Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
File: PxC43S4iF0JShdskLEYpFT1aA7I.roa (raw, json)
Hash identifier: sE8gkPxJGHIO4ZGUMG+TQv8I/ZLzV0+N9yfk+PJWeJQ=
Subject key identifier: 3F:10:B8:DD:2E:22:17:42:52:85:DB:24:2C:46:29:15:3D:5A:03:B2
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 020D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
Signing time: Mon 20 Feb 2023 07:57:37 +0000
ROA not before: Mon 20 Feb 2023 07:57:37 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.154/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:37 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=3F10B8DD2E2217425285DB242C4629153D5A03B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:da:96:bc:b5:eb:72:d9:fa:a2:1b:62:c0:
da:36:66:f6:46:81:42:74:da:0c:72:8b:d9:bf:8b:
24:a3:2c:75:f4:27:df:c5:5b:9b:88:5b:f4:58:6a:
db:d5:ee:d6:6a:03:24:a2:47:79:3a:2d:6e:7b:69:
ae:91:bc:41:f8:b1:8f:54:29:ef:f3:36:08:98:8f:
3e:1d:ac:0c:8a:42:ec:7d:a6:f2:6b:43:92:d9:27:
8b:51:1d:6b:34:15:a5:c3:9d:9a:3a:53:26:9b:cf:
d9:1e:79:1f:37:a7:3d:4b:32:48:60:6f:c0:11:93:
15:cd:00:0b:d1:14:86:34:1b:d4:29:82:b0:77:31:
d6:ae:3b:8b:bf:36:07:0b:13:f5:15:d3:73:5d:a4:
74:00:31:d2:54:6b:8c:a0:02:47:3e:6c:e9:61:e3:
7c:38:6f:b0:a7:a7:c5:11:89:7b:e9:c8:21:fb:3d:
2c:de:7f:67:00:22:a0:8d:16:21:11:51:d6:a0:8b:
ee:68:11:c3:8e:86:54:ca:a9:52:e8:48:cf:6e:a7:
72:1b:96:f0:e3:16:42:ae:ea:64:b7:3c:75:fb:f6:
dd:8d:98:8f:0b:a4:7e:c2:91:21:8a:3b:47:1e:be:
bf:48:3e:e9:39:ab:30:fb:57:0f:e0:61:82:e8:6a:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:B8:DD:2E:22:17:42:52:85:DB:24:2C:46:29:15:3D:5A:03:B2
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.154/32
Signature Algorithm: sha256WithRSAEncryption
08:1b:c4:cc:8b:24:87:f9:38:a5:4e:61:93:0c:0e:90:84:5a:
15:81:ed:2a:06:10:d8:dc:2f:03:0c:3a:bd:9d:b2:d0:5f:1f:
4a:fd:f3:23:63:0b:49:e1:f0:8f:28:53:ec:b6:9d:d2:3c:32:
97:ef:5f:7e:b3:03:47:61:2d:22:95:1c:83:59:f3:b8:9e:ad:
cc:dc:fc:22:c0:e8:8b:85:10:1f:72:36:d2:d6:70:5a:99:db:
08:21:6e:ee:db:d6:1b:0f:83:de:df:f3:1b:18:82:48:ab:49:
bb:d3:fe:4b:9b:81:71:84:d5:c1:2a:fa:27:13:f7:84:32:fe:
a9:24:27:91:4b:40:75:95:10:37:6e:72:d1:01:c8:9a:8f:9f:
f6:af:26:7f:10:e7:3a:dc:6a:fb:33:fc:09:98:72:13:bc:87:
7f:69:26:48:4c:a6:05:38:6c:f8:73:eb:b4:47:b3:4e:d6:5f:
be:6b:72:52:d1:c9:1e:78:93:b4:fd:08:2f:0a:7e:d2:9d:e0:
0c:a3:07:12:eb:5d:70:c5:88:9a:7d:1a:6b:8e:fd:21:64:0a:
c0:7a:22:a5:30:4a:d8:1e:e5:91:1f:25:1d:8f:a2:5d:d5:6b:
52:f2:cf:b1:65:1d:99:7a:a3:6d:41:18:11:b7:46:b2:23:8a:
4d:f0:38:43
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU3MzdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNGMTBCOEREMkUyMjE3
NDI1Mjg1REIyNDJDNDYyOTE1M0Q1QTAzQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgHtqWvLXrctn6ohtiwNo2ZvZGgUJ02gxyi9m/iySjLHX0J9/F
W5uIW/RYatvV7tZqAySiR3k6LW57aa6RvEH4sY9UKe/zNgiYjz4drAyKQux9pvJr
Q5LZJ4tRHWs0FaXDnZo6Uyabz9keeR83pz1LMkhgb8ARkxXNAAvRFIY0G9QpgrB3
MdauO4u/NgcLE/UV03NdpHQAMdJUa4ygAkc+bOlh43w4b7Cnp8URiXvpyCH7PSze
f2cAIqCNFiERUdagi+5oEcOOhlTKqVLoSM9up3IblvDjFkKu6mS3PHX79t2NmI8L
pH7CkSGKO0cevr9IPuk5qzD7Vw/gYYLoaoVJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUPxC43S4iF0JShdskLEYpFT1aA7IwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9QeEM0M1M0aUYwSlNoZHNrTEVZcEZUMWFBN0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxamjANBgkqhkiG9w0BAQsFAAOCAQEACBvEzIskh/k4pU5hkwwO
kIRaFYHtKgYQ2NwvAww6vZ2y0F8fSv3zI2MLSeHwjyhT7Lad0jwyl+9ffrMDR2Et
IpUcg1nzuJ6tzNz8IsDoi4UQH3I20tZwWpnbCCFu7tvWGw+D3t/zGxiCSKtJu9P+
S5uBcYTVwSr6JxP3hDL+qSQnkUtAdZUQN25y0QHImo+f9q8mfxDnOtxq+zP8CZhy
E7yHf2kmSEymBThs+HPrtEezTtZfvmtyUtHJHniTtP0ILwp+0p3gDKMHEutdcMWI
mn0aa479IWQKwHoipTBK2B7lkR8lHY+iXdVrUvLPsWUdmXqjbUEYEbdGsiOKTfA4
Qw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org