Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/XwWP-YoCq8EkoXIcOnYIuZ-MqX8.roa
File: XwWP-YoCq8EkoXIcOnYIuZ-MqX8.roa (raw, json)
Hash identifier: lkoKnqbgyWDVzEReDTWu0lqmwami/o/pEVP4/UQ3aq8=
Subject key identifier: 5F:05:8F:F9:8A:02:AB:C1:24:A1:72:1C:3A:76:08:B9:9F:8C:A9:7F
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: D3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XwWP-YoCq8EkoXIcOnYIuZ-MqX8.roa
Signing time: Fri 01 Apr 2022 01:28:19 +0000
ROA not before: Fri 01 Apr 2022 01:28:19 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 27.114.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:19 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=5F058FF98A02ABC124A1721C3A7608B99F8CA97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:ec:96:6e:33:c1:31:60:c7:9c:5c:f0:b2:
0c:93:91:30:5d:ff:03:47:ce:65:2b:07:db:60:08:
3d:39:a0:15:5b:ba:77:36:99:bc:61:c8:c5:b4:b2:
93:53:ab:b9:d0:46:26:25:fa:19:98:f9:5c:57:61:
c5:5a:f2:c5:ba:7e:0e:63:6e:32:8b:6e:73:9c:c1:
88:cf:c5:ec:d3:6e:21:26:1e:95:a1:2d:30:f1:b7:
d5:46:98:88:e1:1a:b0:69:d2:93:ba:58:72:80:9a:
fd:8b:29:70:aa:cd:dc:41:15:07:5b:01:0c:d1:05:
c2:1c:e6:2e:89:de:13:d9:14:78:f3:23:a1:88:e1:
ca:89:8e:0f:c4:ee:52:04:dd:d5:d9:e5:ec:d2:45:
2f:6f:12:36:8d:e5:2a:92:b1:5e:a8:70:9e:83:91:
b0:8f:1b:36:36:b7:0c:10:29:f9:77:cc:7d:d9:ec:
75:2b:3b:36:50:15:f7:e5:48:38:39:b0:74:4e:d4:
53:91:57:a0:98:ad:0c:8d:0b:a2:aa:a2:b5:12:53:
21:ad:e7:5c:2a:5e:4d:91:2c:87:03:ea:cb:8e:20:
2e:ba:93:eb:b7:65:61:e0:d0:89:d4:e3:f0:42:08:
3d:1a:38:e1:1b:b7:00:66:e4:10:55:11:c8:1c:4c:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:8F:F9:8A:02:AB:C1:24:A1:72:1C:3A:76:08:B9:9F:8C:A9:7F
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XwWP-YoCq8EkoXIcOnYIuZ-MqX8.roa
sbgp-ipAddrBlock: critical
IPv4:
27.114.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8b:ab:5d:66:ba:b3:86:df:6c:6c:fe:18:0e:de:e9:04:ce:42:
b1:4f:d9:94:2c:18:aa:ce:c7:79:04:da:58:7e:26:f6:7b:ea:
2b:65:f4:3c:fd:b0:30:c4:45:53:9a:f1:49:2c:be:af:c9:5d:
0a:b1:1d:f5:f7:2d:9a:ca:b8:c9:93:19:2f:0d:f8:3b:f9:7e:
d4:75:4d:de:6a:31:d0:12:d5:2c:ca:3c:36:38:7a:52:73:41:
39:d2:b4:47:b4:7d:70:70:64:e9:1c:b7:a5:8c:cb:7e:bc:f1:
c6:d2:21:2f:98:99:ef:bd:5a:1d:32:dd:a6:8d:d3:8f:24:3a:
fd:df:9f:e4:79:2d:28:29:aa:10:e6:1c:bb:2a:0f:2a:4e:bd:
06:c5:a1:91:59:92:9c:24:1f:a9:34:dc:d3:26:14:46:7b:24:
93:2f:4a:19:da:74:ab:54:07:1f:ab:66:93:e3:f3:a1:fa:16:
52:d9:2d:74:de:b8:f7:8f:60:da:97:76:ae:79:47:63:0f:74:
6b:e7:79:b9:2f:2c:ba:0a:d5:f0:f7:69:54:a0:b7:d3:38:6b:
eb:6c:fb:8a:54:28:e9:1b:47:2d:af:47:83:06:2b:8c:33:89:
d8:06:0b:7a:89:fc:f4:fa:79:d5:53:31:4c:5e:17:9b:06:5d:
90:79:3a:8d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTlaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDVGMDU4RkY5OEEwMkFC
QzEyNEExNzIxQzNBNzYwOEI5OUY4Q0E5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi0OyWbjPBMWDHnFzwsgyTkTBd/wNHzmUrB9tgCD05oBVbunc2
mbxhyMW0spNTq7nQRiYl+hmY+VxXYcVa8sW6fg5jbjKLbnOcwYjPxezTbiEmHpWh
LTDxt9VGmIjhGrBp0pO6WHKAmv2LKXCqzdxBFQdbAQzRBcIc5i6J3hPZFHjzI6GI
4cqJjg/E7lIE3dXZ5ezSRS9vEjaN5SqSsV6ocJ6DkbCPGzY2twwQKfl3zH3Z7HUr
OzZQFfflSDg5sHRO1FORV6CYrQyNC6KqorUSUyGt51wqXk2RLIcD6suOIC66k+u3
ZWHg0InU4/BCCD0aOOEbtwBm5BBVEcgcTLs9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXwWP+YoCq8EkoXIcOnYIuZ+MqX8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL1h3V1AtWW9DcThFa29YSWNPbllJdVotTXFYOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcbcgAwDQYJKoZIhvcNAQELBQADggEB
AIurXWa6s4bfbGz+GA7e6QTOQrFP2ZQsGKrOx3kE2lh+JvZ76itl9Dz9sDDERVOa
8Uksvq/JXQqxHfX3LZrKuMmTGS8N+Dv5ftR1Td5qMdAS1SzKPDY4elJzQTnStEe0
fXBwZOkct6WMy3688cbSIS+Yme+9Wh0y3aaN048kOv3fn+R5LSgpqhDmHLsqDypO
vQbFoZFZkpwkH6k03NMmFEZ7JJMvShnadKtUBx+rZpPj86H6FlLZLXTeuPePYNqX
dq55R2MPdGvnebkvLLoK1fD3aVSgt9M4a+ts+4pUKOkbRy2vR4MGK4wzidgGC3qJ
/PT6edVTMUxeF5sGXZB5Oo0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org