Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa
File: io7455FCrUociuHk3zytHjxg6G4.roa (raw, json)
Hash identifier: dwT7A5+PuefiwLLEjyBfLWD+OWQ1w2KDgvVNejqsV6Q=
Subject key identifier: 8A:8E:F8:E7:91:42:AD:4A:1C:8A:E1:E4:DF:3C:AD:1E:3C:60:E8:6E
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: C6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa
Signing time: Fri 01 Apr 2022 01:28:15 +0000
ROA not before: Fri 01 Apr 2022 01:28:15 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 153.224.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:15 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=8A8EF8E79142AD4A1C8AE1E4DF3CAD1E3C60E86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:d6:0f:b2:08:a9:ce:bd:08:2f:8d:71:02:
a7:e1:c3:07:36:91:50:56:96:bd:e9:25:00:57:cf:
a2:7e:d2:46:92:5f:2c:42:67:56:8a:ae:3d:2a:e7:
8c:81:6c:ad:61:06:76:22:32:00:84:d2:83:25:04:
a5:d4:cb:05:d9:9d:20:c7:2f:65:88:ae:31:4f:9d:
57:af:c5:ea:b8:4c:96:49:61:b6:a3:63:1c:b3:ed:
ea:60:b6:4d:83:a3:b0:36:b6:c8:a9:68:f4:09:c7:
65:20:cf:b7:bd:63:97:fd:ba:c8:41:ab:1d:43:55:
97:6b:9b:4d:53:13:8f:61:20:98:48:ea:e2:de:6b:
7b:2d:56:ce:f6:fa:54:13:92:dc:1d:9e:0e:ff:3a:
d0:fc:13:bf:ed:7d:b7:9d:a2:68:9d:1f:9b:62:72:
88:fd:05:93:52:cc:28:96:be:e1:f2:92:ad:34:9b:
e3:ba:23:1d:83:0e:24:43:14:84:0b:47:c3:d6:e2:
d5:06:30:51:b8:b1:d2:2c:d2:87:06:fe:f4:25:49:
d0:72:ba:a8:02:57:43:d2:3c:4c:5a:30:1d:47:65:
ce:41:fc:e8:3a:88:6c:bc:7f:19:d2:5b:24:34:6c:
48:3a:a6:79:5a:39:7d:d2:0f:52:60:3e:a2:eb:8e:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:F8:E7:91:42:AD:4A:1C:8A:E1:E4:DF:3C:AD:1E:3C:60:E8:6E
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/io7455FCrUociuHk3zytHjxg6G4.roa
sbgp-ipAddrBlock: critical
IPv4:
153.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
49:b3:e8:bb:8f:56:93:44:d3:12:33:ea:33:24:4f:8f:fc:ed:
94:da:bb:de:75:b0:a6:bb:9c:94:1f:fe:ea:f6:80:ba:d2:b9:
76:df:f1:a4:dd:14:f5:4b:8c:f9:80:6a:da:e2:2a:65:31:15:
79:3c:1c:58:f1:fb:38:41:4b:6f:d6:b4:36:1c:d5:a6:20:15:
cb:a4:c4:f2:95:04:df:6b:70:03:8e:0e:57:44:dc:e1:99:5a:
55:a5:66:db:ab:0f:fd:ed:86:54:97:64:95:ea:cf:01:14:32:
19:03:3d:75:90:41:0c:1f:ff:94:79:40:80:f1:ad:cc:35:3d:
c4:e7:18:89:c0:9a:b0:1c:0e:ec:09:f3:70:b8:50:15:e9:d2:
a2:f0:0b:ce:0d:61:fd:13:ce:b6:17:e5:0c:ce:15:27:99:c1:
7f:2f:05:6e:cf:ac:08:2d:40:ab:08:56:9d:7f:db:bc:ce:d8:
b5:91:1c:ee:41:ee:97:b2:6f:fb:0c:db:68:bc:56:2d:4b:fb:
fc:5f:cb:9a:43:4e:8a:42:49:e5:42:a5:da:7c:a1:2f:89:d5:
06:c2:3e:0c:7a:52:7a:e6:51:76:38:95:fc:d4:89:ef:e7:99:
24:7e:cb:d6:80:16:5e:2e:d5:9e:c6:cb:f3:8d:72:cd:5d:cc:
1b:c4:32:94
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTVaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDhBOEVGOEU3OTE0MkFE
NEExQzhBRTFFNERGM0NBRDFFM0M2MEU4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDydNYPsgipzr0IL41xAqfhwwc2kVBWlr3pJQBXz6J+0kaSXyxC
Z1aKrj0q54yBbK1hBnYiMgCE0oMlBKXUywXZnSDHL2WIrjFPnVevxeq4TJZJYbaj
Yxyz7epgtk2Do7A2tsipaPQJx2Ugz7e9Y5f9ushBqx1DVZdrm01TE49hIJhI6uLe
a3stVs72+lQTktwdng7/OtD8E7/tfbedomidH5ticoj9BZNSzCiWvuHykq00m+O6
Ix2DDiRDFIQLR8PW4tUGMFG4sdIs0ocG/vQlSdByuqgCV0PSPExaMB1HZc5B/Og6
iGy8fxnSWyQ0bEg6pnlaOX3SD1JgPqLrjnMhAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUio7455FCrUociuHk3zytHjxg6G4wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL2lvNzQ1NUZDclVvY2l1SGszenl0SGp4ZzZHNC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwSZ4DANBgkqhkiG9w0BAQsFAAOCAQEA
SbPou49Wk0TTEjPqMyRPj/ztlNq73nWwpruclB/+6vaAutK5dt/xpN0U9UuM+YBq
2uIqZTEVeTwcWPH7OEFLb9a0NhzVpiAVy6TE8pUE32twA44OV0Tc4ZlaVaVm26sP
/e2GVJdklerPARQyGQM9dZBBDB//lHlAgPGtzDU9xOcYicCasBwO7AnzcLhQFenS
ovALzg1h/RPOthflDM4VJ5nBfy8Fbs+sCC1AqwhWnX/bvM7YtZEc7kHul7Jv+wzb
aLxWLUv7/F/LmkNOikJJ5UKl2nyhL4nVBsI+DHpSeuZRdjiV/NSJ7+eZJH7L1oAW
Xi7VnsbL841yzV3MG8QylA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org