Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/R2UXwxcCvzfo5-LAvdIyRd5KGMQ.roa
File: R2UXwxcCvzfo5-LAvdIyRd5KGMQ.roa (raw, json)
Hash identifier: ZqFSWA6Pn0g5xJ8HhvKSYMRKGjIC6cGJeVWy/GoEJXM=
Subject key identifier: 47:65:17:C3:17:02:BF:37:E8:E7:E2:C0:BD:D2:32:45:DE:4A:18:C4
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 2A
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/R2UXwxcCvzfo5-LAvdIyRd5KGMQ.roa
Signing time: Fri 01 Jul 2022 01:28:06 +0000
ROA not before: Fri 01 Jul 2022 01:28:06 +0000
ROA not after: Thu 15 Jun 2023 01:30:04 +0000
asID: 7684
IP address blocks: 157.17.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 1 01:28:06 2022 GMT
Not After : Jun 15 01:30:04 2023 GMT
Subject: CN=476517C31702BF37E8E7E2C0BDD23245DE4A18C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:02:3d:04:e3:b5:a9:f9:e7:98:19:72:3c:
01:37:66:da:f8:c7:b2:da:ab:ee:c8:18:68:80:69:
fd:55:6a:99:ca:db:24:09:87:1c:47:c6:93:50:2b:
4d:d4:3f:9d:bb:ca:2f:03:65:80:f9:3d:e3:af:5b:
f5:8b:b2:04:c1:2a:83:35:a9:4b:5d:b9:7e:d4:c0:
6a:cc:79:3e:d5:3d:62:da:3f:ea:c8:16:b2:14:d1:
49:b4:ce:92:d0:7d:28:3a:ad:58:38:66:46:d1:a3:
dd:23:1d:03:39:b0:ba:8b:aa:6c:a1:4c:7e:ad:f4:
6d:bf:9a:31:07:5d:4a:85:22:a6:53:e9:73:01:b4:
cd:86:cd:c6:04:6b:cd:4f:d9:84:ae:b3:ad:49:91:
49:cd:42:d2:61:9c:7c:46:10:7b:36:f8:bb:5e:c2:
dc:04:11:29:b2:a9:73:5e:cd:c9:36:31:6e:ca:be:
ca:49:8f:1e:27:6c:86:03:56:20:a2:27:01:f8:54:
88:39:28:af:97:34:6d:28:8f:30:3f:4e:a3:95:70:
22:57:da:5c:b6:19:fa:0b:57:f1:0d:a6:e5:a3:72:
b9:38:60:d2:d1:66:13:20:3b:c7:a9:28:72:de:cb:
c6:4c:b7:e0:ea:56:17:3f:c8:79:7a:5a:6d:85:57:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:17:C3:17:02:BF:37:E8:E7:E2:C0:BD:D2:32:45:DE:4A:18:C4
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/R2UXwxcCvzfo5-LAvdIyRd5KGMQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:fc:84:29:24:c5:f0:eb:86:60:85:57:42:8f:56:95:a2:a2:
e5:06:4d:ba:f5:e5:aa:42:58:1e:fa:1b:e4:b8:7b:ce:27:a9:
7e:b0:68:a8:c6:f2:ae:3f:51:74:70:af:3d:cc:f1:1a:a3:01:
e0:e6:06:56:d1:ce:14:44:15:4e:c8:f9:1e:c0:18:aa:7d:74:
7a:ec:ce:98:32:91:a5:01:00:da:f6:f2:37:ab:fc:45:0b:2a:
f4:18:cd:9a:d2:6b:a6:68:f9:c3:fe:f9:e4:ce:49:d2:f0:64:
fc:7a:64:b6:48:5c:59:e5:0e:18:28:9e:64:49:de:31:98:7a:
27:34:88:50:e6:34:ea:be:21:a0:b1:59:4c:7e:d6:c8:32:f3:
20:4a:37:6d:63:7a:fb:4c:38:18:89:a8:b6:2a:36:f9:dc:5e:
42:21:a6:b7:db:a7:38:df:dc:05:6e:7b:f6:73:27:c4:f5:62:
b5:64:3f:fe:47:a1:cb:f6:c0:60:29:6d:ff:ed:d1:ed:ee:92:
71:8e:18:88:0e:18:f2:05:25:5d:d7:ff:2e:5b:ac:d1:cc:ab:
4e:ed:46:a3:20:c9:df:83:a2:36:12:e8:00:a4:fc:97:2d:66:
fb:3e:fd:83:c5:61:5c:28:c1:a4:8c:5a:b6:97:f8:3a:b7:9a:
2c:b3:06:e2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTIyMDcwMTAx
MjgwNloXDTIzMDYxNTAxMzAwNFowMzExMC8GA1UEAxMoNDc2NTE3QzMxNzAyQkYz
N0U4RTdFMkMwQkREMjMyNDVERTRBMThDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFtAj0E47Wp+eeYGXI8ATdm2vjHstqr7sgYaIBp/VVqmcrbJAmH
HEfGk1ArTdQ/nbvKLwNlgPk9469b9YuyBMEqgzWpS125ftTAasx5PtU9Yto/6sgW
shTRSbTOktB9KDqtWDhmRtGj3SMdAzmwuouqbKFMfq30bb+aMQddSoUiplPpcwG0
zYbNxgRrzU/ZhK6zrUmRSc1C0mGcfEYQezb4u17C3AQRKbKpc17NyTYxbsq+ykmP
HidshgNWIKInAfhUiDkor5c0bSiPMD9Oo5VwIlfaXLYZ+gtX8Q2m5aNyuThg0tFm
EyA7x6koct7Lxky34OpWFz/IeXpabYVX0M0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRHZRfDFwK/N+jn4sC90jJF3koYxDAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L1IyVVh3eGNDdnpmbzUtTEF2ZEl5UmQ1S0dNUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBASdEUAwDQYJKoZIhvcNAQELBQADggEBAJr8hCkkxfDrhmCFV0KPVpWi
ouUGTbr15apCWB76G+S4e84nqX6waKjG8q4/UXRwrz3M8RqjAeDmBlbRzhREFU7I
+R7AGKp9dHrszpgykaUBANr28jer/EULKvQYzZrSa6Zo+cP++eTOSdLwZPx6ZLZI
XFnlDhgonmRJ3jGYeic0iFDmNOq+IaCxWUx+1sgy8yBKN21jevtMOBiJqLYqNvnc
XkIhprfbpzjf3AVue/ZzJ8T1YrVkP/5Hocv2wGApbf/t0e3uknGOGIgOGPIFJV3X
/y5brNHMq07tRqMgyd+DojYS6ACk/JctZvs+/YPFYVwowaSMWraX+Dq3miyzBuI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org