Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/p1khelvW0tu0nkL8lyqcsFugQ30.roa
File: p1khelvW0tu0nkL8lyqcsFugQ30.roa (raw, json)
Hash identifier: cSSSDEMZXHgs5nrQWQg/+8OcebNLr3S9z/DcgYsKkZI=
Subject key identifier: A7:59:21:7A:5B:D6:D2:DB:B4:9E:42:FC:97:2A:9C:B0:5B:A0:43:7D
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 8C
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/p1khelvW0tu0nkL8lyqcsFugQ30.roa
Signing time: Sun 01 May 2022 01:30:22 +0000
ROA not before: Sun 01 May 2022 01:30:22 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 9607
IP address blocks: 124.147.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 1 01:30:22 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=A759217A5BD6D2DBB49E42FC972A9CB05BA0437D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:69:62:8f:58:9b:4e:af:b6:f7:e9:d0:81:
d7:12:91:39:49:c2:e5:32:81:2a:e5:af:9f:94:8a:
0b:02:ce:ad:37:2f:03:5c:a4:a8:a6:f8:11:37:59:
26:d7:1c:5b:5d:56:7b:36:8f:cc:1c:6c:7a:0c:6b:
d6:15:1e:ba:de:6d:83:2c:09:9d:fe:d9:39:2c:2f:
da:ea:7d:da:4d:d8:d7:9f:5b:46:14:b4:b8:02:9f:
64:a1:80:a5:97:cc:8f:8a:bd:8a:25:39:ae:f2:a0:
42:b3:60:f7:d9:10:7d:c5:2e:72:72:d5:08:dc:36:
bf:03:d0:4b:2a:de:2a:40:d0:12:08:78:e5:31:dc:
ca:2c:66:a7:28:92:57:dc:82:ee:cb:4b:50:fb:3c:
ae:e8:8b:f4:b8:5f:ce:19:ca:7e:ef:cb:98:5c:bf:
4f:65:1c:64:ba:00:39:e1:7b:3e:2d:4a:6d:81:80:
2e:0b:a8:24:17:56:d0:81:55:e8:d5:97:61:4d:2d:
d2:01:10:3a:58:49:58:16:e4:6c:81:f7:da:b3:e9:
b0:5b:1a:20:43:82:ec:a1:bd:03:a3:50:92:b4:d5:
b9:e9:74:f2:e7:2e:1f:fa:e4:b5:62:7f:6d:ff:55:
50:74:6f:a9:7c:c0:15:7f:14:7e:e5:ed:9d:6b:93:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:21:7A:5B:D6:D2:DB:B4:9E:42:FC:97:2A:9C:B0:5B:A0:43:7D
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/p1khelvW0tu0nkL8lyqcsFugQ30.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.147.0.0/19
Signature Algorithm: sha256WithRSAEncryption
28:92:eb:a6:38:3c:2f:79:f8:6c:08:f7:8d:6f:d3:5d:c5:07:
ba:b1:09:64:cd:c7:65:61:63:05:13:04:0f:b4:e5:05:2d:9f:
32:39:b4:69:00:74:d8:ef:81:d0:a2:c0:f2:df:64:a2:5d:c1:
96:01:fd:48:96:34:61:e7:f5:fd:05:49:18:13:8b:e4:da:d1:
f1:49:58:b7:8a:0f:d7:67:1e:c9:0b:48:79:f0:11:8b:e5:14:
fc:35:a7:31:1e:29:18:ab:09:0b:ed:83:74:b3:80:78:fa:e6:
dc:5d:a4:6d:87:cc:09:d4:71:b1:09:91:3f:11:a7:50:a8:ee:
d2:3e:6e:c9:00:51:44:6d:ba:d0:56:db:54:5c:ba:d3:c3:85:
4f:9a:c6:f8:84:25:96:7c:44:3c:26:e5:74:65:fd:05:ee:86:
c8:08:ad:c8:73:ec:c8:5c:31:02:e4:82:a9:0e:10:29:ee:aa:
26:63:3d:91:3b:af:90:d6:7b:c4:45:79:a0:f9:b7:8e:f7:7e:
1b:8d:10:59:c5:bc:0f:ef:46:79:f2:d1:39:82:4b:de:52:f8:
a6:51:9d:05:1f:67:b0:85:a9:39:90:ac:43:6f:a5:4d:44:0f:
24:5d:ba:4d:df:b5:15:47:83:b4:06:61:c9:ce:46:16:59:7a:
8c:47:3d:ad
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMjA1MDEw
MTMwMjJaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEE3NTkyMTdBNUJENkQy
REJCNDlFNDJGQzk3MkE5Q0IwNUJBMDQzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpxGlij1ibTq+29+nQgdcSkTlJwuUygSrlr5+UigsCzq03LwNc
pKim+BE3WSbXHFtdVns2j8wcbHoMa9YVHrrebYMsCZ3+2TksL9rqfdpN2NefW0YU
tLgCn2ShgKWXzI+KvYolOa7yoEKzYPfZEH3FLnJy1QjcNr8D0Esq3ipA0BIIeOUx
3MosZqcoklfcgu7LS1D7PK7oi/S4X84Zyn7vy5hcv09lHGS6ADnhez4tSm2BgC4L
qCQXVtCBVejVl2FNLdIBEDpYSVgW5GyB99qz6bBbGiBDguyhvQOjUJK01bnpdPLn
Lh/65LVif23/VVB0b6l8wBV/FH7l7Z1rkyFBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp1khelvW0tu0nkL8lyqcsFugQ30wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L3Axa2hlbHZXMHR1MG5rTDhseXFjc0Z1Z1EzMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV8kwAwDQYJKoZIhvcNAQELBQADggEBACiS66Y4PC95+GwI941v013FB7qx
CWTNx2VhYwUTBA+05QUtnzI5tGkAdNjvgdCiwPLfZKJdwZYB/UiWNGHn9f0FSRgT
i+Ta0fFJWLeKD9dnHskLSHnwEYvlFPw1pzEeKRirCQvtg3SzgHj65txdpG2HzAnU
cbEJkT8Rp1Co7tI+bskAUURtutBW21RcutPDhU+axviEJZZ8RDwm5XRl/QXuhsgI
rchz7MhcMQLkgqkOECnuqiZjPZE7r5DWe8RFeaD5t473fhuNEFnFvA/vRnny0TmC
S95S+KZRnQUfZ7CFqTmQrENvpU1EDyRduk3ftRVHg7QGYcnORhZZeoxHPa0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org