Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WpurWKmxFre4R_FYlXgnWhz9D0o.roa
File: WpurWKmxFre4R_FYlXgnWhz9D0o.roa (raw, json)
Hash identifier: yxZOl4WbVp20ptIkVpFe33/NT5coJZ24gL20suvzEQs=
Subject key identifier: 5A:9B:AB:58:A9:B1:16:B7:B8:47:F1:58:95:78:27:5A:1C:FD:0F:4A
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 2E
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WpurWKmxFre4R_FYlXgnWhz9D0o.roa
Signing time: Thu 01 Sep 2022 01:28:48 +0000
ROA not before: Thu 01 Sep 2022 01:28:48 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 23816
IP address blocks: 202.239.16.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Sep 1 01:28:48 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=5A9BAB58A9B116B7B847F1589578275A1CFD0F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:a0:f0:69:90:b7:04:1b:57:c8:5d:63:ab:
88:bf:39:66:8d:a5:79:95:88:ed:ac:0c:a3:df:c8:
ad:3c:35:8b:e6:69:b8:86:d3:72:33:c2:99:5d:61:
e6:e4:7e:85:b2:41:a0:1f:45:ef:e6:f2:0d:91:8e:
31:de:6d:bb:43:5a:5a:41:9c:7f:b4:87:c0:70:a5:
e6:45:06:78:b0:5e:74:25:7b:f4:b0:6f:03:e5:1d:
69:2a:3f:b3:5d:b1:02:3f:61:ee:b8:9c:83:ac:78:
4a:90:4a:38:66:8c:a2:74:9f:81:e6:77:a5:fc:5b:
f4:c7:69:bd:24:3f:5a:27:b7:f1:6f:14:5a:54:77:
60:ed:5e:64:0e:4b:a2:ef:45:f5:c4:a0:8a:88:fb:
a2:9e:70:df:61:69:ab:42:cc:e5:cb:af:5b:3f:52:
f5:3e:f4:b0:88:f0:a0:19:55:67:26:7d:54:8c:fa:
5c:5d:18:5a:cd:9f:08:57:cb:ff:ec:d0:52:80:56:
6b:1b:9e:74:da:d8:ae:46:18:48:50:04:56:4a:93:
86:29:f6:9f:0b:56:73:bd:e9:4d:46:e0:63:da:34:
3a:ae:ba:58:00:ca:de:0a:85:b0:5c:c4:d5:93:59:
15:3b:91:9f:86:a4:46:c1:c8:7f:27:d4:4b:fb:de:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:AB:58:A9:B1:16:B7:B8:47:F1:58:95:78:27:5A:1C:FD:0F:4A
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WpurWKmxFre4R_FYlXgnWhz9D0o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.239.16.0/22
Signature Algorithm: sha256WithRSAEncryption
51:82:19:f3:06:10:ab:1c:b4:35:18:aa:77:6f:4e:a5:81:a8:
73:45:8f:41:26:ff:79:ff:7d:a0:6e:48:d5:93:0c:d4:ff:38:
ae:54:5e:b5:62:a4:32:bf:dd:a8:17:47:11:92:fe:f3:c4:e3:
29:2b:d1:d8:1e:4f:69:ec:e1:5a:0c:be:be:77:c9:d1:09:8d:
e2:7f:a4:ca:a5:bd:a9:75:7a:73:f1:fc:67:73:61:47:4b:41:
f9:f6:6e:80:db:31:b9:3d:71:81:60:14:2c:ce:3d:2a:23:9e:
e8:95:aa:0e:99:7c:38:c2:a2:4d:db:08:6b:1d:cc:d4:de:6e:
8a:d8:5e:d3:d9:bd:c5:49:46:40:4c:ce:7b:0a:ce:08:a7:e1:
44:56:a5:f5:68:7b:09:4a:39:ee:99:9e:8b:b1:fd:9a:39:36:
ea:13:95:85:0e:c8:5b:1c:1e:b4:a9:d3:86:1b:9d:d5:6b:e2:
0e:95:af:6c:ce:17:eb:23:9f:9a:dd:e5:86:65:f8:4f:e1:8b:
a1:66:04:0b:51:6b:9c:22:45:9d:4a:b3:76:51:80:4e:29:99:
e1:75:51:2a:96:41:93:36:fe:8c:bf:70:ee:1d:41:71:4a:2a:
3c:77:70:fc:ea:f7:79:0d:08:0c:47:67:23:5c:5a:df:74:51:
28:29:a2:73
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTIyMDkwMTAx
Mjg0OFoXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoNUE5QkFCNThBOUIxMTZC
N0I4NDdGMTU4OTU3ODI3NUExQ0ZEMEY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOmJoPBpkLcEG1fIXWOriL85Zo2leZWI7awMo9/IrTw1i+ZpuIbT
cjPCmV1h5uR+hbJBoB9F7+byDZGOMd5tu0NaWkGcf7SHwHCl5kUGeLBedCV79LBv
A+UdaSo/s12xAj9h7ricg6x4SpBKOGaMonSfgeZ3pfxb9MdpvSQ/Wie38W8UWlR3
YO1eZA5Lou9F9cSgioj7op5w32Fpq0LM5cuvWz9S9T70sIjwoBlVZyZ9VIz6XF0Y
Ws2fCFfL/+zQUoBWaxuedNrYrkYYSFAEVkqThin2nwtWc73pTUbgY9o0Oq66WADK
3gqFsFzE1ZNZFTuRn4akRsHIfyfUS/ve3p8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRam6tYqbEWt7hH8ViVeCdaHP0PSjAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L1dwdXJXS214RnJlNFJfRllsWGduV2h6OUQwby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALK7xAwDQYJKoZIhvcNAQELBQADggEBAFGCGfMGEKsctDUYqndvTqWB
qHNFj0Em/3n/faBuSNWTDNT/OK5UXrVipDK/3agXRxGS/vPE4ykr0dgeT2ns4VoM
vr53ydEJjeJ/pMqlval1enPx/GdzYUdLQfn2boDbMbk9cYFgFCzOPSojnuiVqg6Z
fDjCok3bCGsdzNTeborYXtPZvcVJRkBMznsKzgin4URWpfVoewlKOe6Znoux/Zo5
NuoTlYUOyFscHrSp04YbndVr4g6Vr2zOF+sjn5rd5YZl+E/hi6FmBAtRa5wiRZ1K
s3ZRgE4pmeF1USqWQZM2/oy/cO4dQXFKKjx3cPzq93kNCAxHZyNcWt90USgponM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org