Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/GvUDg5hs5CmjGrtUlIclwrGi3j4.roa
File: GvUDg5hs5CmjGrtUlIclwrGi3j4.roa (raw, json)
Hash identifier: WuARG3fKkmrtG95y3+x/eBzTEjjG5jWLfC2n6vNVNHg=
Subject key identifier: 1A:F5:03:83:98:6C:E4:29:A3:1A:BB:54:94:87:25:C2:B1:A2:DE:3E
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 72
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/GvUDg5hs5CmjGrtUlIclwrGi3j4.roa
Signing time: Tue 28 Sep 2021 08:05:32 +0000
ROA not before: Tue 28 Sep 2021 08:05:32 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 23816
IP address blocks: 211.14.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 28 08:05:32 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=1AF50383986CE429A31ABB54948725C2B1A2DE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:3c:13:2e:d3:4f:3f:56:02:78:e6:ff:61:
cc:74:97:c4:12:11:88:8a:95:c9:c9:3b:68:11:10:
47:5d:fd:fe:99:ac:b0:ca:af:11:b8:53:86:7e:88:
8b:51:0b:98:05:67:5c:ac:21:0c:14:30:e0:4a:19:
38:02:70:32:be:bc:15:6c:cb:86:60:84:dc:a9:0b:
d1:cb:36:f9:be:de:db:05:ac:38:cd:aa:69:76:be:
64:89:09:d5:24:3b:c0:ea:e9:60:4a:37:38:b7:ab:
bc:a5:81:1a:cc:cb:e6:65:58:6f:20:7f:26:ce:7a:
41:a9:2c:91:18:9e:dc:d8:a9:58:0e:ea:a2:1d:89:
6e:19:99:e0:d0:f1:0a:71:49:40:82:18:ce:7d:c0:
29:f6:e6:c3:77:80:fe:40:0c:37:66:e5:3d:11:22:
0a:73:37:ed:03:d7:79:05:6a:59:ff:00:97:36:ee:
fd:b2:45:b0:50:3b:dc:1d:2b:1b:ea:d3:f5:db:32:
4a:93:85:f3:c6:c4:26:d3:ec:d5:6e:d7:0f:8d:e1:
21:33:64:76:ef:15:3c:b1:a9:fb:22:99:22:5a:3f:
9f:89:d7:a2:47:c3:a7:84:ed:60:82:7a:11:9d:1e:
6b:ab:b7:82:e3:03:b5:b3:61:af:5d:f9:4c:3e:2b:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:03:83:98:6C:E4:29:A3:1A:BB:54:94:87:25:C2:B1:A2:DE:3E
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/GvUDg5hs5CmjGrtUlIclwrGi3j4.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.12.0/22
Signature Algorithm: sha256WithRSAEncryption
55:6a:ab:15:f2:2a:36:28:ed:ef:30:06:bd:d3:21:ab:ef:94:
98:0e:3e:28:ba:55:4b:73:c0:51:dd:e1:2f:03:d3:36:10:65:
5d:c1:96:85:c7:57:37:60:59:dd:65:cb:86:81:35:8d:82:45:
12:ae:37:89:6d:7e:10:05:62:06:04:85:88:3e:a3:a6:95:c6:
f5:e4:d5:ec:2e:ee:93:e4:e9:d7:6a:4a:08:4e:f4:e1:d8:33:
ec:c0:2a:e8:88:2e:35:8a:2e:2d:41:1f:0a:3e:65:7d:92:9a:
29:32:31:ea:f1:ce:8c:99:94:87:4a:db:81:a8:7a:68:98:8e:
68:82:e4:cd:ec:2f:18:46:0a:a5:85:77:17:cc:b5:5d:02:01:
fd:fb:1f:79:6e:c4:2c:b0:32:21:69:92:d3:05:5b:c3:7b:88:
54:27:38:b6:df:76:d0:c2:e8:54:43:4e:a2:fe:5a:f7:af:8c:
9f:8c:f4:9b:b4:a8:8a:09:8f:18:ad:dc:95:5c:22:42:c0:c9:
5e:23:71:b6:da:af:6a:8c:21:11:18:d9:ca:a9:56:30:5d:0b:
1a:47:24:35:26:09:07:3d:78:6c:a6:08:77:18:42:a8:8c:5b:
8a:c4:a2:3a:aa:15:4a:a9:22:9c:70:c2:af:47:e8:b3:b2:6f:
51:cb:3d:84
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDkyODA4
MDUzMloXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMUFGNTAzODM5ODZDRTQy
OUEzMUFCQjU0OTQ4NzI1QzJCMUEyREUzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM9wPBMu008/VgJ45v9hzHSXxBIRiIqVyck7aBEQR139/pmssMqv
EbhThn6Ii1ELmAVnXKwhDBQw4EoZOAJwMr68FWzLhmCE3KkL0cs2+b7e2wWsOM2q
aXa+ZIkJ1SQ7wOrpYEo3OLervKWBGszL5mVYbyB/Js56QakskRie3NipWA7qoh2J
bhmZ4NDxCnFJQIIYzn3AKfbmw3eA/kAMN2blPREiCnM37QPXeQVqWf8Alzbu/bJF
sFA73B0rG+rT9dsySpOF88bEJtPs1W7XD43hITNkdu8VPLGp+yKZIlo/n4nXokfD
p4TtYIJ6EZ0ea6u3guMDtbNhr135TD4rrPcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQa9QODmGzkKaMau1SUhyXCsaLePjAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQvR3ZVRGc1aHM1Q21qR3J0VWxJY2x3ckdpM2o0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtMODDANBgkqhkiG9w0BAQsFAAOCAQEA
VWqrFfIqNijt7zAGvdMhq++UmA4+KLpVS3PAUd3hLwPTNhBlXcGWhcdXN2BZ3WXL
hoE1jYJFEq43iW1+EAViBgSFiD6jppXG9eTV7C7uk+Tp12pKCE704dgz7MAq6Igu
NYouLUEfCj5lfZKaKTIx6vHOjJmUh0rbgah6aJiOaILkzewvGEYKpYV3F8y1XQIB
/fsfeW7ELLAyIWmS0wVbw3uIVCc4tt920MLoVENOov5a96+Mn4z0m7SoigmPGK3c
lVwiQsDJXiNxttqvaowhERjZyqlWMF0LGkckNSYJBz14bKYIdxhCqIxbisSiOqoV
SqkinHDCr0fos7JvUcs9hA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org