Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/FJK0DISXtlhextE5yG5JbeFiNYY.roa
File: FJK0DISXtlhextE5yG5JbeFiNYY.roa (raw, json)
Hash identifier: WhhJk14wBVFdYVt14aun3aNBrLdtVEhlstP7xFFo00E=
Subject key identifier: 14:92:B4:0C:84:97:B6:58:5E:C6:D1:39:C8:6E:49:6D:E1:62:35:86
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 99
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/FJK0DISXtlhextE5yG5JbeFiNYY.roa
Signing time: Thu 13 Apr 2023 09:53:16 +0000
ROA not before: Thu 13 Apr 2023 09:53:16 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 18126
IP address blocks: 103.2.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Apr 13 09:53:16 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=1492B40C8497B6585EC6D139C86E496DE1623586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:10:5c:e2:ca:a9:80:3e:5d:1f:46:ba:b1:
5e:b4:15:d6:ab:aa:4a:30:f5:61:1d:0b:f8:87:7a:
ce:88:77:8b:f3:06:fe:30:69:a7:4f:72:ed:f3:c6:
90:60:3e:37:5e:19:85:e5:fb:5f:7d:c7:22:d1:59:
31:9c:86:33:c1:b9:a0:31:3b:47:96:97:28:60:6c:
e4:86:49:83:69:ec:a1:55:ee:8d:37:7c:b0:c1:8d:
12:86:57:c2:45:8f:64:a3:8e:62:f8:93:15:d6:fd:
ca:f5:9f:8f:e9:35:ce:85:6c:60:85:e4:9d:3c:d2:
7f:93:96:8e:a0:f1:e7:db:25:45:72:68:5c:4e:10:
73:9a:91:fe:a2:2f:a8:5c:2c:e2:40:50:00:30:e6:
df:8b:97:ec:0c:52:c4:6e:de:1c:4b:f7:66:a9:77:
ea:52:9e:2d:3e:1a:8e:fc:ca:6c:06:c4:f2:05:a2:
b2:d6:11:ae:b6:7d:c2:2f:2c:79:f8:38:12:8f:88:
c3:7c:f3:b2:62:a5:fa:b0:a8:89:d1:a7:2a:46:60:
db:e0:88:b3:97:d0:3b:9a:48:3c:b3:f2:fc:94:c6:
cc:91:27:bd:4e:9a:e2:9d:d0:cf:6e:e1:fa:aa:20:
b7:ff:59:59:7a:50:a7:98:9c:a8:a8:a3:08:12:ee:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:B4:0C:84:97:B6:58:5E:C6:D1:39:C8:6E:49:6D:E1:62:35:86
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/FJK0DISXtlhextE5yG5JbeFiNYY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.20.0/22
Signature Algorithm: sha256WithRSAEncryption
29:07:9e:5f:61:67:a1:43:a0:ea:da:48:f3:6e:73:de:09:d0:
57:19:9d:84:ec:81:53:38:47:32:af:fe:e9:fe:1e:6e:b3:2c:
f9:f8:ed:83:a9:4a:0f:d4:7b:a8:47:ed:a5:6e:e6:cb:9c:db:
dd:48:b7:80:1b:bf:71:d4:22:c2:c5:82:7b:2a:ae:6a:3a:9f:
67:85:5c:ba:4b:9b:d7:8b:c9:3a:12:64:28:6a:6b:c8:45:0e:
5b:5c:ab:64:a3:0a:04:cb:35:fc:04:47:87:21:9f:ae:e5:94:
41:ac:22:21:9d:e8:09:c4:63:41:7a:83:9a:af:53:c2:bf:94:
a8:44:14:b7:e9:af:1b:fd:2c:28:aa:29:0c:3e:f3:67:5a:ab:
25:18:b6:06:3f:88:70:95:81:f0:03:a0:6b:eb:09:b4:72:c4:
c6:e3:fd:74:72:30:11:f1:fb:5d:a0:f0:aa:a5:41:69:9b:d4:
ae:f8:da:49:c9:91:b1:ae:db:1c:18:73:24:dd:27:85:66:97:
17:8e:2e:68:53:c7:e0:d2:79:3a:d1:01:b4:b0:f7:2c:bb:d2:
ef:95:bb:fa:15:49:4f:7e:02:64:81:57:eb:d1:4d:d1:11:9c:
fa:35:db:84:85:d4:99:69:3f:24:03:21:fa:c6:d0:ea:78:d4:
9f:cb:1a:bb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yMzA0MTMw
OTUzMTZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDE0OTJCNDBDODQ5N0I2
NTg1RUM2RDEzOUM4NkU0OTZERTE2MjM1ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGfRBc4sqpgD5dH0a6sV60Fdarqkow9WEdC/iHes6Id4vzBv4w
aadPcu3zxpBgPjdeGYXl+199xyLRWTGchjPBuaAxO0eWlyhgbOSGSYNp7KFV7o03
fLDBjRKGV8JFj2SjjmL4kxXW/cr1n4/pNc6FbGCF5J080n+Tlo6g8efbJUVyaFxO
EHOakf6iL6hcLOJAUAAw5t+Ll+wMUsRu3hxL92apd+pSni0+Go78ymwGxPIForLW
Ea62fcIvLHn4OBKPiMN887JipfqwqInRpypGYNvgiLOX0DuaSDyz8vyUxsyRJ71O
muKd0M9u4fqqILf/WVl6UKeYnKioowgS7oW7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFJK0DISXtlhextE5yG5JbeFiNYYwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTczL0ZKSzBESVNYdGxoZXh0RTV5RzVKYmVGaU5ZWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnAhQwDQYJKoZIhvcNAQELBQADggEBACkHnl9hZ6FDoOraSPNuc94J0FcZ
nYTsgVM4RzKv/un+Hm6zLPn47YOpSg/Ue6hH7aVu5suc291It4Abv3HUIsLFgnsq
rmo6n2eFXLpLm9eLyToSZChqa8hFDltcq2SjCgTLNfwER4chn67llEGsIiGd6AnE
Y0F6g5qvU8K/lKhEFLfprxv9LCiqKQw+82daqyUYtgY/iHCVgfADoGvrCbRyxMbj
/XRyMBHx+12g8KqlQWmb1K742knJkbGu2xwYcyTdJ4VmlxeOLmhTx+DSeTrRAbSw
9yy70u+Vu/oVSU9+AmSBV+vRTdERnPo124SF1JlpPyQDIfrG0Op41J/LGrs=
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org