:0a:40:06:11:96:b3:19:10:39:e0:5a:68:9f:22:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:0A:24:B4:53:75:32:CD:BB:D9:6B:5F:96:D6:46:4F:B3:88:6B
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/PBkKJLRTdTLNu9lrX5bWRk-ziGs.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.112.0/20
Signature Algorithm: sha256WithRSAEncryption
55:e4:40:29:30:20:70:3f:85:e4:73:03:c8:4c:68:03:8c:a3:
ab:2a:22:34:3e:71:fa:c1:7e:ba:a8:93:66:23:29:6b:71:a8:
f9:af:83:1b:6e:b5:1e:93:18:76:43:eb:d4:80:9b:be:f7:2b:
15:08:ec:51:bb:85:f0:77:16:fd:f4:3c:56:4b:74:d3:13:63:
a5:4d:20:aa:cc:09:0d:d0:6b:d1:0b:07:8b:a8:5a:8d:1f:4d:
ee:a5:a1:80:42:6c:84:88:cb:f9:b3:0f:c0:22:0b:59:c2:0f:
b8:23:03:bc:87:b3:36:57:68:20:36:90:e8:87:ec:5c:c1:24:
1b:ac:67:ea:b1:77:27:0b:dd:60:a0:da:5d:64:24:0b:fd:a4:
3f:95:96:ae:9a:19:6f:15:43:7f:da:62:2e:98:92:f1:c4:19:
81:cb:27:79:96:f8:f5:fc:82:f7:3e:6a:94:58:0b:cd:93:35:
07:38:b6:1f:fb:df:3e:4e:b3:26:c7:7f:06:49:9f:9c:fd:d7:
e5:35:18:81:67:cd:6b:8d:13:60:27:bc:38:da:3e:fa:d6:18:
93:e6:bf:a9:e7:7d:ba:99:78:9e:84:6a:fd:5a:f5:25:f7:f9:
fd:14:b1:69:6d:90:86:c0:16:c7:14:bc:bf:0f:56:34:39:f9:
a7:83:fd:53
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMxMTdaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDMTkwQTI0QjQ1Mzc1
MzJDREJCRDk2QjVGOTZENjQ2NEZCMzg4NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU/0E/tDwTrdojF/HeBWZXZgtRM6GIao2hu1BIA4wDQIg3Cw/e
xGw+NLqyceIRmF9xdFi++gdgS9mQMNa2gvED5Ysrj7yMc6H70andVmvI+5iO9NN3
Oug/Zzg6rtdt+J5F/9GyTaPyFdPe14WOA409vHSqu394rDrePNYOISwK8Kr0V3QR
XQa4n+vKwxaNWB61tMmuLgcUKNW+VYAz/nzuSoIGgf3kLV0b2pJUebh7Bn0wHRl1
uJbDpn2Zp7lNxGJ2EEW763zqrgLjXrE94pdu0Fascb+XvdxpaH6K/SihqaX0Jj9S
jlk9oUnj6KyG3jsKQAYRlrMZEDngWmifIjIbAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUPBkKJLRTdTLNu9lrX5bWRk+ziGswHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9QQmtLSkxSVGRUTE51OWxyWDViV1JrLXppR3Mucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcE5wMA0GCSqGSIb3DQEBCwUA
A4IBAQBV5EApMCBwP4XkcwPITGgDjKOrKiI0PnH6wX66qJNmIylrcaj5r4MbbrUe
kxh2Q+vUgJu+9ysVCOxRu4Xwdxb99DxWS3TTE2OlTSCqzAkN0GvRCweLqFqNH03u
paGAQmyEiMv5sw/AIgtZwg+4IwO8h7M2V2ggNpDoh+xcwSQbrGfqsXcnC91goNpd
ZCQL/aQ/lZaumhlvFUN/2mIumJLxxBmByyd5lvj1/IL3PmqUWAvNkzUHOLYf+98+
TrMmx38GSZ+c/dflNRiBZ81rjRNgJ7w42j761hiT5r+p5326mXiehGr9WvUl9/n9
FLFpbZCGwBbHFLy/D1Y0Ofmng/1T
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org