Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
File: DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa (raw, json)
Hash identifier: vjVGAoglabK4zjGoTznajiLgFk1AOCNqD3hI5uRFvnw=
Subject key identifier: 0C:90:98:2D:F0:41:96:F7:C9:DA:80:9B:56:8F:B3:EA:43:95:81:0D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 029D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
Signing time: Tue 30 May 2023 16:36:33 +0000
ROA not before: Tue 30 May 2023 16:36:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=0C90982DF04196F7C9DA809B568FB3EA4395810D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:b4:c0:59:79:b8:e8:51:f3:63:39:69:b3:
19:ab:9a:74:ff:03:d6:1b:4b:6a:54:84:cf:46:bd:
3e:6b:c4:28:fa:8c:2b:df:b4:d0:8b:1a:f2:5d:05:
2e:eb:46:c2:45:a5:77:78:aa:54:90:af:50:03:5b:
fa:f5:7e:10:58:8b:12:99:b8:d2:73:69:48:73:dd:
5e:28:05:ce:c3:e8:57:a4:59:43:11:3a:a0:06:6f:
0e:17:5c:cb:6a:dd:c7:34:d3:9d:fc:b6:08:19:79:
b9:25:10:d7:8b:84:b5:d7:28:e2:e9:21:22:55:b2:
dc:3b:01:94:c5:f3:f3:25:47:1d:bb:4d:c4:28:62:
75:ec:89:b6:a1:f0:2b:69:7d:fa:79:34:14:f6:7e:
f9:73:ee:19:9b:d9:79:bf:3a:9d:70:31:25:df:f4:
60:dc:e1:54:e4:eb:f1:ea:3d:12:61:6d:c5:6f:2d:
9b:5c:bf:24:99:60:21:59:04:f9:22:a8:b0:94:cd:
8e:9b:4d:f0:ab:71:90:23:ae:f9:c1:e7:df:71:55:
c2:33:e9:a1:83:a2:ca:e2:56:5d:15:d8:db:6d:28:
34:bc:cd:1f:8b:87:f5:87:dc:b9:df:6f:2e:a3:c8:
d0:2c:1f:01:41:4c:ce:c6:3e:41:9e:c3:d6:d2:65:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:98:2D:F0:41:96:F7:C9:DA:80:9B:56:8F:B3:EA:43:95:81:0D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DJCYLfBBlvfJ2oCbVo-z6kOVgQ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.160.0/19
Signature Algorithm: sha256WithRSAEncryption
95:bb:57:e7:da:69:4e:92:76:c4:77:a6:1b:3d:54:77:74:9d:
a0:df:ce:d6:34:8f:81:c6:46:46:eb:1d:79:af:9c:29:3f:94:
60:a9:8a:2e:07:4a:7b:ee:a3:d7:99:96:44:fa:bd:b3:66:6a:
b0:76:d8:fb:02:b7:ce:22:85:c9:aa:e4:2a:e9:46:a4:20:35:
34:f2:d1:e1:8f:98:a2:c7:22:68:9d:cf:f6:bd:b5:09:34:55:
4c:f8:f3:ba:d5:15:8a:7d:1b:18:64:ca:6a:4d:96:68:a6:a2:
f5:7f:b6:76:bd:4f:a3:fd:e1:61:f5:c7:04:03:69:6e:df:55:
eb:36:78:17:0c:a7:65:9d:26:a8:61:6c:25:a7:43:3f:4a:2e:
27:83:a4:40:d0:79:62:85:fc:7d:1c:98:45:be:77:ac:23:2b:
11:b1:77:92:aa:20:cb:73:23:d3:51:36:a8:3a:f2:d8:4d:89:
a2:bc:a4:cb:ec:34:98:3b:b9:6d:32:7d:62:13:6d:f6:82:02:
dc:22:ec:09:08:39:76:0d:1b:be:d8:93:4a:7a:df:9a:43:fc:
f9:83:3a:fc:e0:75:8a:92:e7:fd:7b:d2:9b:a7:3c:3e:76:61:
4b:eb:dd:40:11:12:1b:0f:34:f8:8a:95:ec:60:51:1e:cc:ea:
13:fa:fa:75
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM2MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDBDOTA5ODJERjA0MTk2
RjdDOURBODA5QjU2OEZCM0VBNDM5NTgxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQfLTAWXm46FHzYzlpsxmrmnT/A9YbS2pUhM9GvT5rxCj6jCvf
tNCLGvJdBS7rRsJFpXd4qlSQr1ADW/r1fhBYixKZuNJzaUhz3V4oBc7D6FekWUMR
OqAGbw4XXMtq3cc00538tggZebklENeLhLXXKOLpISJVstw7AZTF8/MlRx27TcQo
YnXsibah8Ctpffp5NBT2fvlz7hmb2Xm/Op1wMSXf9GDc4VTk6/HqPRJhbcVvLZtc
vySZYCFZBPkiqLCUzY6bTfCrcZAjrvnB599xVcIz6aGDosriVl0V2NttKDS8zR+L
h/WH3Lnfby6jyNAsHwFBTM7GPkGew9bSZcJ3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDJCYLfBBlvfJ2oCbVo+z6kOVgQ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0RKQ1lMZkJCbHZmSjJvQ2JWby16NmtPVmdRMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBTKAwDQYJKoZIhvcNAQELBQADggEBAJW7V+faaU6SdsR3phs9VHd0naDf
ztY0j4HGRkbrHXmvnCk/lGCpii4HSnvuo9eZlkT6vbNmarB22PsCt84ihcmq5Crp
RqQgNTTy0eGPmKLHImidz/a9tQk0VUz487rVFYp9GxhkympNlmimovV/tna9T6P9
4WH1xwQDaW7fVes2eBcMp2WdJqhhbCWnQz9KLieDpEDQeWKF/H0cmEW+d6wjKxGx
d5KqIMtzI9NRNqg68thNiaK8pMvsNJg7uW0yfWITbfaCAtwi7AkIOXYNG77Yk0p6
35pD/PmDOvzgdYqS5/170punPD52YUvr3UAREhsPNPiKlexgUR7M6hP6+nU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org