Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/iFflwlXMAB-RSbTh8jlR_nPNRJ8.roa
File: iFflwlXMAB-RSbTh8jlR_nPNRJ8.roa (raw, json)
Hash identifier: Dsrft0gu1wQRC2ujrWCDs1WLuxbsEf6lsrM9FQNze1k=
Subject key identifier: 88:57:E5:C2:55:CC:00:1F:91:49:B4:E1:F2:39:51:FE:73:CD:44:9F
Certificate issuer: /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial: 31
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/iFflwlXMAB-RSbTh8jlR_nPNRJ8.roa
Signing time: Tue 25 May 2021 02:36:49 +0000
ROA not before: Tue 25 May 2021 02:36:49 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 131078
IP address blocks: 202.255.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Validity
Not Before: May 25 02:36:49 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=8857E5C255CC001F9149B4E1F23951FE73CD449F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:1c:70:2b:52:b7:7b:8c:40:e9:ae:a9:50:
ff:3b:1e:33:3b:e6:c1:37:d2:0d:b3:62:a0:a5:32:
d6:0a:e8:3d:5b:ed:2a:78:dc:f8:58:67:47:32:a1:
b1:92:83:c3:8a:8e:02:e5:6a:c1:aa:e9:a5:9a:f4:
0f:7e:a9:2d:31:0c:b7:71:07:3f:61:5c:7d:91:bb:
be:bc:9b:42:ab:0f:96:37:74:fd:5c:26:ea:57:64:
c9:7e:0d:a2:b6:00:f1:e3:48:10:81:79:6b:2f:69:
6c:51:38:7b:39:4d:d0:8a:d8:25:96:c7:14:f3:5f:
8a:2c:d5:b0:ae:c8:db:8e:03:2d:e7:72:cd:c8:c0:
45:3f:6e:62:64:76:9c:8b:b5:43:fa:b9:b3:b2:3e:
de:48:aa:bd:be:30:0b:3e:aa:04:16:88:ac:91:79:
53:cd:62:2f:60:76:ae:cf:32:85:9f:84:5d:f3:32:
69:13:c7:9b:5a:68:16:42:50:1c:3f:58:04:da:bf:
1c:0f:e8:4f:7e:35:38:79:59:d2:5b:c0:d9:bc:ac:
f2:cc:3f:3f:60:db:d9:5d:da:ee:e8:a3:e9:bd:b2:
72:a4:6a:89:c1:f3:8f:b7:32:75:f3:17:45:61:2e:
36:96:4a:23:c6:55:e5:7d:17:59:16:67:49:07:35:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:E5:C2:55:CC:00:1F:91:49:B4:E1:F2:39:51:FE:73:CD:44:9F
X509v3 Authority Key Identifier:
keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/iFflwlXMAB-RSbTh8jlR_nPNRJ8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.255.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5c:d3:fc:71:03:61:21:8d:8c:eb:6c:f7:33:45:3f:13:14:
06:65:de:1e:c0:d4:7c:c0:a9:e7:e4:2a:f1:22:e2:20:ce:ea:
bd:77:64:76:e3:71:d9:6e:e7:68:77:4a:c1:d4:d3:ea:9c:5b:
87:24:90:55:5b:d1:d3:c6:c7:11:c6:a4:a6:fd:33:c6:28:b4:
5c:1b:82:e3:19:0f:f3:7e:90:df:1e:ac:ae:71:7f:c6:83:2f:
40:38:99:af:c8:36:c9:d5:23:94:a3:d3:17:5b:9a:da:43:e9:
45:40:b2:91:7d:1e:61:9f:86:e0:2e:12:f9:d9:b4:c9:35:90:
e8:e3:02:a1:61:05:3d:46:e7:64:29:75:db:b7:1a:05:43:51:
42:5b:52:d0:7a:eb:20:9d:82:7b:75:65:1f:68:33:19:42:65:
2d:85:07:79:e0:22:4a:be:9d:de:c7:0b:0f:1e:f9:e5:f2:66:
a0:b2:e8:09:22:d9:74:e2:f2:92:51:9a:a1:9a:32:07:36:41:
c6:a2:5d:00:2f:6c:03:3f:76:65:73:db:28:18:9d:20:c6:0e:
ed:09:6b:8c:56:d6:fe:88:8f:13:dd:84:49:33:3d:4b:96:86:
97:58:3e:22:d5:9a:6d:06:e3:80:20:06:cb:99:ab:09:6e:d4:
43:6a:05:9b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDUw
NUE4NkIwMERDRDA1QkEzNjBCQ0E2NkFERkY2MDJCRDk1QUE4MB4XDTIxMDUyNTAy
MzY0OVoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoODg1N0U1QzI1NUNDMDAx
RjkxNDlCNEUxRjIzOTUxRkU3M0NENDQ5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMFHHArUrd7jEDprqlQ/zseMzvmwTfSDbNioKUy1groPVvtKnjc
+FhnRzKhsZKDw4qOAuVqwarppZr0D36pLTEMt3EHP2FcfZG7vrybQqsPljd0/Vwm
6ldkyX4NorYA8eNIEIF5ay9pbFE4ezlN0IrYJZbHFPNfiizVsK7I244DLedyzcjA
RT9uYmR2nIu1Q/q5s7I+3kiqvb4wCz6qBBaIrJF5U81iL2B2rs8yhZ+EXfMyaRPH
m1poFkJQHD9YBNq/HA/oT341OHlZ0lvA2bys8sw/P2Db2V3a7uij6b2ycqRqicHz
j7cydfMXRWEuNpZKI8ZV5X0XWRZnSQc1s4UCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSIV+XCVcwAH5FJtOHyOVH+c81EnzAfBgNVHSMEGDAWgBQkUFqGsA3NBbo2C8pm
rf9gK9laqDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYzOS9KRkJhaHJBTnpRVzZOZ3ZLWnEzX1lDdlpXcWcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KRkJhaHJBTnpRVzZOZ3ZLWnEzX1lD
dlpXcWcuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYzOS9pRmZsd2xYTUFCLVJTYlRoOGpsUl9uUE5SSjgucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyv8vMA0GCSqGSIb3DQEBCwUAA4IB
AQCjXNP8cQNhIY2M62z3M0U/ExQGZd4ewNR8wKnn5CrxIuIgzuq9d2R243HZbudo
d0rB1NPqnFuHJJBVW9HTxscRxqSm/TPGKLRcG4LjGQ/zfpDfHqyucX/Ggy9AOJmv
yDbJ1SOUo9MXW5raQ+lFQLKRfR5hn4bgLhL52bTJNZDo4wKhYQU9RudkKXXbtxoF
Q1FCW1LQeusgnYJ7dWUfaDMZQmUthQd54CJKvp3exwsPHvnl8magsugJItl04vKS
UZqhmjIHNkHGol0AL2wDP3Zlc9soGJ0gxg7tCWuMVtb+iI8T3YRJMz1LloaXWD4i
1ZptBuOAIAbLmasJbtRDagWb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org