Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P3LLjKCGs-aqjzdpUWxXb2ETyzc.roa
File: P3LLjKCGs-aqjzdpUWxXb2ETyzc.roa (raw, json)
Hash identifier: vk0AtoPaD3WwXMkGdmXrSTubpYvrtxl+0wQKHkg5we4=
Subject key identifier: 3F:72:CB:8C:A0:86:B3:E6:AA:8F:37:69:51:6C:57:6F:61:13:CB:37
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01DB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P3LLjKCGs-aqjzdpUWxXb2ETyzc.roa
Signing time: Mon 01 May 2023 01:33:40 +0000
ROA not before: Mon 01 May 2023 01:33:40 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 106.189.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:33:40 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=3F72CB8CA086B3E6AA8F3769516C576F6113CB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:1a:ca:b7:b4:9d:25:78:4f:92:76:69:79:
fc:40:12:8c:55:45:6e:3a:e4:76:09:1a:ff:91:39:
8b:b6:c6:ef:e2:2f:8c:1f:ae:3a:10:63:25:81:50:
30:05:94:78:b4:3c:b7:89:e9:f9:74:46:84:d0:25:
2d:f3:c2:c7:4e:41:ca:ce:13:09:09:53:10:2f:dc:
cf:f3:f1:1e:e2:1e:3d:60:78:42:29:47:8c:03:f3:
34:b7:1a:10:64:8f:76:d3:15:95:13:74:e5:42:5c:
ed:ae:e5:30:3a:b1:18:bb:d0:03:e1:f4:e1:4e:e9:
12:15:14:81:bf:d5:e7:0b:61:bb:49:b8:e0:15:ec:
bc:7c:c9:9f:96:2f:7d:b3:87:63:61:91:2d:c7:83:
1a:4e:35:7d:b4:90:73:18:d4:c7:f8:d7:d5:60:4b:
42:a2:3f:62:b9:fa:c2:27:52:d1:fd:62:ef:03:24:
fb:4f:d0:f5:fd:89:9e:a6:25:62:a3:c7:e5:f8:5b:
ab:e9:0e:85:dd:e3:1d:f6:73:43:fd:9e:33:af:2d:
b8:bc:69:74:d0:17:99:48:98:ed:6e:86:3f:31:67:
cb:51:4d:fa:a7:73:13:44:9f:7e:e0:47:29:e0:10:
ce:c1:5b:8d:16:8a:10:ac:64:5d:4c:69:a5:9d:a2:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:CB:8C:A0:86:B3:E6:AA:8F:37:69:51:6C:57:6F:61:13:CB:37
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P3LLjKCGs-aqjzdpUWxXb2ETyzc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:fb:a6:c5:95:4c:9d:c8:05:cc:16:22:c6:b0:53:81:35:de:
51:f4:70:8b:cb:4b:9e:dd:e6:f2:fc:a4:cd:75:75:29:2e:e3:
41:19:62:39:40:1e:13:b3:68:03:e8:a4:94:48:21:36:83:a3:
6d:2e:3c:b9:9e:5e:24:8a:ee:dc:58:04:c4:12:3a:23:33:d5:
0a:e0:46:a0:2f:1f:01:9c:a1:f7:d4:24:de:6d:bb:c6:83:6f:
d9:3f:1f:3e:c3:57:8f:01:85:5e:ef:02:72:66:d0:4c:c0:e8:
a7:87:71:d1:18:f9:37:f0:e5:d7:39:24:83:03:75:f0:90:4d:
11:4a:c5:9a:63:62:bd:9f:7d:b3:61:00:1a:21:54:71:19:7e:
35:b0:c0:e2:93:d3:39:d3:ba:30:da:3e:e2:32:ac:a7:c2:a2:
15:69:59:35:9c:57:8b:35:37:7e:0c:33:d4:a8:31:4a:97:f4:
34:16:bf:46:9d:94:a4:ad:61:e0:13:a2:b4:30:d8:1a:5f:24:
4e:28:52:af:a8:72:9d:89:ef:79:a3:a1:34:22:2c:0e:06:64:
3f:3d:de:e1:26:53:90:d1:0c:b5:f4:cb:ca:db:4e:1a:fd:df:
95:52:08:c0:4d:61:93:db:ca:54:de:1e:3a:14:e4:3c:48:e1:
87:ee:d5:46
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMzNDBaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNGNzJDQjhDQTA4NkIz
RTZBQThGMzc2OTUxNkM1NzZGNjExM0NCMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC99hrKt7SdJXhPknZpefxAEoxVRW465HYJGv+ROYu2xu/iL4wf
rjoQYyWBUDAFlHi0PLeJ6fl0RoTQJS3zwsdOQcrOEwkJUxAv3M/z8R7iHj1geEIp
R4wD8zS3GhBkj3bTFZUTdOVCXO2u5TA6sRi70APh9OFO6RIVFIG/1ecLYbtJuOAV
7Lx8yZ+WL32zh2NhkS3HgxpONX20kHMY1Mf419VgS0KiP2K5+sInUtH9Yu8DJPtP
0PX9iZ6mJWKjx+X4W6vpDoXd4x32c0P9njOvLbi8aXTQF5lImO1uhj8xZ8tRTfqn
cxNEn37gRyngEM7BW40WihCsZF1MaaWdor4dAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUP3LLjKCGs+aqjzdpUWxXb2ETyzcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1AzTExqS0NHcy1hcWp6ZHBVV3hYYjJFVHl6Yy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqvTANBgkqhkiG9w0BAQsFAAOCAQEALfumxZVMncgFzBYixrBTgTXeUfRw
i8tLnt3m8vykzXV1KS7jQRliOUAeE7NoA+iklEghNoOjbS48uZ5eJIru3FgExBI6
IzPVCuBGoC8fAZyh99Qk3m27xoNv2T8fPsNXjwGFXu8CcmbQTMDop4dx0Rj5N/Dl
1zkkgwN18JBNEUrFmmNivZ99s2EAGiFUcRl+NbDA4pPTOdO6MNo+4jKsp8KiFWlZ
NZxXizU3fgwz1KgxSpf0NBa/Rp2UpK1h4BOitDDYGl8kTihSr6hynYnveaOhNCIs
DgZkPz3e4SZTkNEMtfTLyttOGv3flVIIwE1hk9vKVN4eOhTkPEjhh+7VRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org