Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HL4ZgKEUz3_zV6ZpJfIp-yf3zgo.roa
File: HL4ZgKEUz3_zV6ZpJfIp-yf3zgo.roa (raw, json)
Hash identifier: 4/FNwy4fBSGKAJvYdJQ2ENaPnXYkTms97nqN4nS1p48=
Subject key identifier: 1C:BE:19:80:A1:14:CF:7F:F3:57:A6:69:25:F2:29:FB:27:F7:CE:0A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0204
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HL4ZgKEUz3_zV6ZpJfIp-yf3zgo.roa
Signing time: Tue 30 May 2023 17:40:23 +0000
ROA not before: Tue 30 May 2023 17:40:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:a700::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:40:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1CBE1980A114CF7FF357A66925F229FB27F7CE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:18:57:3e:6e:33:b5:a2:63:b1:a9:8e:0b:
56:38:07:e1:9f:a4:a8:88:2c:6e:de:65:61:c5:98:
d1:4a:32:4c:44:2e:2d:bc:b4:76:51:b4:42:1d:b9:
78:86:8f:6c:e6:83:46:fa:24:43:ee:1e:5a:d7:2e:
4c:22:db:2a:0f:d2:05:f0:00:42:7a:dd:6a:b3:07:
6e:f7:60:5b:bc:ae:a6:9c:be:78:87:88:c9:30:6b:
a7:91:46:bd:f4:9c:5f:5a:11:61:b2:aa:87:78:7c:
40:c9:2f:36:7f:af:b4:9e:ed:a6:d7:f3:e1:d8:27:
69:7a:05:a8:d1:b3:28:6b:e0:0a:b0:2c:b9:b5:6d:
31:2c:26:3f:81:52:7e:bc:73:42:d0:23:bf:5d:4a:
a5:74:9d:ce:7e:b5:21:75:34:59:47:78:84:2c:56:
8f:9e:c2:c4:60:37:c3:19:bf:f7:b6:bf:96:1e:13:
45:e8:05:52:6e:72:63:e9:92:13:75:9a:6c:ca:c6:
0d:d2:60:95:4c:03:fa:2d:f5:c4:6d:bd:2b:e1:02:
48:44:78:15:8b:e2:ae:77:49:18:19:91:5e:ee:9a:
6e:98:4a:25:d1:33:b3:d6:ed:0f:95:e4:06:8c:e3:
31:19:7e:b8:89:3b:54:8f:b5:b2:08:84:e1:74:53:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:19:80:A1:14:CF:7F:F3:57:A6:69:25:F2:29:FB:27:F7:CE:0A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HL4ZgKEUz3_zV6ZpJfIp-yf3zgo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:a700::/40
Signature Algorithm: sha256WithRSAEncryption
84:13:c2:bc:5b:5f:ba:69:56:62:16:3c:3f:37:01:df:ee:7e:
79:d9:4b:c0:27:b0:70:94:43:89:11:f3:b8:55:a1:97:b0:a5:
0f:c7:b8:34:30:59:af:fe:35:fb:97:6c:49:56:69:73:a0:d0:
d3:bc:66:f6:9b:3c:12:d3:f2:b7:04:4a:38:bb:4d:b4:58:1b:
59:5f:cc:53:b8:a0:e0:ba:bf:b5:b2:c7:f6:1e:48:d6:f7:33:
6c:18:6e:45:ff:33:d1:60:a3:e8:ad:e3:7b:60:11:64:88:35:
c2:41:84:53:3a:7d:a8:87:c7:40:c1:92:74:62:74:77:2f:32:
3f:09:d2:43:9e:1a:20:b8:4d:02:60:f8:97:04:8c:55:ff:ef:
10:d9:a3:b3:a9:44:58:5d:7b:03:c4:f7:d7:61:da:b9:09:27:
bf:83:c6:2f:10:3a:9e:c4:c7:f7:16:14:2c:1b:c3:cb:87:4b:
dc:de:23:1a:2c:ea:0a:d1:22:24:b1:1e:05:f0:df:85:86:a2:
71:19:58:d7:5e:ef:14:80:e6:ad:ea:69:8e:0d:db:a8:43:1e:
eb:2d:fe:59:34:ec:d2:89:c7:db:52:9e:0c:ac:bb:29:2b:84:
3c:c2:dd:27:6b:69:a4:6f:6c:d7:a7:48:db:16:41:f9:52:fb:
df:40:94:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQwMjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFDQkUxOTgwQTExNENG
N0ZGMzU3QTY2OTI1RjIyOUZCMjdGN0NFMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOthhXPm4ztaJjsamOC1Y4B+GfpKiILG7eZWHFmNFKMkxELi28
tHZRtEIduXiGj2zmg0b6JEPuHlrXLkwi2yoP0gXwAEJ63WqzB273YFu8rqacvniH
iMkwa6eRRr30nF9aEWGyqod4fEDJLzZ/r7Se7abX8+HYJ2l6BajRsyhr4AqwLLm1
bTEsJj+BUn68c0LQI79dSqV0nc5+tSF1NFlHeIQsVo+ewsRgN8MZv/e2v5YeE0Xo
BVJucmPpkhN1mmzKxg3SYJVMA/ot9cRtvSvhAkhEeBWL4q53SRgZkV7umm6YSiXR
M7PW7Q+V5AaM4zEZfriJO1SPtbIIhOF0U7H5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUHL4ZgKEUz3/zV6ZpJfIp+yf3zgowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9ITDRaZ0tFVXozX3pWNlpwSmZJcC15ZjN6Z28u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6cwDQYJKoZIhvcNAQELBQADggEBAIQTwrxbX7ppVmIWPD83
Ad/ufnnZS8AnsHCUQ4kR87hVoZewpQ/HuDQwWa/+NfuXbElWaXOg0NO8ZvabPBLT
8rcESji7TbRYG1lfzFO4oOC6v7Wyx/YeSNb3M2wYbkX/M9Fgo+it43tgEWSINcJB
hFM6faiHx0DBknRidHcvMj8J0kOeGiC4TQJg+JcEjFX/7xDZo7OpRFhdewPE99dh
2rkJJ7+Dxi8QOp7Ex/cWFCwbw8uHS9zeIxos6grRIiSxHgXw34WGonEZWNde7xSA
5q3qaY4N26hDHust/lk07NKJx9tSngysuykrhDzC3SdraaRvbNenSNsWQflS+99A
lE0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org