Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qIV1N0noRkYFXkSZ-LyGH6uh7Ng.roa
File: qIV1N0noRkYFXkSZ-LyGH6uh7Ng.roa (raw, json)
Hash identifier: BZpaXUZbXdRuisRY/fZaDppLS+0OyxQYJ63EUEbz7EE=
Subject key identifier: A8:85:75:37:49:E8:46:46:05:5E:44:99:F8:BC:86:1F:AB:A1:EC:D8
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 79
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qIV1N0noRkYFXkSZ-LyGH6uh7Ng.roa
Signing time: Sat 08 May 2021 04:05:42 +0000
ROA not before: Sat 08 May 2021 04:05:42 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 122.1.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:42 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=A885753749E84646055E4499F8BC861FABA1ECD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:df:3e:99:5b:01:9f:c7:1d:a6:1e:37:eb:
08:a6:a7:e6:78:2e:33:bd:73:0e:dc:d0:17:60:4d:
b1:d9:75:3d:82:a2:86:ac:47:66:03:8c:6a:2b:02:
40:40:fe:d5:e1:c0:64:53:af:ad:b0:12:dd:42:fe:
56:5f:53:ef:42:69:8a:e8:69:c5:ca:ec:c3:89:cc:
ac:08:88:9f:20:20:d7:f4:33:58:96:68:19:45:ca:
86:c5:c7:09:26:d8:b7:45:30:60:cc:3a:05:46:92:
66:18:79:95:02:59:ce:51:76:cd:1b:df:de:89:2e:
b0:87:6a:ba:3e:a4:56:d8:41:03:c7:85:dc:cf:29:
42:cc:db:ec:f2:19:82:5b:26:9a:a3:79:cd:c7:87:
18:95:f8:33:03:df:11:65:f3:5a:52:94:03:a0:dc:
14:00:2a:a8:5a:c4:f2:7a:77:b9:19:64:cf:57:81:
c9:b5:98:33:80:65:a6:4f:56:cd:11:ae:07:67:0f:
72:05:85:a6:ae:d2:41:7b:40:0c:ae:8a:fa:0a:e4:
c0:e5:2e:89:f0:b5:0a:1f:d3:6f:67:3f:ae:b5:3d:
25:12:5a:2c:7c:ab:45:d1:c6:5a:61:b5:cc:4c:be:
bf:6a:87:a5:5d:3d:a9:1b:33:a4:66:bb:b3:97:cb:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:75:37:49:E8:46:46:05:5E:44:99:F8:BC:86:1F:AB:A1:EC:D8
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qIV1N0noRkYFXkSZ-LyGH6uh7Ng.roa
sbgp-ipAddrBlock: critical
IPv4:
122.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:3e:00:e9:93:e8:38:43:ce:be:2e:0c:37:2c:6a:f8:d5:79:
b2:fc:46:f8:96:f6:53:c0:c8:f2:b8:6f:23:35:43:7e:9e:6a:
be:11:3f:2f:0b:d0:ff:48:ea:0e:64:07:d6:a7:8a:10:da:a1:
07:13:13:be:63:64:20:df:be:8f:2f:88:ad:3e:9e:e9:f7:e6:
04:e7:32:3b:91:24:65:3e:d2:d7:86:2f:8e:0e:6d:66:9e:12:
5b:2d:9e:c0:5e:29:27:37:bc:62:2c:80:e4:b1:f9:fe:5d:01:
57:76:d2:10:f5:81:2e:78:83:f2:4c:c8:a3:92:79:1e:51:64:
f0:a6:55:7e:a7:b6:d8:ae:67:fa:a1:b6:e4:c1:e9:cd:8a:d6:
5c:cb:ca:c1:6b:15:4f:00:f3:58:be:44:8e:d0:63:d3:83:14:
6d:fa:cc:7a:f4:d9:a2:b6:62:29:93:67:2c:f0:0b:51:26:b9:
ef:ed:f3:7d:a8:67:09:b6:23:71:09:64:2d:7e:57:32:21:f7:
4e:09:73:97:36:0c:e3:a4:1b:96:ea:90:67:93:e2:6d:3a:5f:
8e:ee:63:33:f8:de:25:a8:59:97:a3:4a:4e:3e:87:6c:d2:cd:
04:a9:23:9d:1a:9e:71:08:bc:68:40:bb:e2:4d:f2:4f:00:69:
69:43:15:d7
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRkMw
OTkyM0IwNUE3RThGMUFERDlBNTk4NEVEQzE5MzIwREI5NzRCMB4XDTIxMDUwODA0
MDU0MloXDTIyMDQxNTAxMzAwMVowMzExMC8GA1UEAxMoQTg4NTc1Mzc0OUU4NDY0
NjA1NUU0NDk5RjhCQzg2MUZBQkExRUNEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOiQ3z6ZWwGfxx2mHjfrCKan5nguM71zDtzQF2BNsdl1PYKihqxH
ZgOMaisCQED+1eHAZFOvrbAS3UL+Vl9T70Jpiuhpxcrsw4nMrAiInyAg1/QzWJZo
GUXKhsXHCSbYt0UwYMw6BUaSZhh5lQJZzlF2zRvf3okusIdquj6kVthBA8eF3M8p
Qszb7PIZglsmmqN5zceHGJX4MwPfEWXzWlKUA6DcFAAqqFrE8np3uRlkz1eBybWY
M4Blpk9WzRGuB2cPcgWFpq7SQXtADK6K+grkwOUuifC1Ch/Tb2c/rrU9JRJaLHyr
RdHGWmG1zEy+v2qHpV09qRszpGa7s5fL+RMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBSohXU3SehGRgVeRJn4vIYfq6Hs2DAfBgNVHSMEGDAWgBQvwJkjsFp+jxrdmlmE
7cGTINuXSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lEYmwwcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lE
Ymwwcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMzEvcUlWMU4wbm9Sa1lGWGtTWi1MeUdINnVoN05nLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHoBMA0GCSqGSIb3DQEBCwUAA4IBAQBo
PgDpk+g4Q86+Lgw3LGr41Xmy/Eb4lvZTwMjyuG8jNUN+nmq+ET8vC9D/SOoOZAfW
p4oQ2qEHExO+Y2Qg376PL4itPp7p9+YE5zI7kSRlPtLXhi+ODm1mnhJbLZ7AXikn
N7xiLIDksfn+XQFXdtIQ9YEueIPyTMijknkeUWTwplV+p7bYrmf6obbkwenNitZc
y8rBaxVPAPNYvkSO0GPTgxRt+sx69NmitmIpk2cs8AtRJrnv7fN9qGcJtiNxCWQt
flcyIfdOCXOXNgzjpBuW6pBnk+JtOl+O7mMz+N4lqFmXo0pOPods0s0EqSOdGp5x
CLxoQLviTfJPAGlpQxXX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:01 2023 by rpki-client on console-fra.rpki-client.org