Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/grBBDzWrzcTUkW2rCOcEmWCjZKs.roa
File: grBBDzWrzcTUkW2rCOcEmWCjZKs.roa (raw, json)
Hash identifier: 3mFrj9vuAiGbvZUG0EO8GovVqIeMveeqOyOriqMI9ns=
Subject key identifier: 82:B0:41:0F:35:AB:CD:C4:D4:91:6D:AB:08:E7:04:99:60:A3:64:AB
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0128
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/grBBDzWrzcTUkW2rCOcEmWCjZKs.roa
Signing time: Sat 01 Jan 2022 01:32:10 +0000
ROA not before: Sat 01 Jan 2022 01:32:10 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.224.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:32:10 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=82B0410F35ABCDC4D4916DAB08E7049960A364AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:3a:81:50:85:c5:55:6b:f6:07:3a:e2:d0:
50:35:62:d5:2a:2f:94:88:81:c0:4a:a6:e8:e1:d1:
e0:db:74:91:87:8a:c1:99:bc:ad:77:08:33:ce:02:
bc:20:39:97:21:03:14:b7:be:5c:e0:9b:0e:c2:09:
f1:13:ba:a3:cb:8a:52:c8:55:d7:87:8b:58:fb:f3:
a3:14:20:2d:61:f2:b7:f6:4e:e2:2b:78:fb:a0:71:
6a:dc:7f:1a:7e:77:f9:50:9b:f1:04:c8:0b:22:f7:
45:0f:15:46:61:9d:3c:a6:4e:39:d4:58:6c:bf:03:
84:55:fb:78:b2:6a:77:41:4c:b9:0b:b8:56:e1:4b:
4d:ab:ad:1d:08:00:10:3e:b1:d2:50:07:76:5c:d1:
4d:2b:7c:06:e3:a4:7b:d6:e5:d0:a7:48:04:40:00:
2a:c8:f1:fa:aa:db:50:2c:29:8b:f0:8e:37:a9:80:
99:2b:b0:94:66:ab:d0:21:17:d7:49:c4:77:ef:c8:
fd:fd:dd:73:0f:b5:86:ec:f4:4a:61:85:6b:af:59:
09:b8:a3:99:e5:e8:70:7b:8a:a2:50:5b:0d:82:8c:
24:22:a2:50:53:98:e2:cc:dc:e2:c5:94:b4:03:7e:
3a:be:fc:47:1c:f4:b0:60:6a:4b:58:2c:2f:f9:4d:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:41:0F:35:AB:CD:C4:D4:91:6D:AB:08:E7:04:99:60:A3:64:AB
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/grBBDzWrzcTUkW2rCOcEmWCjZKs.roa
sbgp-ipAddrBlock: critical
IPv4:
210.224.160.0/19
Signature Algorithm: sha256WithRSAEncryption
d0:19:ee:82:51:96:43:03:53:c0:72:40:8b:58:52:ed:76:1d:
92:cd:58:64:a2:82:03:86:f5:c0:fe:2b:d2:ee:53:c0:1d:b9:
ac:ac:2e:f4:85:61:d9:e2:8a:67:fa:28:2b:46:bc:7b:11:74:
be:fe:30:14:7f:8f:ca:36:a6:0d:10:d7:85:3b:21:98:5c:f4:
99:4f:50:4b:7e:af:ca:6b:d6:45:ce:8b:ea:7d:28:31:6a:90:
39:a0:6f:ec:0f:6a:42:e5:e2:5d:7b:f8:77:52:bc:96:c0:66:
6e:de:5c:33:dc:a8:54:b1:b5:11:31:f1:a6:68:31:9c:c4:3d:
39:dd:65:f0:90:fc:02:ab:ab:7c:ca:5a:c2:f7:a1:e3:a4:c9:
72:4c:c3:f2:c1:1b:d6:03:a1:19:97:f1:bb:17:cd:31:01:18:
28:b1:21:8d:4b:fe:54:73:55:b7:cf:97:f2:a5:d0:c4:3a:f5:
b8:f5:55:71:b7:f1:94:6b:cb:5d:ff:6a:04:e6:6a:d8:6f:61:
bb:0e:84:b9:44:0a:38:22:4b:89:ff:a9:05:0d:ed:a2:1b:d4:
37:9a:82:e8:21:69:62:eb:90:d5:8e:e9:52:b7:29:27:62:45:
59:8a:e8:a9:e3:4d:2c:29:bd:4f:5b:e8:65:95:5e:74:01:ae:
09:76:6c:3a
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMyMTBaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgyQjA0MTBGMzVBQkNE
QzRENDkxNkRBQjA4RTcwNDk5NjBBMzY0QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ8TqBUIXFVWv2Bzri0FA1YtUqL5SIgcBKpujh0eDbdJGHisGZ
vK13CDPOArwgOZchAxS3vlzgmw7CCfETuqPLilLIVdeHi1j786MUIC1h8rf2TuIr
ePugcWrcfxp+d/lQm/EEyAsi90UPFUZhnTymTjnUWGy/A4RV+3iyandBTLkLuFbh
S02rrR0IABA+sdJQB3Zc0U0rfAbjpHvW5dCnSARAACrI8fqq21AsKYvwjjepgJkr
sJRmq9AhF9dJxHfvyP393XMPtYbs9EphhWuvWQm4o5nl6HB7iqJQWw2CjCQiolBT
mOLM3OLFlLQDfjq+/Ecc9LBgaktYLC/5TQSRAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUgrBBDzWrzcTUkW2rCOcEmWCjZKswHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9nckJCRHpXcnpjVFVrVzJyQ09jRW1XQ2paS3Mucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0uCgMA0GCSqGSIb3DQEBCwUA
A4IBAQDQGe6CUZZDA1PAckCLWFLtdh2SzVhkooIDhvXA/ivS7lPAHbmsrC70hWHZ
4opn+igrRrx7EXS+/jAUf4/KNqYNENeFOyGYXPSZT1BLfq/Ka9ZFzovqfSgxapA5
oG/sD2pC5eJde/h3UryWwGZu3lwz3KhUsbURMfGmaDGcxD053WXwkPwCq6t8ylrC
96HjpMlyTMPywRvWA6EZl/G7F80xARgosSGNS/5Uc1W3z5fypdDEOvW49VVxt/GU
a8td/2oE5mrYb2G7DoS5RAo4IkuJ/6kFDe2iG9Q3moLoIWli65DVjulStyknYkVZ
iuip400sKb1PW+hllV50Aa4Jdmw6
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:37 2025 by rpki-client