Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xXWwaCrpSgxto2QdFwrpvHZtAMQ.roa
File: xXWwaCrpSgxto2QdFwrpvHZtAMQ.roa (raw, json)
Hash identifier: T8c6x06QvIdbDbxIjpi8ZkZ6yFTBFpfhN98B6Tu/WzU=
Subject key identifier: C5:75:B0:68:2A:E9:4A:0C:6D:A3:64:1D:17:0A:E9:BC:76:6D:00:C4
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: F0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xXWwaCrpSgxto2QdFwrpvHZtAMQ.roa
Signing time: Fri 01 Oct 2021 01:28:22 +0000
ROA not before: Fri 01 Oct 2021 01:28:22 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Oct 1 01:28:22 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=C575B0682AE94A0C6DA3641D170AE9BC766D00C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:22:46:99:90:ea:74:2c:e5:e4:8c:b2:b6:
65:17:8b:c8:db:24:9b:0d:46:11:5e:d5:66:1f:4b:
47:01:13:f1:2b:d7:0c:55:29:cb:aa:08:d4:af:cc:
40:50:bf:a9:2e:98:e4:57:05:62:89:3b:a2:d0:17:
7b:d3:b3:f9:e5:e9:e8:28:65:22:c5:26:97:b4:20:
61:c8:54:07:a6:c4:d8:8c:86:96:83:70:58:2a:6b:
a8:6f:94:1d:c0:cc:53:96:e4:1c:df:2d:d4:34:fd:
7c:8e:96:d8:7d:9b:17:39:86:71:fe:97:f4:d5:4e:
7e:d5:43:04:0a:61:88:c4:06:e9:de:c4:98:1d:51:
de:cc:36:f8:a2:bf:97:12:f6:9b:96:39:c1:75:3d:
66:80:69:2b:c6:0a:4c:cc:3a:7e:e5:8a:49:b4:fa:
6f:9b:7a:dc:06:69:8c:5d:ab:8c:af:d7:bf:e5:4b:
f3:ed:05:4a:43:18:7a:f5:68:ee:e5:6a:e2:b4:51:
10:15:64:5d:87:bb:97:51:dc:1d:50:d6:e0:f0:88:
4a:5e:90:f4:cc:31:60:70:c3:e1:5e:84:86:cb:d9:
21:6b:df:99:4b:3f:e2:c1:40:2e:06:5b:92:ce:54:
13:4d:ad:c6:f2:8f:7b:fd:58:e4:63:c4:22:67:a3:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:75:B0:68:2A:E9:4A:0C:6D:A3:64:1D:17:0A:E9:BC:76:6D:00:C4
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xXWwaCrpSgxto2QdFwrpvHZtAMQ.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e9:26:f4:86:6a:2f:be:b1:74:d5:9b:ac:5a:3c:b1:b0:99:
f3:33:b6:b4:4d:f0:c8:77:96:33:92:13:cf:f6:e2:7b:97:7b:
c0:43:96:62:78:97:3b:c2:97:db:d6:64:0e:e7:72:fd:3e:71:
ee:ef:47:b9:64:59:a4:7d:37:a0:52:6d:dd:d1:65:7d:0d:0b:
a2:0c:35:5a:8a:d2:0e:7f:ab:63:af:92:4e:0b:1f:ff:60:e6:
8d:af:50:37:ca:16:31:5e:94:75:11:30:a4:bf:77:d7:38:66:
4d:fe:21:02:07:f6:05:b8:d4:94:5e:db:4f:46:06:b3:22:40:
e2:da:ce:0b:07:d0:fb:e7:78:38:67:76:0c:2c:a5:5b:eb:06:
f3:bb:0f:f2:ee:fa:c7:f2:62:29:f6:de:e3:e2:22:0f:5a:d4:
8c:d7:bd:53:7f:82:58:8c:b3:1c:32:91:a8:45:8d:58:36:d5:
5b:a1:cd:38:c5:49:ac:8c:37:a1:72:db:d8:e7:0d:74:d1:28:
64:86:21:19:cc:db:02:cd:6a:8e:45:ec:f9:85:26:01:1b:dd:
68:7c:4a:8c:21:b6:94:6e:68:c1:6d:65:ea:a2:68:fb:1f:ef:
d1:21:fe:14:f8:d4:96:cb:04:75:3b:79:92:cf:30:c5:82:70:
c4:51:f1:07
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMTEwMDEw
MTI4MjJaFw0yMjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM1NzVCMDY4MkFFOTRB
MEM2REEzNjQxRDE3MEFFOUJDNzY2RDAwQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9iyJGmZDqdCzl5IyytmUXi8jbJJsNRhFe1WYfS0cBE/Er1wxV
KcuqCNSvzEBQv6kumORXBWKJO6LQF3vTs/nl6egoZSLFJpe0IGHIVAemxNiMhpaD
cFgqa6hvlB3AzFOW5BzfLdQ0/XyOlth9mxc5hnH+l/TVTn7VQwQKYYjEBunexJgd
Ud7MNviiv5cS9puWOcF1PWaAaSvGCkzMOn7likm0+m+betwGaYxdq4yv17/lS/Pt
BUpDGHr1aO7lauK0URAVZF2Hu5dR3B1Q1uDwiEpekPTMMWBww+FehIbL2SFr35lL
P+LBQC4GW5LOVBNNrcbyj3v9WORjxCJno9onAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUxXWwaCrpSgxto2QdFwrpvHZtAMQwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny94WFd3YUNycFNneHRvMlFkRndycHZIWnRBTVEucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdTpMA0GCSqGSIb3DQEBCwUA
A4IBAQBa6Sb0hmovvrF01ZusWjyxsJnzM7a0TfDId5YzkhPP9uJ7l3vAQ5ZieJc7
wpfb1mQO53L9PnHu70e5ZFmkfTegUm3d0WV9DQuiDDVaitIOf6tjr5JOCx//YOaN
r1A3yhYxXpR1ETCkv3fXOGZN/iECB/YFuNSUXttPRgazIkDi2s4LB9D753g4Z3YM
LKVb6wbzuw/y7vrH8mIp9t7j4iIPWtSM171Tf4JYjLMcMpGoRY1YNtVboc04xUms
jDehctvY5w100ShkhiEZzNsCzWqORez5hSYBG91ofEqMIbaUbmjBbWXqomj7H+/R
If4U+NSWywR1O3mSzzDFgnDEUfEH
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:42 2025 by rpki-client