Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/n5yl9KQeKZAPI9Soz9xo1Ir_UM8.roa
File: n5yl9KQeKZAPI9Soz9xo1Ir_UM8.roa (raw, json)
Hash identifier: 8CIBZIvQwZ7kEfkqO2hwEX85NXpNVL6fSX4yjF977OA=
Subject key identifier: 9F:9C:A5:F4:A4:1E:29:90:0F:23:D4:A8:CF:DC:68:D4:8A:FF:50:CF
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: B1
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/n5yl9KQeKZAPI9Soz9xo1Ir_UM8.roa
Signing time: Fri 01 Apr 2022 01:28:10 +0000
ROA not before: Fri 01 Apr 2022 01:28:10 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 211.122.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:10 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=9F9CA5F4A41E29900F23D4A8CFDC68D48AFF50CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:9c:5b:ba:05:b2:a6:07:76:e6:88:eb:2a:
fb:1b:cb:e4:02:ee:ae:ea:63:8a:61:55:51:58:80:
cf:14:19:48:3b:cc:7e:6e:c7:29:22:e7:c3:b1:73:
b3:04:56:43:d6:cb:e6:8e:4b:d7:87:d8:ac:76:64:
7f:fa:6c:e2:e0:06:33:e5:b4:80:c8:fe:ca:c4:1b:
98:f2:20:78:3d:df:8a:01:ed:ea:e9:25:f6:42:2f:
71:cd:38:ee:31:65:83:16:4a:bd:5b:ae:71:a2:da:
8c:8e:15:e3:b1:a3:a8:85:82:c8:cb:08:26:95:f7:
9f:8c:b0:01:87:e1:ed:91:fd:4b:79:a3:79:08:7c:
94:f6:95:55:23:49:bf:70:8f:c1:59:2d:97:66:4d:
e8:7a:7c:7e:a1:65:fc:f9:31:3d:42:45:0d:c0:46:
91:fd:d4:77:3d:30:54:8d:a6:14:e8:c4:45:f8:2a:
84:73:10:3d:25:d2:f6:c4:24:d0:fe:37:ed:6a:ad:
d9:33:17:24:db:56:65:d0:dd:ce:ef:cb:32:e5:09:
1c:d3:0a:96:18:ac:75:9f:14:20:26:0e:ee:8d:e1:
31:f3:e7:57:2d:e1:53:f6:42:ef:19:b1:88:24:02:
34:b3:3f:ad:e8:40:d4:67:b6:31:f3:9d:51:4d:ab:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:A5:F4:A4:1E:29:90:0F:23:D4:A8:CF:DC:68:D4:8A:FF:50:CF
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/n5yl9KQeKZAPI9Soz9xo1Ir_UM8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d0:9b:e9:29:31:e0:bd:53:a8:d6:92:9e:f7:27:49:53:a4:34:
bd:a9:3a:ca:9c:3e:15:82:f8:1b:21:99:7c:e7:a4:32:7c:a1:
f8:a9:f8:36:f1:a0:59:88:a3:48:a7:e7:f6:8e:7b:82:0d:51:
77:31:ed:53:5b:77:58:d2:76:c7:96:b5:77:cd:c8:07:2d:f7:
ad:55:7e:21:ab:79:c5:ff:8b:53:9f:9d:74:d5:23:4c:cb:a5:
f3:87:b2:f6:1d:4f:50:2a:17:9e:34:42:e3:2a:ed:98:4d:20:
5f:33:74:f1:7c:4f:e0:24:98:1d:07:ce:eb:bb:7c:81:34:2d:
90:64:5c:e0:54:53:f1:0a:05:68:3a:9c:1d:1f:80:52:05:46:
d9:b8:3b:de:cc:0d:bd:e4:c6:b6:8a:eb:57:34:f8:75:d2:b2:
50:a7:82:d3:9a:e0:3a:08:7e:d2:2c:c8:73:d4:a5:80:df:bb:
f1:b9:5e:e6:16:42:61:2b:8c:10:60:f1:8d:4c:db:6c:f1:40:
9a:94:2a:19:19:1b:65:36:66:54:31:de:a1:84:5f:62:d5:1d:
52:cf:ef:30:ff:1b:00:ad:68:02:2d:81:cc:99:6a:cb:90:6f:
57:6f:dd:1a:e6:9d:47:28:8c:33:33:8e:3e:87:73:53:0f:80:
cf:29:95:4d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTBaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDlGOUNBNUY0QTQxRTI5
OTAwRjIzRDRBOENGREM2OEQ0OEFGRjUwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDADpxbugWypgd25ojrKvsby+QC7q7qY4phVVFYgM8UGUg7zH5u
xyki58Oxc7MEVkPWy+aOS9eH2Kx2ZH/6bOLgBjPltIDI/srEG5jyIHg934oB7erp
JfZCL3HNOO4xZYMWSr1brnGi2oyOFeOxo6iFgsjLCCaV95+MsAGH4e2R/Ut5o3kI
fJT2lVUjSb9wj8FZLZdmTeh6fH6hZfz5MT1CRQ3ARpH91Hc9MFSNphToxEX4KoRz
ED0l0vbEJND+N+1qrdkzFyTbVmXQ3c7vyzLlCRzTCpYYrHWfFCAmDu6N4THz51ct
4VP2Qu8ZsYgkAjSzP63oQNRntjHznVFNq/4LAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUn5yl9KQeKZAPI9Soz9xo1Ir/UM8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL241eWw5S1FlS1pBUEk5U296OXhvMUlyX1VNOC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHTejANBgkqhkiG9w0BAQsFAAOCAQEA
0JvpKTHgvVOo1pKe9ydJU6Q0vak6ypw+FYL4GyGZfOekMnyh+Kn4NvGgWYijSKfn
9o57gg1RdzHtU1t3WNJ2x5a1d83IBy33rVV+Iat5xf+LU5+ddNUjTMul84ey9h1P
UCoXnjRC4yrtmE0gXzN08XxP4CSYHQfO67t8gTQtkGRc4FRT8QoFaDqcHR+AUgVG
2bg73swNveTGtorrVzT4ddKyUKeC05rgOgh+0izIc9SlgN+78ble5hZCYSuMEGDx
jUzbbPFAmpQqGRkbZTZmVDHeoYRfYtUdUs/vMP8bAK1oAi2BzJlqy5BvV2/dGuad
RyiMMzOOPodzUw+AzymVTQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org