Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/B7MfQ-0H0kl71G8TSVGeaamjbyQ.roa
File: B7MfQ-0H0kl71G8TSVGeaamjbyQ.roa (raw, json)
Hash identifier: mea/3ZYVjr+HIpbgcNM/EIraRmdv6LCflIORFbGw5EU=
Subject key identifier: 07:B3:1F:43:ED:07:D2:49:7B:D4:6F:13:49:51:9E:69:A9:A3:6F:24
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 6C
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/B7MfQ-0H0kl71G8TSVGeaamjbyQ.roa
Signing time: Wed 06 Oct 2021 03:01:54 +0000
ROA not before: Wed 06 Oct 2021 03:01:54 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 19905
IP address blocks: 203.129.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Oct 6 03:01:54 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=07B31F43ED07D2497BD46F1349519E69A9A36F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:71:98:a6:9e:f8:fa:a8:ed:10:a9:81:a6:
0f:53:d7:9e:de:11:87:23:ba:4d:6d:12:43:97:06:
b9:8b:dd:5d:bd:50:60:10:c1:2a:b4:fe:73:d8:30:
d3:8c:4b:2e:92:d0:70:f7:ee:3e:f8:f7:28:84:af:
c2:11:1b:3f:ec:05:5e:5e:e9:35:d8:93:35:22:ea:
d8:6e:d6:5a:95:f3:ac:72:e0:3f:ff:c2:a8:d1:68:
ba:f0:98:b8:b8:f1:ee:4e:1c:d2:66:cd:7a:93:1f:
06:5b:ef:d4:72:74:d9:70:c5:30:6b:74:74:46:dc:
7a:8e:fe:59:77:98:9e:74:72:05:71:6c:1f:09:ee:
4c:8d:4d:5e:ce:4d:d5:09:a3:a0:bf:9f:13:6d:89:
02:e3:de:dd:8f:a9:ec:6f:4b:4e:a7:75:cc:f7:7a:
d1:3f:16:b2:4f:8b:1d:9b:6c:20:7e:fc:03:13:36:
97:2d:d6:d7:c7:2c:c3:af:6c:5e:02:b6:f8:89:b2:
55:a5:76:47:2c:85:8e:2f:60:1f:31:2f:7e:40:9f:
c6:6d:19:1c:07:e4:96:a8:6c:6e:00:d8:9a:8c:14:
9e:0c:64:02:de:5c:dd:36:20:69:67:ce:b4:fe:af:
ef:79:5a:33:8b:1d:f1:9b:3f:ad:50:14:13:ab:8e:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B3:1F:43:ED:07:D2:49:7B:D4:6F:13:49:51:9E:69:A9:A3:6F:24
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/B7MfQ-0H0kl71G8TSVGeaamjbyQ.roa
sbgp-ipAddrBlock: critical
IPv4:
203.129.112.0/20
Signature Algorithm: sha256WithRSAEncryption
11:05:03:a2:01:53:42:66:9b:e0:61:4e:ac:68:34:fe:e8:03:
02:dd:9c:19:56:5b:a8:6a:82:fa:aa:23:ca:52:df:2c:3d:dd:
27:1a:f1:43:b7:94:b2:b2:11:4a:a0:bb:59:33:d2:46:1a:90:
05:87:25:19:7b:32:56:ae:e4:42:7c:74:71:46:9b:be:b2:ea:
fe:f0:17:95:b7:f8:37:d2:2f:ee:2a:2a:11:25:18:4c:1b:28:
bf:96:7a:b2:bb:ed:6c:eb:54:46:1a:96:a1:66:ff:8c:50:ea:
1c:d7:6b:d7:89:2c:43:68:2b:d9:e1:e6:75:18:99:ed:9e:bd:
46:ef:48:98:e8:e1:e9:e3:43:d3:64:2a:0f:1b:88:18:9f:da:
71:5f:79:cd:2f:39:a8:13:4c:dd:5c:52:20:a2:11:53:e2:32:
09:fc:0f:c5:92:1f:90:92:00:2a:41:da:6d:55:dc:d4:59:a5:
87:f7:35:41:00:e1:6a:d2:1f:41:c9:a7:c3:d7:45:b4:ec:7e:
47:4b:45:e8:90:97:08:8d:da:a0:bf:a9:9c:33:bf:6b:de:f0:
8e:e7:4e:97:ab:a5:61:73:52:97:02:2d:d2:7c:17:de:ed:cb:
c4:6f:3f:34:c9:ea:47:a1:50:f4:23:d6:ad:d4:19:d6:4e:47:
83:17:24:68
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDMx
MjQyN0Y4MDBCODI5NkRBMTE1NDBDOEI4NkU1Q0UxMkZDNkM1MB4XDTIxMTAwNjAz
MDE1NFoXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMDdCMzFGNDNFRDA3RDI0
OTdCRDQ2RjEzNDk1MTlFNjlBOUEzNkYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9jcZimnvj6qO0QqYGmD1PXnt4RhyO6TW0SQ5cGuYvdXb1QYBDB
KrT+c9gw04xLLpLQcPfuPvj3KISvwhEbP+wFXl7pNdiTNSLq2G7WWpXzrHLgP//C
qNFouvCYuLjx7k4c0mbNepMfBlvv1HJ02XDFMGt0dEbceo7+WXeYnnRyBXFsHwnu
TI1NXs5N1QmjoL+fE22JAuPe3Y+p7G9LTqd1zPd60T8Wsk+LHZtsIH78AxM2ly3W
18csw69sXgK2+ImyVaV2RyyFji9gHzEvfkCfxm0ZHAfklqhsbgDYmowUngxkAt5c
3TYgaWfOtP6v73laM4sd8Zs/rVAUE6uOSbUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQHsx9D7QfSSXvUbxNJUZ5pqaNvJDAfBgNVHSMEGDAWgBTNMSQn+AC4KW2hFUDI
uG5c4S/GxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTczL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9FdnhzVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9F
dnhzVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xNzMvQjdNZlEtMEgwa2w3MUc4VFNWR2VhYW1qYnlRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMuBcDANBgkqhkiG9w0BAQsFAAOCAQEA
EQUDogFTQmab4GFOrGg0/ugDAt2cGVZbqGqC+qojylLfLD3dJxrxQ7eUsrIRSqC7
WTPSRhqQBYclGXsyVq7kQnx0cUabvrLq/vAXlbf4N9Iv7ioqESUYTBsov5Z6srvt
bOtURhqWoWb/jFDqHNdr14ksQ2gr2eHmdRiZ7Z69Ru9ImOjh6eND02QqDxuIGJ/a
cV95zS85qBNM3VxSIKIRU+IyCfwPxZIfkJIAKkHabVXc1Fmlh/c1QQDhatIfQcmn
w9dFtOx+R0tF6JCXCI3aoL+pnDO/a97wjudOl6ulYXNSlwIt0nwX3u3LxG8/NMnq
R6FQ9CPWrdQZ1k5HgxckaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org