Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/NrAK38wc_Hsui4rxmVqccI31C0c.roa
File: NrAK38wc_Hsui4rxmVqccI31C0c.roa (raw, json)
Hash identifier: sv0/TF7FGzUYQo7cgrYvZS/y8ooesQ5L5kJsYNpykhE=
Subject key identifier: 36:B0:0A:DF:CC:1C:FC:7B:2E:8B:8A:F1:99:5A:9C:70:8D:F5:0B:47
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 62
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NrAK38wc_Hsui4rxmVqccI31C0c.roa
Signing time: Wed 01 Sep 2021 01:30:21 +0000
ROA not before: Wed 01 Sep 2021 01:30:21 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 163.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:21 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=36B00ADFCC1CFC7B2E8B8AF1995A9C708DF50B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:02:32:99:7a:ed:39:6f:4f:ee:49:d4:d0:
bc:b5:34:5a:1d:7b:9a:8c:6a:35:fb:42:32:7c:93:
e8:65:62:3c:bd:c6:d6:72:ae:ba:b8:89:7e:c5:90:
62:c3:24:90:97:08:55:7c:b9:d9:42:5a:26:73:66:
a2:eb:22:84:28:9b:01:76:9a:68:e4:2f:be:ce:ae:
ae:aa:33:f9:bf:1d:8c:36:7e:1e:65:12:38:6a:f9:
85:ec:ca:2c:cb:cf:38:8e:f2:9a:25:8f:0b:21:41:
50:05:41:0b:ad:de:ca:59:6c:9f:78:1a:3e:e9:4e:
04:55:0d:ed:cf:54:f6:e3:25:b0:20:10:4d:15:95:
36:f0:b7:19:c2:0b:2e:12:2f:95:f2:91:7b:6c:80:
a7:92:bb:8b:15:80:1f:ef:bf:0e:24:2e:f0:f9:20:
53:36:9f:0a:59:3e:88:44:ef:16:11:b4:db:22:61:
9c:57:a8:b0:50:77:e9:45:f8:6c:b0:3b:71:38:b3:
a4:bc:09:1e:0e:fb:53:03:87:3e:c4:6f:86:af:cc:
98:90:ad:01:2e:cb:1b:93:04:f5:dc:7b:49:cd:0c:
2a:3b:9e:7e:64:e1:96:10:40:09:0e:a4:c3:78:24:
84:67:cd:38:8c:16:f3:db:b2:6d:c9:02:01:5f:80:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:0A:DF:CC:1C:FC:7B:2E:8B:8A:F1:99:5A:9C:70:8D:F5:0B:47
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NrAK38wc_Hsui4rxmVqccI31C0c.roa
sbgp-ipAddrBlock: critical
IPv4:
163.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:f9:80:1d:1f:a5:e7:b3:c0:61:93:88:9d:93:cb:db:99:1e:
d2:f5:a5:f5:b6:03:cf:42:62:cc:61:23:2d:34:16:93:d0:fc:
bd:52:2d:ea:63:c3:38:5f:ad:b1:c0:21:2e:07:1c:cd:43:ac:
43:59:f8:dc:f3:c8:6e:13:68:e7:ee:d8:fb:2a:f2:62:94:5e:
c3:15:0a:15:7b:5b:f1:c0:fa:78:0e:c1:f9:b2:65:99:b3:1d:
e1:11:6a:b5:4e:49:66:41:37:86:39:50:bc:33:39:21:04:db:
64:84:19:48:aa:b1:93:71:f4:50:4b:8c:39:6e:68:7d:e5:33:
a3:45:02:12:6d:72:29:d0:3f:c2:46:62:39:13:4a:b2:84:c0:
92:0c:43:61:ee:d7:73:7b:1a:f1:86:c4:a7:eb:1e:dd:d0:12:
f6:c6:c6:72:f1:5d:75:05:e5:48:66:5f:f9:fb:a6:47:20:ed:
d8:86:08:5a:c5:6c:35:bb:ee:09:d1:15:e1:0c:2c:9a:70:e7:
9f:d2:cd:09:c8:2b:36:1b:af:07:d7:41:60:d4:3e:59:5f:c1:
6c:ca:4e:7a:4d:f9:ab:27:a0:0c:e5:ce:18:db:d5:e3:d6:42:
be:89:97:48:53:cd:2d:45:ff:e1:c1:0d:44:b5:fa:fd:86:dc:
88:1b:fe:99
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QTIx
QkRGRjJEQ0FGQ0MxMzhGNUJGRDZDMDMzMEQwMjE5RTBGNTMyMB4XDTIxMDkwMTAx
MzAyMVoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoMzZCMDBBREZDQzFDRkM3
QjJFOEI4QUYxOTk1QTlDNzA4REY1MEI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOY5AjKZeu05b0/uSdTQvLU0Wh17moxqNftCMnyT6GViPL3G1nKu
uriJfsWQYsMkkJcIVXy52UJaJnNmousihCibAXaaaOQvvs6urqoz+b8djDZ+HmUS
OGr5hezKLMvPOI7ymiWPCyFBUAVBC63eyllsn3gaPulOBFUN7c9U9uMlsCAQTRWV
NvC3GcILLhIvlfKRe2yAp5K7ixWAH++/DiQu8PkgUzafClk+iETvFhG02yJhnFeo
sFB36UX4bLA7cTizpLwJHg77UwOHPsRvhq/MmJCtAS7LG5ME9dx7Sc0MKjuefmTh
lhBACQ6kw3gkhGfNOIwW89uybckCAV+A4VECAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBQ2sArfzBz8ey6LivGZWpxwjfULRzAfBgNVHSMEGDAWgBSaIb3/Lcr8wTj1v9bA
Mw0CGeD1MjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ3L21pRzlfeTNLX01FNDliX1d3RE1OQWhuZzlUSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21pRzlfeTNLX01FNDliX1d3RE1OQWhu
ZzlUSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDcvTnJBSzM4d2NfSHN1aTRyeG1WcWNjSTMxQzBjLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKMrMA0GCSqGSIb3DQEBCwUAA4IBAQA0
+YAdH6Xns8Bhk4idk8vbmR7S9aX1tgPPQmLMYSMtNBaT0Py9Ui3qY8M4X62xwCEu
BxzNQ6xDWfjc88huE2jn7tj7KvJilF7DFQoVe1vxwPp4DsH5smWZsx3hEWq1Tklm
QTeGOVC8MzkhBNtkhBlIqrGTcfRQS4w5bmh95TOjRQISbXIp0D/CRmI5E0qyhMCS
DENh7tdzexrxhsSn6x7d0BL2xsZy8V11BeVIZl/5+6ZHIO3YhghaxWw1u+4J0RXh
DCyacOef0s0JyCs2G68H10Fg1D5ZX8Fsyk56TfmrJ6AM5c4Y29Xj1kK+iZdIU80t
Rf/hwQ1Etfr9htyIG/6Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org