Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/CYz3NjbMaL8CXzjqPZ6lU8S14-Q.roa
File: CYz3NjbMaL8CXzjqPZ6lU8S14-Q.roa (raw, json)
Hash identifier: YM3CB/wM5KdQd/pQyHHe8eNy93zp3Du9khBLirgE194=
Subject key identifier: 09:8C:F7:36:36:CC:68:BF:02:5F:38:EA:3D:9E:A5:53:C4:B5:E3:E4
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: 28
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/CYz3NjbMaL8CXzjqPZ6lU8S14-Q.roa
Signing time: Tue 19 Apr 2022 07:24:07 +0000
ROA not before: Tue 19 Apr 2022 07:24:07 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 9622
IP address blocks: 202.122.224.0/19 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Apr 19 07:24:07 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=098CF73636CC68BF025F38EA3D9EA553C4B5E3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:8d:51:4b:87:ae:f0:ab:55:e2:79:0e:d5:
8c:eb:57:3e:0c:e9:f9:26:31:81:73:16:08:72:a0:
dc:1a:89:93:41:69:68:58:4d:18:df:31:ed:b0:be:
25:cd:40:c2:6a:aa:d6:4e:03:f2:e8:12:0b:18:67:
ea:0c:d7:ac:6d:b2:b6:b2:8a:91:4c:53:5f:71:e4:
ae:5c:9f:1a:b8:a5:48:4e:34:a7:cc:8a:d7:7b:8d:
3a:20:95:ff:1b:d9:91:7b:af:22:94:64:8a:63:8d:
a4:51:a4:ab:81:ab:2f:ae:32:94:19:4f:d5:c4:70:
2b:ed:e8:ca:79:e1:66:fd:06:e5:a0:a7:11:5d:6b:
16:04:b4:84:d6:25:f4:ca:89:8b:f6:aa:40:1b:47:
2f:ee:d9:e7:3f:2e:4c:87:9c:66:9e:07:e9:c7:d0:
ac:54:57:6c:a2:92:87:7d:77:e6:8d:e9:80:4e:3b:
36:b5:6f:12:ff:80:3f:fa:ce:48:ba:0f:0c:b3:ef:
79:ca:5e:a5:f1:41:2d:c0:94:e9:3d:f7:bc:a0:be:
b9:7c:44:93:95:b7:c2:41:30:2c:5b:87:54:1f:90:
8b:ce:cc:2a:ca:f6:ad:3a:0a:7c:6a:fd:63:22:b7:
0f:0f:65:77:5c:92:86:b3:e2:c5:ba:63:e6:3a:35:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8C:F7:36:36:CC:68:BF:02:5F:38:EA:3D:9E:A5:53:C4:B5:E3:E4
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/CYz3NjbMaL8CXzjqPZ6lU8S14-Q.roa
sbgp-ipAddrBlock: critical
IPv4:
202.122.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:e2:a8:cb:24:42:58:d1:be:75:24:47:9b:58:9a:08:9b:1e:
34:8b:c9:c2:5c:4a:55:d2:c5:c3:8c:1c:49:1a:7a:60:f4:20:
2f:3c:10:31:88:00:21:68:ff:d8:d3:24:41:c2:26:8b:8a:f6:
56:b5:da:99:6b:fe:fa:bb:ef:57:43:34:be:e9:7c:c8:b8:cb:
b3:55:0d:ea:e8:3f:6c:97:71:b4:7b:53:c6:00:87:17:15:b0:
71:3b:db:cf:1f:56:31:21:fc:63:f6:2b:89:f6:22:7c:7d:56:
3c:28:45:eb:6c:6a:0e:f5:bb:3b:42:36:b6:ba:07:d3:29:e1:
08:fa:d5:0d:79:91:27:33:da:5e:72:ca:c7:84:d7:13:fe:74:
a1:3e:e7:68:e8:71:4a:cf:bd:6a:f1:97:68:98:37:9b:9d:16:
06:06:f6:12:a0:30:a2:c6:e8:af:db:50:a7:3e:b4:d5:4f:e2:
d2:9d:98:bf:51:70:93:da:4a:6c:ad:ed:36:97:b0:45:1d:7d:
70:38:d1:d5:c4:a8:f5:c0:e8:a2:d7:3a:64:14:34:25:6f:b4:
66:94:e4:27:7d:85:7f:25:a2:99:fa:75:44:87:0c:a3:e4:5f:
1b:b8:4b:0b:a3:17:70:8e:8e:3d:aa:00:3c:22:d6:28:d8:43:
2a:6c:f7:84
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1
NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTIyMDQxOTA3
MjQwN1oXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMDk4Q0Y3MzYzNkNDNjhC
RjAyNUYzOEVBM0Q5RUE1NTNDNEI1RTNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQWjVFLh67wq1XieQ7VjOtXPgzp+SYxgXMWCHKg3BqJk0FpaFhN
GN8x7bC+Jc1Awmqq1k4D8ugSCxhn6gzXrG2ytrKKkUxTX3HkrlyfGrilSE40p8yK
13uNOiCV/xvZkXuvIpRkimONpFGkq4GrL64ylBlP1cRwK+3oynnhZv0G5aCnEV1r
FgS0hNYl9MqJi/aqQBtHL+7Z5z8uTIecZp4H6cfQrFRXbKKSh3135o3pgE47NrVv
Ev+AP/rOSLoPDLPvecpepfFBLcCU6T33vKC+uXxEk5W3wkEwLFuHVB+Qi87MKsr2
rToKfGr9YyK3Dw9ld1yShrPixbpj5jo1E5kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQJjPc2NsxovwJfOOo9nqVTxLXj5DAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei
nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h
U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zOTMvQ1l6M05qYk1hTDhDWHpqcVBaNmxVOFMxNC1RLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcp64DANBgkqhkiG9w0BAQsFAAOCAQEA
HeKoyyRCWNG+dSRHm1iaCJseNIvJwlxKVdLFw4wcSRp6YPQgLzwQMYgAIWj/2NMk
QcImi4r2VrXamWv++rvvV0M0vul8yLjLs1UN6ug/bJdxtHtTxgCHFxWwcTvbzx9W
MSH8Y/YrifYifH1WPChF62xqDvW7O0I2troH0ynhCPrVDXmRJzPaXnLKx4TXE/50
oT7naOhxSs+9avGXaJg3m50WBgb2EqAwosbor9tQpz601U/i0p2Yv1Fwk9pKbK3t
NpewRR19cDjR1cSo9cDootc6ZBQ0JW+0ZpTkJ32FfyWimfp1RIcMo+RfG7hLC6MX
cI6OPaoAPCLWKNhDKmz3hA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org