Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/wNj40t48aIPLVHwqzzRrYe83z9w.roa
File: wNj40t48aIPLVHwqzzRrYe83z9w.roa (raw, json)
Hash identifier: kci2Bt7g483hu+l0e/9DIKkXlI/1TcuAhImpJa5XD3o=
Subject key identifier: C0:D8:F8:D2:DE:3C:68:83:CB:54:7C:2A:CF:34:6B:61:EF:37:CF:DC
Certificate issuer: /CN=35892143C493B9B2CC1E79133F5231C72E152685
Certificate serial: 03
Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/wNj40t48aIPLVHwqzzRrYe83z9w.roa
Signing time: Mon 15 Feb 2021 04:59:51 +0000
ROA not before: Mon 15 Feb 2021 04:59:51 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 396982
IP address blocks: 202.250.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685
Validity
Not Before: Feb 15 04:59:51 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=C0D8F8D2DE3C6883CB547C2ACF346B61EF37CFDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:a4:b2:0c:3c:65:60:88:53:15:00:83:7e:
18:13:fb:ff:cd:7b:d3:18:54:81:fb:6f:41:3d:ff:
24:b9:85:fc:41:0a:43:07:f4:3f:7e:ba:68:e8:85:
a5:a4:5a:e5:49:0a:5f:5d:33:9e:0a:ae:72:fe:7e:
c9:e0:3f:07:ae:d5:4d:b2:4f:bb:b2:32:cb:e8:79:
84:a6:ed:0b:e0:43:bf:6b:8b:5e:77:7e:e5:19:eb:
a5:f0:65:7b:33:36:ba:77:d5:f9:62:6a:fb:79:36:
60:a4:e8:c1:3a:94:9e:6c:b3:37:80:be:15:40:8a:
dc:45:fa:46:db:03:ee:c5:04:f7:69:33:30:9a:c0:
7a:31:c9:86:d3:6c:66:41:93:72:5a:fd:c3:36:c3:
36:64:7b:7c:b3:4d:5d:29:41:43:1f:80:d2:63:d1:
65:c1:1f:a4:23:43:da:e4:6a:2a:d3:40:9f:a4:6f:
96:db:42:ac:b3:5f:49:0c:1a:07:6f:06:bc:51:4c:
40:5e:23:d9:6b:f5:73:18:47:1c:8f:ef:09:f2:7a:
73:8f:bd:ce:55:ea:cb:56:a2:90:34:86:63:67:37:
60:74:4a:d9:61:2a:53:ba:52:cf:69:ea:1f:a4:cd:
35:c8:ab:d8:98:a8:a9:76:26:d4:5d:f1:71:e5:66:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:F8:D2:DE:3C:68:83:CB:54:7C:2A:CF:34:6B:61:EF:37:CF:DC
X509v3 Authority Key Identifier:
keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/wNj40t48aIPLVHwqzzRrYe83z9w.roa
sbgp-ipAddrBlock: critical
IPv4:
202.250.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c5:d5:80:01:95:f6:50:4b:0f:5e:0a:59:b6:09:c2:3e:69:
f6:e8:24:78:21:f0:67:55:e1:66:91:2f:ce:10:5c:c7:1b:fa:
12:8e:6e:c1:f6:a6:ae:98:e1:9e:ac:ee:20:dd:4d:4b:71:54:
c4:fe:b6:a2:5f:47:52:11:74:6d:b5:09:e8:e5:dd:58:4d:12:
76:61:e9:7f:6f:58:1c:3f:91:22:a4:92:7e:6f:39:bd:70:8d:
eb:ba:74:dc:c7:e1:58:5a:60:25:57:38:8c:cc:86:e7:56:6e:
93:49:10:17:fa:00:1a:12:58:dc:6e:00:cb:28:b1:5d:db:07:
c7:25:2c:58:53:48:7a:5c:25:73:f8:18:46:26:48:d6:eb:e2:
c5:e0:d7:ef:c2:54:38:c4:ca:30:c3:0e:d3:13:a8:79:c4:95:
5b:15:40:93:0a:0b:3a:3a:2a:73:68:98:ce:b4:34:67:8d:5b:
92:37:66:38:0d:46:46:0a:34:4e:51:99:c1:8a:8a:6b:c2:f3:
3b:db:6d:cb:94:df:cd:80:33:73:5e:c4:19:93:b7:d4:40:f7:
30:79:c5:2d:58:11:65:7d:f8:23:e6:69:29:77:7d:95:fb:4d:
65:c3:5a:a5:20:54:71:e0:87:bf:31:42:77:01:68:b2:1e:a3:
22:dc:7d:20
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNTg5
MjE0M0M0OTNCOUIyQ0MxRTc5MTMzRjUyMzFDNzJFMTUyNjg1MB4XDTIxMDIxNTA0
NTk1MVoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQzBEOEY4RDJERTNDNjg4
M0NCNTQ3QzJBQ0YzNDZCNjFFRjM3Q0ZEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOlkpLIMPGVgiFMVAIN+GBP7/8170xhUgftvQT3/JLmF/EEKQwf0
P366aOiFpaRa5UkKX10zngqucv5+yeA/B67VTbJPu7Iyy+h5hKbtC+BDv2uLXnd+
5RnrpfBlezM2unfV+WJq+3k2YKTowTqUnmyzN4C+FUCK3EX6RtsD7sUE92kzMJrA
ejHJhtNsZkGTclr9wzbDNmR7fLNNXSlBQx+A0mPRZcEfpCND2uRqKtNAn6RvlttC
rLNfSQwaB28GvFFMQF4j2Wv1cxhHHI/vCfJ6c4+9zlXqy1aikDSGY2c3YHRK2WEq
U7pSz2nqH6TNNcir2JioqXYm1F3xceVmuT0CAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTA2PjS3jxog8tUfCrPNGth7zfP3DAfBgNVHSMEGDAWgBQ1iSFDxJO5ssweeRM/
UjHHLhUmhTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjE1NC9OWWtoUThTVHViTE1IbmtUUDFJeHh5NFZKb1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OWWtoUThTVHViTE1IbmtUUDFJeHh5
NFZKb1UuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjE1NC93Tmo0MHQ0OGFJUExWSHdxenpSclllODN6OXcucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyvocMA0GCSqGSIb3DQEBCwUAA4IB
AQBvxdWAAZX2UEsPXgpZtgnCPmn26CR4IfBnVeFmkS/OEFzHG/oSjm7B9qaumOGe
rO4g3U1LcVTE/raiX0dSEXRttQno5d1YTRJ2Yel/b1gcP5EipJJ+bzm9cI3runTc
x+FYWmAlVziMzIbnVm6TSRAX+gAaEljcbgDLKLFd2wfHJSxYU0h6XCVz+BhGJkjW
6+LF4NfvwlQ4xMowww7TE6h5xJVbFUCTCgs6OipzaJjOtDRnjVuSN2Y4DUZGCjRO
UZnBioprwvM7223LlN/NgDNzXsQZk7fUQPcwecUtWBFlffgj5mkpd32V+01lw1ql
IFRx4Ie/MUJ3AWiyHqMi3H0g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org