Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/vH5Wldj2uNyF6-7Cjpr6X4pSi1g.roa
File: vH5Wldj2uNyF6-7Cjpr6X4pSi1g.roa (raw, json)
Hash identifier: TGV93NkcJiS4NVHQD4mmc4h7//9WXHaKT4RgimpDCIY=
Subject key identifier: BC:7E:56:95:D8:F6:B8:DC:85:EB:EE:C2:8E:9A:FA:5F:8A:52:8B:58
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: 29
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/vH5Wldj2uNyF6-7Cjpr6X4pSi1g.roa
Signing time: Tue 19 Apr 2022 07:24:08 +0000
ROA not before: Tue 19 Apr 2022 07:24:08 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 9622
IP address blocks: 202.171.112.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Apr 19 07:24:08 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=BC7E5695D8F6B8DC85EBEEC28E9AFA5F8A528B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:d5:ff:b4:84:70:71:89:63:64:a2:23:5d:
7f:77:33:42:28:75:23:0b:e4:56:04:31:a2:b5:1d:
56:b0:0f:be:5f:fd:3c:91:f6:d7:ff:ae:9b:75:f2:
85:28:ae:3c:7e:1b:a1:1f:18:56:39:73:45:f1:68:
47:64:e2:8e:a2:cb:ff:a6:d0:b8:88:5a:8a:31:c4:
39:cc:f3:ec:32:5d:d2:07:7c:51:48:5c:2d:ce:38:
50:c7:a1:8c:de:1c:50:f2:61:d6:fa:84:97:7a:a5:
5e:bf:5c:df:c2:d0:2a:70:92:cb:5d:31:fa:c2:53:
c1:82:3e:f7:d7:48:a5:e2:f7:18:8a:28:c9:f7:3d:
68:8d:cb:89:6a:15:f1:67:fb:89:e4:99:18:2e:a8:
cd:65:46:5a:68:e2:1b:b0:d5:c7:95:ce:16:f3:82:
58:89:ae:0b:66:96:4d:0d:d1:fb:cf:f3:dc:13:74:
18:d7:9e:5d:09:7f:e9:61:91:1e:4f:ed:3b:73:df:
76:98:ab:6e:b1:4f:e2:ba:c5:2e:c0:66:e5:c1:3a:
1c:43:c3:8c:7c:79:a2:d3:7d:4e:83:a2:84:e1:5a:
e5:86:a3:9a:1e:f0:a7:41:8b:f8:c8:d9:77:77:d9:
df:0d:84:09:f9:10:93:bf:6d:55:a5:e5:b4:0e:e4:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7E:56:95:D8:F6:B8:DC:85:EB:EE:C2:8E:9A:FA:5F:8A:52:8B:58
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/vH5Wldj2uNyF6-7Cjpr6X4pSi1g.roa
sbgp-ipAddrBlock: critical
IPv4:
202.171.112.0/20
Signature Algorithm: sha256WithRSAEncryption
38:b1:17:ea:c4:85:4d:d4:ef:53:e5:58:06:34:e2:da:d6:38:
8c:cc:25:0f:b6:98:a4:7f:ee:93:36:50:0e:ab:85:ba:f1:2d:
69:ab:2b:78:ae:1f:55:2b:4f:23:39:4d:5e:1f:11:0d:1d:d5:
f2:42:48:ce:3c:42:a9:27:2a:1e:66:6e:05:db:9a:34:4c:60:
df:04:12:0d:9b:f9:ba:65:f9:11:97:a2:f3:8e:e6:9f:80:88:
3c:8d:5f:26:7c:cf:26:9a:97:bf:cf:f1:b2:91:b1:7c:40:80:
f2:25:37:af:78:58:ef:f4:8e:71:64:c8:4c:02:b1:e7:94:33:
7b:a3:56:9f:9f:2a:1f:81:e6:ab:5a:f7:21:4b:25:32:e4:be:
15:c4:f2:79:09:8e:22:dd:3f:df:da:33:c3:b8:71:8a:04:46:
81:bf:b7:75:d7:73:82:f8:c1:89:f9:86:97:c0:bb:35:6d:c0:
39:fa:9a:8d:79:15:4e:f2:00:13:e2:f0:d6:6e:9b:a2:ac:f4:
85:aa:65:4b:f1:c9:1e:16:3d:4e:ac:9c:2d:c8:3a:cc:d5:26:
6d:87:fd:cc:ac:74:ab:52:9d:ed:1a:b7:16:15:73:ca:ad:a2:
f7:ef:5b:1f:db:3e:7e:e7:49:f2:62:fd:0d:26:2a:c1:24:3c:
b2:bb:9b:4d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1
NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTIyMDQxOTA3
MjQwOFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQkM3RTU2OTVEOEY2QjhE
Qzg1RUJFRUMyOEU5QUZBNUY4QTUyOEI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANuq1f+0hHBxiWNkoiNdf3czQih1IwvkVgQxorUdVrAPvl/9PJH2
1/+um3XyhSiuPH4boR8YVjlzRfFoR2TijqLL/6bQuIhaijHEOczz7DJd0gd8UUhc
Lc44UMehjN4cUPJh1vqEl3qlXr9c38LQKnCSy10x+sJTwYI+99dIpeL3GIooyfc9
aI3LiWoV8Wf7ieSZGC6ozWVGWmjiG7DVx5XOFvOCWImuC2aWTQ3R+8/z3BN0GNee
XQl/6WGRHk/tO3PfdpirbrFP4rrFLsBm5cE6HEPDjHx5otN9ToOihOFa5Yajmh7w
p0GL+MjZd3fZ3w2ECfkQk79tVaXltA7kiRECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS8flaV2Pa43IXr7sKOmvpfilKLWDAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei
nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h
U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zOTMvdkg1V2xkajJ1TnlGNi03Q2pwcjZYNHBTaTFnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqrcDANBgkqhkiG9w0BAQsFAAOCAQEA
OLEX6sSFTdTvU+VYBjTi2tY4jMwlD7aYpH/ukzZQDquFuvEtaasreK4fVStPIzlN
Xh8RDR3V8kJIzjxCqScqHmZuBduaNExg3wQSDZv5umX5EZei847mn4CIPI1fJnzP
JpqXv8/xspGxfECA8iU3r3hY7/SOcWTITAKx55Qze6NWn58qH4Hmq1r3IUslMuS+
FcTyeQmOIt0/39ozw7hxigRGgb+3dddzgvjBifmGl8C7NW3AOfqajXkVTvIAE+Lw
1m6boqz0haplS/HJHhY9TqycLcg6zNUmbYf9zKx0q1Kd7Rq3FhVzyq2i9+9bH9s+
fudJ8mL9DSYqwSQ8srubTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org