Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/4HKJ-JGudpdVRthnyELCCVvqLVo.roa
File: 4HKJ-JGudpdVRthnyELCCVvqLVo.roa (raw, json)
Hash identifier: K6yga/3yWSLwqwxwFJ4xgDCIkXos2ogB0X9ULmIAJl0=
Subject key identifier: E0:72:89:F8:91:AE:76:97:55:46:D8:67:C8:42:C2:09:5B:EA:2D:5A
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 6A
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/4HKJ-JGudpdVRthnyELCCVvqLVo.roa
Signing time: Wed 01 Sep 2021 01:30:23 +0000
ROA not before: Wed 01 Sep 2021 01:30:23 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 7684
IP address blocks: 202.242.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:23 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=E07289F891AE76975546D867C842C2095BEA2D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:87:11:bf:74:e5:86:a6:7a:17:42:b7:af:
49:81:5e:58:53:d1:fc:40:4e:4d:65:6f:6d:ea:7f:
dd:84:ba:56:14:e1:08:55:e7:af:57:a0:06:ee:6c:
4a:f6:8a:b6:98:54:93:72:77:dd:48:50:ed:f7:48:
6d:e5:0b:8f:f7:5f:6a:31:dd:10:9a:2a:29:8f:f4:
37:09:9f:45:b3:a4:34:cc:4e:9b:36:68:68:91:d1:
86:1e:01:db:df:a9:76:0b:06:13:cb:7b:8c:3b:80:
65:af:7b:f2:6f:53:17:0f:2f:97:e6:06:b8:40:1f:
b2:69:86:e1:e8:70:fc:16:63:7e:ec:88:62:68:52:
a9:64:31:54:40:bb:1f:cb:87:62:0c:e3:45:7d:12:
c1:17:56:7f:88:d9:ba:07:47:06:ac:e8:ae:4f:57:
fe:d4:72:5a:4b:d1:f4:91:ad:45:9e:80:95:3e:80:
2d:09:b7:8f:b9:39:e9:c8:ac:cd:b7:e4:6d:f1:4e:
ed:94:ae:71:00:a9:3a:cf:2f:74:2a:4a:5f:1e:d6:
08:64:48:c3:c0:06:7d:85:20:8a:73:7d:ff:85:23:
7c:c0:9e:e6:ba:33:30:29:93:80:c0:c2:98:19:44:
ca:2b:0b:4f:0d:17:79:39:a6:72:b7:bf:5d:87:63:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:89:F8:91:AE:76:97:55:46:D8:67:C8:42:C2:09:5B:EA:2D:5A
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/4HKJ-JGudpdVRthnyELCCVvqLVo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.242.89.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:fa:0d:fa:53:45:d7:b9:e1:62:e7:5b:b2:23:6a:90:db:
72:ff:44:f5:37:44:6f:c8:b2:59:a2:c6:55:e6:61:51:d1:b4:
9c:24:91:6d:c2:5d:17:af:2e:42:d4:33:a6:de:80:e2:00:81:
78:c7:cc:83:2a:5e:e8:76:c5:91:dd:3e:8b:dd:76:e9:74:7a:
78:35:6d:28:83:f5:df:45:18:c7:c5:fa:81:2d:97:37:65:14:
00:76:04:79:5c:e8:e2:b7:e7:4f:ee:80:25:4b:c5:53:98:72:
7e:ec:f7:1d:be:2c:44:8c:67:92:d4:38:e6:0b:eb:4a:63:39:
88:f2:08:c8:01:aa:dc:a1:1f:24:c7:64:b7:bb:aa:71:d1:d0:
d1:bd:ed:a2:13:12:e3:74:b0:89:04:e2:ef:f0:e4:6e:9d:5f:
59:fb:18:ef:c6:dd:51:5b:63:d2:dd:ad:02:02:bf:16:fc:c4:
e6:34:e4:a9:1f:3a:0d:7a:d1:ab:07:6b:c4:e4:0e:a4:6f:d7:
e1:7d:59:49:ec:f3:d7:68:48:2d:89:67:70:c7:4a:b8:3c:5b:
37:8c:59:27:59:53:b5:77:4b:27:db:6e:82:e1:e4:2f:73:b9:
95:86:0d:af:36:87:a1:43:f9:86:e2:e8:95:cc:23:f8:61:97:
2c:fc:4e:9a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QTIx
QkRGRjJEQ0FGQ0MxMzhGNUJGRDZDMDMzMEQwMjE5RTBGNTMyMB4XDTIxMDkwMTAx
MzAyM1oXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoRTA3Mjg5Rjg5MUFFNzY5
NzU1NDZEODY3Qzg0MkMyMDk1QkVBMkQ1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOe4hxG/dOWGpnoXQrevSYFeWFPR/EBOTWVvbep/3YS6VhThCFXn
r1egBu5sSvaKtphUk3J33UhQ7fdIbeULj/dfajHdEJoqKY/0NwmfRbOkNMxOmzZo
aJHRhh4B29+pdgsGE8t7jDuAZa978m9TFw8vl+YGuEAfsmmG4ehw/BZjfuyIYmhS
qWQxVEC7H8uHYgzjRX0SwRdWf4jZugdHBqzork9X/tRyWkvR9JGtRZ6AlT6ALQm3
j7k56ciszbfkbfFO7ZSucQCpOs8vdCpKXx7WCGRIw8AGfYUginN9/4UjfMCe5roz
MCmTgMDCmBlEyisLTw0XeTmmcre/XYdjodsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTgcon4ka52l1VG2GfIQsIJW+otWjAfBgNVHSMEGDAWgBSaIb3/Lcr8wTj1v9bA
Mw0CGeD1MjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ3L21pRzlfeTNLX01FNDliX1d3RE1OQWhuZzlUSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21pRzlfeTNLX01FNDliX1d3RE1OQWhu
ZzlUSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDcvNEhLSi1KR3VkcGRWUnRobnlFTENDVnZxTFZvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMryWTANBgkqhkiG9w0BAQsFAAOCAQEA
RIP6DfpTRde54WLnW7IjapDbcv9E9TdEb8iyWaLGVeZhUdG0nCSRbcJdF68uQtQz
pt6A4gCBeMfMgype6HbFkd0+i9126XR6eDVtKIP130UYx8X6gS2XN2UUAHYEeVzo
4rfnT+6AJUvFU5hyfuz3Hb4sRIxnktQ45gvrSmM5iPIIyAGq3KEfJMdkt7uqcdHQ
0b3tohMS43SwiQTi7/Dkbp1fWfsY78bdUVtj0t2tAgK/FvzE5jTkqR86DXrRqwdr
xOQOpG/X4X1ZSezz12hILYlncMdKuDxbN4xZJ1lTtXdLJ9tuguHkL3O5lYYNrzaH
oUP5huLolcwj+GGXLPxOmg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:06 2025 by rpki-client