Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kGgFc43f9UXJ4ywz1fARY8n95vs.roa
File: kGgFc43f9UXJ4ywz1fARY8n95vs.roa (raw, json)
Hash identifier: jqL0zF/msDGnnfg2gKM5kl/owoeP1QEh1PanYTRIawM=
Subject key identifier: 90:68:05:73:8D:DF:F5:45:C9:E3:2C:33:D5:F0:11:63:C9:FD:E6:FB
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 15
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kGgFc43f9UXJ4ywz1fARY8n95vs.roa
Signing time: Fri 30 Jul 2021 09:57:08 +0000
ROA not before: Fri 30 Jul 2021 09:57:08 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 30 09:57:08 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=906805738DDFF545C9E32C33D5F01163C9FDE6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:5c:70:9b:06:7f:09:f7:4c:46:e3:7a:39:
57:be:57:89:05:09:58:be:3e:8c:df:db:ad:73:5f:
ae:36:86:06:47:4f:97:3c:6d:fa:31:82:66:84:47:
c0:8f:d6:6d:fb:bc:6a:f4:da:da:50:f7:4b:43:97:
c9:0a:6f:c0:3d:be:6b:f6:cf:97:50:85:68:01:05:
d3:21:ef:32:a9:dd:82:a0:00:cf:fc:0d:40:66:0e:
1f:18:76:26:af:a7:05:b4:6c:ce:03:3d:0d:d3:4f:
3e:bc:dd:38:0b:c2:64:f9:79:49:2d:d6:71:63:77:
22:dd:18:67:9f:e4:c8:ee:9b:6a:c7:ff:34:01:8e:
22:21:e3:59:43:3f:64:a0:27:f4:18:0b:a3:45:5c:
57:ca:d7:77:a5:d6:70:cb:94:f6:4e:8c:2e:a9:56:
9e:1e:11:35:7f:7c:cf:b9:a5:95:c6:c8:92:e8:ed:
dd:3f:ce:70:ba:5c:8d:b3:4e:b5:b3:13:45:36:d5:
d2:58:4c:6e:5d:eb:b0:23:df:3a:09:f0:ae:56:b4:
7b:30:ba:4c:22:6f:a5:e2:33:56:bc:44:d9:d5:ba:
d1:d9:2c:4f:2e:74:1f:0c:6f:97:06:11:6c:30:6c:
59:d9:9d:c7:e7:b3:19:2b:cb:61:9b:53:f0:41:0b:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:68:05:73:8D:DF:F5:45:C9:E3:2C:33:D5:F0:11:63:C9:FD:E6:FB
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kGgFc43f9UXJ4ywz1fARY8n95vs.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.88.0/21
Signature Algorithm: sha256WithRSAEncryption
db:3c:03:65:26:28:bd:c6:68:3c:3f:54:c0:c7:d1:8d:bd:3a:
b5:45:18:24:e0:3c:31:47:0a:91:99:70:7d:bd:6c:dc:7d:b0:
93:44:6a:94:b9:75:a1:d6:17:39:98:80:9e:81:15:e0:58:2a:
ea:29:c9:7c:1b:eb:45:2c:38:b5:fe:7a:81:ad:1d:b7:31:6d:
71:0e:17:4a:85:14:7b:7e:94:53:86:aa:4c:fe:82:90:90:a4:
14:22:f9:71:45:18:c5:ca:70:e9:ee:49:c4:b7:52:44:21:c4:
31:c4:c9:2b:54:69:ee:7b:07:9d:32:7c:93:0c:7e:81:1e:f5:
fb:b3:d7:af:a4:39:26:4c:8b:68:c6:70:38:69:fe:d7:ed:bd:
20:8b:cc:a0:97:2b:e2:18:f2:12:6c:8a:29:dc:2a:f6:81:fb:
a5:3f:bc:4c:aa:8c:37:25:22:0d:71:58:6a:ae:76:74:9f:95:
5e:4c:53:be:04:57:df:df:3b:ff:3c:72:ed:c2:66:5d:58:79:
7f:38:b8:64:bc:4e:fe:0b:cc:8d:37:2f:d5:37:45:14:71:ad:
ba:90:43:07:09:1a:8d:a6:10:e8:9c:91:ee:9c:fb:18:68:16:
c8:ba:d3:7f:31:e4:c8:26:3a:fa:da:e8:3e:1e:51:38:d2:48:
10:47:94:a8
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTIxMDczMDA5
NTcwOFoXDTIyMDcxNTAxMzAwMlowMzExMC8GA1UEAxMoOTA2ODA1NzM4RERGRjU0
NUM5RTMyQzMzRDVGMDExNjNDOUZERTZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALp9XHCbBn8J90xG43o5V75XiQUJWL4+jN/brXNfrjaGBkdPlzxt
+jGCZoRHwI/Wbfu8avTa2lD3S0OXyQpvwD2+a/bPl1CFaAEF0yHvMqndgqAAz/wN
QGYOHxh2Jq+nBbRszgM9DdNPPrzdOAvCZPl5SS3WcWN3It0YZ5/kyO6basf/NAGO
IiHjWUM/ZKAn9BgLo0VcV8rXd6XWcMuU9k6MLqlWnh4RNX98z7mllcbIkujt3T/O
cLpcjbNOtbMTRTbV0lhMbl3rsCPfOgnwrla0ezC6TCJvpeIzVrxE2dW60dksTy50
HwxvlwYRbDBsWdmdx+ezGSvLYZtT8EELePkCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSQaAVzjd/1RcnjLDPV8BFjyf3m+zAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzExMjQ3L2tHZ0ZjNDNmOVVYSjR5d3oxZkFSWThuOTV2cy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOdEVgwDQYJKoZIhvcNAQELBQAD
ggEBANs8A2UmKL3GaDw/VMDH0Y29OrVFGCTgPDFHCpGZcH29bNx9sJNEapS5daHW
FzmYgJ6BFeBYKuopyXwb60UsOLX+eoGtHbcxbXEOF0qFFHt+lFOGqkz+gpCQpBQi
+XFFGMXKcOnuScS3UkQhxDHEyStUae57B50yfJMMfoEe9fuz16+kOSZMi2jGcDhp
/tftvSCLzKCXK+IY8hJsiincKvaB+6U/vEyqjDclIg1xWGqudnSflV5MU74EV9/f
O/88cu3CZl1YeX84uGS8Tv4LzI03L9U3RRRxrbqQQwcJGo2mEOicke6c+xhoFsi6
038x5MgmOvra6D4eUTjSSBBHlKg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org