Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/QlgeU9Ph2ZR0Q5yBCeunoaEOGEM.roa
File: QlgeU9Ph2ZR0Q5yBCeunoaEOGEM.roa (raw, json)
Hash identifier: U5uZZYu5jvGVeyXJoY1KxJlMCVtnpnb1n5B3sBiH6nQ=
Subject key identifier: 42:58:1E:53:D3:E1:D9:94:74:43:9C:81:09:EB:A7:A1:A1:0E:18:43
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 71
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QlgeU9Ph2ZR0Q5yBCeunoaEOGEM.roa
Signing time: Tue 28 Sep 2021 08:05:32 +0000
ROA not before: Tue 28 Sep 2021 08:05:32 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 55898
IP address blocks: 211.14.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 28 08:05:32 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=42581E53D3E1D99474439C8109EBA7A1A10E1843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:7b:48:e9:9b:8a:53:1d:a2:ef:a4:87:97:
d3:05:c3:d9:c2:86:2b:78:37:93:05:01:3c:94:8d:
45:46:f4:e5:63:78:18:06:91:1c:91:87:66:f3:da:
d0:68:6f:32:98:3f:d5:79:d9:7b:e9:d8:22:77:ee:
dc:cf:20:89:79:4b:a0:87:c5:41:cb:cb:a9:80:7d:
53:a3:a5:be:98:c9:db:05:33:b8:ce:36:41:39:7e:
ca:3a:c2:5b:54:04:37:76:78:30:7e:b7:47:7f:4d:
b3:d6:db:b6:4f:6f:09:03:ad:52:5f:90:74:d3:a8:
cc:32:1e:93:6a:a3:b1:f6:ca:0a:cf:0e:ce:77:8f:
f7:c6:4f:5e:b5:a8:96:f1:7e:7e:e5:f3:43:0a:6f:
45:8d:40:c1:d8:84:b2:ca:0c:f8:07:9c:7f:e9:ce:
6e:68:71:4e:27:14:a4:00:2c:cb:c0:87:1d:de:cf:
8a:ae:69:76:ae:6c:ac:60:63:5f:f9:4f:3a:0b:c5:
ee:12:e5:fc:6b:85:56:70:8c:9f:ca:9e:d6:ef:3f:
56:68:b2:e1:7a:f5:0e:b6:f4:a3:47:4a:9c:79:9f:
ec:9a:47:5a:2d:15:bf:21:59:65:dd:9b:78:33:8c:
6e:16:86:4d:af:0b:f4:c8:06:f7:98:6b:78:8f:32:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:1E:53:D3:E1:D9:94:74:43:9C:81:09:EB:A7:A1:A1:0E:18:43
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QlgeU9Ph2ZR0Q5yBCeunoaEOGEM.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0d:39:7a:d7:18:ac:5f:bd:9a:78:8b:a1:c6:78:87:e4:78:
91:e4:79:6f:93:8e:f9:60:a3:54:01:c3:0b:e5:9b:65:2f:ea:
8a:3e:f5:f1:14:09:34:57:4b:ec:21:f3:7b:a1:76:75:bf:bb:
79:ac:c3:8c:88:75:5a:3f:86:ee:e8:97:58:b3:59:52:73:cb:
41:c0:a3:02:dd:29:08:8c:37:e2:b4:4a:f7:de:cc:3c:c9:04:
db:a3:d5:a5:5d:9e:a9:c6:6a:6b:02:47:e7:1f:88:f9:4b:54:
22:af:75:3d:46:75:ff:6a:94:73:f4:5b:d4:3f:42:c7:ce:20:
27:e4:1a:02:86:9e:fa:cf:b8:76:0f:f2:07:e0:6b:9d:ba:e3:
6d:d1:26:2a:be:67:fa:6e:d1:5b:57:7f:6c:49:6c:66:43:20:
a3:27:5e:ba:f1:96:45:2e:c5:fd:07:d5:20:8e:b1:39:04:99:
f7:c9:e6:f2:70:71:55:e9:2d:8a:7b:89:95:8a:82:ec:77:60:
be:ef:02:92:6b:17:bf:31:0e:50:f7:3d:56:9d:a8:89:7d:ac:
76:cc:f9:15:83:99:1b:5e:f3:b8:17:b2:56:ab:4a:8b:3c:09:
d4:16:8e:86:ae:d3:f8:d2:ab:ba:ae:f1:61:92:f4:06:a9:0f:
b0:a2:86:8d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDkyODA4
MDUzMloXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNDI1ODFFNTNEM0UxRDk5
NDc0NDM5QzgxMDlFQkE3QTFBMTBFMTg0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALPMe0jpm4pTHaLvpIeX0wXD2cKGK3g3kwUBPJSNRUb05WN4GAaR
HJGHZvPa0GhvMpg/1XnZe+nYInfu3M8giXlLoIfFQcvLqYB9U6OlvpjJ2wUzuM42
QTl+yjrCW1QEN3Z4MH63R39Ns9bbtk9vCQOtUl+QdNOozDIek2qjsfbKCs8OzneP
98ZPXrWolvF+fuXzQwpvRY1AwdiEssoM+Aecf+nObmhxTicUpAAsy8CHHd7Piq5p
dq5srGBjX/lPOgvF7hLl/GuFVnCMn8qe1u8/Vmiy4Xr1Drb0o0dKnHmf7JpHWi0V
vyFZZd2beDOMbhaGTa8L9MgG95hreI8yeq8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRCWB5T0+HZlHRDnIEJ66ehoQ4YQzAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQvUWxnZVU5UGgyWlIwUTV5QkNldW5vYUVPR0VNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANMOCDANBgkqhkiG9w0BAQsFAAOCAQEA
pA05etcYrF+9mniLocZ4h+R4keR5b5OO+WCjVAHDC+WbZS/qij718RQJNFdL7CHz
e6F2db+7eazDjIh1Wj+G7uiXWLNZUnPLQcCjAt0pCIw34rRK997MPMkE26PVpV2e
qcZqawJH5x+I+UtUIq91PUZ1/2qUc/Rb1D9Cx84gJ+QaAoae+s+4dg/yB+Brnbrj
bdEmKr5n+m7RW1d/bElsZkMgoydeuvGWRS7F/QfVII6xOQSZ98nm8nBxVektinuJ
lYqC7Hdgvu8CkmsXvzEOUPc9Vp2oiX2sdsz5FYOZG17zuBeyVqtKizwJ1BaOhq7T
+NKruq7xYZL0BqkPsKKGjQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org