Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LznQll9EHXrMV3oAmMlY4bNSvS0.roa
File: LznQll9EHXrMV3oAmMlY4bNSvS0.roa (raw, json)
Hash identifier: MXB+NfmTDzsGy0vPmiip7VR6845YycyYKjoZC/nPIwg=
Subject key identifier: 2F:39:D0:96:5F:44:1D:7A:CC:57:7A:00:98:C9:58:E1:B3:52:BD:2D
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0278
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LznQll9EHXrMV3oAmMlY4bNSvS0.roa
Signing time: Mon 20 Feb 2023 08:03:33 +0000
ROA not before: Mon 20 Feb 2023 08:03:33 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.24/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:03:33 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=2F39D0965F441D7ACC577A0098C958E1B352BD2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:fa:c0:cf:c7:2a:94:42:d0:77:b1:de:d8:
85:82:7c:0e:b8:2e:93:e2:bd:0b:ca:04:47:3c:28:
b4:cc:eb:8e:b8:b5:08:a1:bd:49:2d:0e:fb:bf:54:
5b:a6:40:18:99:5a:7d:6d:d7:a5:80:49:3c:26:c5:
68:2d:24:4e:68:0d:04:04:a4:1b:25:54:88:23:5a:
78:69:6c:a3:79:a2:7c:86:6b:83:74:15:2c:83:2a:
3f:97:da:0c:c4:20:d1:38:a2:00:ea:42:10:f3:f7:
6e:65:88:2d:05:9d:f1:52:9a:ac:fa:17:f8:d8:c0:
c7:49:55:e7:26:1c:3d:a4:0f:e3:01:bb:95:59:3b:
f3:a4:52:2e:2b:24:fc:43:93:e1:d8:fd:f3:6b:31:
55:d5:55:32:92:cb:36:c9:49:a9:fe:30:e8:42:e6:
ed:bc:b8:8f:a9:77:a5:fb:6c:0d:a3:6a:3d:07:2d:
1e:b0:a5:b7:66:41:1f:83:66:6c:c7:e0:df:f5:5f:
aa:29:74:5f:f2:e3:4e:7f:ef:e6:f8:cf:31:20:37:
63:7f:6f:ab:9a:c8:e6:66:82:91:aa:35:4a:99:86:
79:e8:3c:a8:68:5d:68:da:53:b2:04:ae:c0:6f:da:
ee:28:4a:51:90:56:7d:08:5a:c2:9e:fd:85:6e:08:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:D0:96:5F:44:1D:7A:CC:57:7A:00:98:C9:58:E1:B3:52:BD:2D
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LznQll9EHXrMV3oAmMlY4bNSvS0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.24/32
Signature Algorithm: sha256WithRSAEncryption
6a:d4:9d:de:ab:4e:ab:d9:95:aa:18:80:c4:78:20:23:b2:9d:
4f:2e:28:a0:40:6b:42:93:c1:23:38:72:ad:3a:ae:4d:f1:ec:
75:cb:37:99:49:fc:47:b6:11:8f:b5:a2:2b:02:98:31:fe:1c:
40:a3:db:4c:b4:9a:52:f5:ad:8e:b8:97:ee:92:0f:44:05:ab:
50:a8:de:d1:fd:5f:d2:10:ae:07:cc:e2:79:e9:86:d1:d4:43:
22:23:6a:6b:f9:47:b1:28:b4:16:5a:49:34:3f:2e:ce:de:dd:
dd:72:c4:0b:a8:b2:46:02:aa:cc:85:ff:25:29:59:b9:d8:8a:
8a:1a:e1:23:6f:08:c8:67:46:2f:ae:86:63:93:b5:47:19:c9:
00:25:94:cc:79:b0:90:73:10:20:be:b9:42:a2:91:02:55:85:
d7:11:8c:b7:73:e6:fa:23:7e:d1:75:b0:81:98:1f:6f:98:ee:
45:2a:b5:08:f5:a8:a2:2d:d8:77:98:bf:30:9b:d0:6a:86:d8:
28:89:cd:35:62:22:db:9b:2d:06:3a:e1:37:0e:25:1b:c8:2f:
2c:77:c0:93:5c:a2:50:7b:9a:e6:2a:61:49:df:0f:e1:18:96:
ff:46:8a:af:70:0b:f8:f2:e4:3f:62:6c:a8:7d:e5:f6:f1:24:
49:15:8a:c1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAzMzNaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGMzlEMDk2NUY0NDFE
N0FDQzU3N0EwMDk4Qzk1OEUxQjM1MkJEMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZ9PrAz8cqlELQd7He2IWCfA64LpPivQvKBEc8KLTM6464tQih
vUktDvu/VFumQBiZWn1t16WASTwmxWgtJE5oDQQEpBslVIgjWnhpbKN5onyGa4N0
FSyDKj+X2gzEINE4ogDqQhDz925liC0FnfFSmqz6F/jYwMdJVecmHD2kD+MBu5VZ
O/OkUi4rJPxDk+HY/fNrMVXVVTKSyzbJSan+MOhC5u28uI+pd6X7bA2jaj0HLR6w
pbdmQR+DZmzH4N/1X6opdF/y405/7+b4zzEgN2N/b6uayOZmgpGqNUqZhnnoPKho
XWjaU7IErsBv2u4oSlGQVn0IWsKe/YVuCGYzAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQULznQll9EHXrMV3oAmMlY4bNSvS0wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9Mem5RbGw5RUhYck1WM29BbU1sWTRiTlN2UzAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaGDANBgkqhkiG9w0BAQsFAAOCAQEAatSd3qtOq9mVqhiAxHgg
I7KdTy4ooEBrQpPBIzhyrTquTfHsdcs3mUn8R7YRj7WiKwKYMf4cQKPbTLSaUvWt
jriX7pIPRAWrUKje0f1f0hCuB8zieemG0dRDIiNqa/lHsSi0FlpJND8uzt7d3XLE
C6iyRgKqzIX/JSlZudiKihrhI28IyGdGL66GY5O1RxnJACWUzHmwkHMQIL65QqKR
AlWF1xGMt3Pm+iN+0XWwgZgfb5juRSq1CPWooi3Yd5i/MJvQaobYKInNNWIi25st
BjrhNw4lG8gvLHfAk1yiUHua5iphSd8P4RiW/0aKr3AL+PLkP2JsqH3l9vEkSRWK
wQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org