Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RvnfLlDl7UUnou70uJBVulY7p0g.roa
File: RvnfLlDl7UUnou70uJBVulY7p0g.roa (raw, json)
Hash identifier: IfCfox4Pon54S3r2W/9+9JyBrHEuMPNd/cyh6HdMLGQ=
Subject key identifier: 46:F9:DF:2E:50:E5:ED:45:27:A2:EE:F4:B8:90:55:BA:56:3B:A7:48
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0106
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RvnfLlDl7UUnou70uJBVulY7p0g.roa
Signing time: Sat 01 Jan 2022 01:31:17 +0000
ROA not before: Sat 01 Jan 2022 01:31:17 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 10013
IP address blocks: 210.188.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:17 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=46F9DF2E50E5ED4527A2EEF4B89055BA563BA748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:37:9a:e4:6f:64:a9:fc:36:bd:67:ec:4f:
14:9f:49:a6:37:de:3f:03:ed:e5:8d:bf:08:2c:06:
97:f5:5f:26:68:19:85:8b:f3:08:4c:5e:28:84:07:
59:fb:87:f8:9a:34:5e:98:e1:2b:98:99:ad:9e:de:
5b:d5:48:11:48:86:8a:7b:78:52:aa:c8:cc:aa:f5:
93:9f:ef:c4:96:b0:14:d0:de:94:25:09:0f:43:03:
69:39:e3:e9:a4:08:49:f1:f2:7e:87:92:ad:3a:27:
d2:f1:4a:1b:41:eb:4b:10:26:dd:d9:d1:c8:2c:38:
e6:db:6c:9d:01:3d:33:5e:15:89:83:14:d6:97:b7:
e6:c3:09:b2:8c:4d:43:8c:9a:d1:92:96:6a:a3:37:
23:4f:71:66:e6:a7:a5:d9:6e:b2:4b:99:9f:78:fc:
80:7c:c3:b5:42:04:f0:48:6f:2e:72:81:32:af:57:
a1:65:83:b8:0c:36:17:d5:4f:47:f4:89:86:0a:6a:
5a:9c:a8:ff:52:1a:5f:ab:9d:5b:8d:21:db:df:d2:
0d:67:88:76:41:65:e1:9e:26:36:d1:14:81:87:b1:
e9:f6:ba:74:0f:4e:ef:1c:0b:4f:f7:d8:84:73:44:
b0:4c:6e:84:a9:ba:eb:b5:b5:c1:39:72:36:55:fb:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:DF:2E:50:E5:ED:45:27:A2:EE:F4:B8:90:55:BA:56:3B:A7:48
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RvnfLlDl7UUnou70uJBVulY7p0g.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:6a:03:8a:29:7f:30:86:b3:f8:9f:80:f8:a5:73:cd:91:96:
0d:27:a5:25:c5:46:69:5d:41:ab:08:7f:4d:37:49:35:1b:8b:
0b:9a:82:4a:f1:ee:27:7d:ac:46:f0:b3:6a:21:45:0b:d8:0a:
b9:46:51:17:55:d9:f9:4d:b7:f3:95:2d:9d:65:56:8c:81:63:
f8:09:31:e6:18:93:d0:96:fd:5d:ba:89:ce:1b:ac:92:08:fe:
69:b5:9d:a2:57:b5:23:02:27:b5:87:02:4d:f5:1f:1c:44:e8:
fa:bb:32:0f:5b:14:0c:48:1a:2e:5f:d4:dc:1b:ad:cb:75:c4:
5f:8f:de:49:4e:93:f3:84:bf:37:d1:a3:63:31:1c:20:7c:31:
4e:53:49:38:1c:d2:d0:2d:a9:ce:ee:f6:7c:aa:4d:21:52:43:
ee:3c:34:9c:75:0c:83:bb:86:31:81:82:0b:6a:8e:95:e7:4b:
c4:0e:4e:b8:24:a4:3f:1f:45:5d:e0:53:77:ef:a9:95:eb:a1:
a8:2a:fc:51:51:9e:9f:49:39:0f:a4:91:60:d1:ad:5c:3b:0c:
49:b1:dd:c7:37:68:37:38:82:ad:9c:e5:3b:56:3d:b6:ea:ad:
93:f1:c3:91:1b:75:00:52:1f:c6:ec:ae:14:6e:0d:67:74:c6:
65:25:60:f9
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMxMTdaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2RjlERjJFNTBFNUVE
NDUyN0EyRUVGNEI4OTA1NUJBNTYzQkE3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjHTea5G9kqfw2vWfsTxSfSaY33j8D7eWNvwgsBpf1XyZoGYWL
8whMXiiEB1n7h/iaNF6Y4SuYma2e3lvVSBFIhop7eFKqyMyq9ZOf78SWsBTQ3pQl
CQ9DA2k54+mkCEnx8n6Hkq06J9LxShtB60sQJt3Z0cgsOObbbJ0BPTNeFYmDFNaX
t+bDCbKMTUOMmtGSlmqjNyNPcWbmp6XZbrJLmZ94/IB8w7VCBPBIby5ygTKvV6Fl
g7gMNhfVT0f0iYYKalqcqP9SGl+rnVuNIdvf0g1niHZBZeGeJjbRFIGHsen2unQP
Tu8cC0/32IRzRLBMboSpuuu1tcE5cjZV+0//AgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQURvnfLlDl7UUnou70uJBVulY7p0gwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9Sdm5mTGxEbDdVVW5vdTcwdUpCVnVsWTdwMGcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0rzSMA0GCSqGSIb3DQEBCwUA
A4IBAQDSagOKKX8whrP4n4D4pXPNkZYNJ6UlxUZpXUGrCH9NN0k1G4sLmoJK8e4n
faxG8LNqIUUL2Aq5RlEXVdn5TbfzlS2dZVaMgWP4CTHmGJPQlv1duonOG6ySCP5p
tZ2iV7UjAie1hwJN9R8cROj6uzIPWxQMSBouX9TcG63LdcRfj95JTpPzhL830aNj
MRwgfDFOU0k4HNLQLanO7vZ8qk0hUkPuPDScdQyDu4YxgYILao6V50vEDk64JKQ/
H0Vd4FN376mV66GoKvxRUZ6fSTkPpJFg0a1cOwxJsd3HN2g3OIKtnOU7Vj226q2T
8cORG3UAUh/G7K4Ubg1ndMZlJWD5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org