Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xr_vp1zl63dl-04ow_A4pA-8q0I.roa
File: Xr_vp1zl63dl-04ow_A4pA-8q0I.roa (raw, json)
Hash identifier: 6+x4T4I5+mLxgsjwtqaDPvGwhByGSJwepVyRAc/Hq2I=
Subject key identifier: 5E:BF:EF:A7:5C:E5:EB:77:65:FB:4E:28:C3:F0:38:A4:0F:BC:AB:42
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: FB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xr_vp1zl63dl-04ow_A4pA-8q0I.roa
Signing time: Wed 24 Aug 2022 08:00:07 +0000
ROA not before: Wed 24 Aug 2022 08:00:07 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 10013
IP address blocks: 153.120.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Aug 24 08:00:07 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=5EBFEFA75CE5EB7765FB4E28C3F038A40FBCAB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:8a:8a:2e:37:74:ca:09:53:84:5d:2d:bc:
9f:66:33:03:9e:25:d4:54:7f:7c:4b:90:e5:e2:f9:
57:35:92:2e:0a:56:c1:af:4e:c4:16:66:5c:f8:ab:
bf:15:be:39:01:86:b7:cf:af:fa:f4:ed:69:56:0c:
c3:0b:b7:bf:5b:b4:07:cc:0a:3a:dc:47:40:7b:2a:
ba:09:24:b6:15:2d:de:a4:ac:b3:fd:be:23:27:d4:
04:60:c5:03:81:13:48:a8:16:64:80:46:9a:3a:4f:
c2:56:f6:a6:f6:3c:51:38:83:10:74:af:d0:1b:98:
88:17:bc:d6:b6:cc:2a:ec:8b:db:7a:30:db:d9:c3:
b2:7f:3c:74:29:c2:32:12:fb:42:e9:13:4c:dc:0c:
ff:50:1f:ca:9c:e9:40:65:15:a9:ef:04:b5:e3:dc:
67:92:46:b5:09:f4:dd:d3:3f:b8:68:14:fb:14:3d:
0f:96:ad:9d:40:4c:4b:cb:8f:ce:dc:f5:7d:55:07:
58:e3:6a:40:37:4d:d8:bf:3e:38:12:26:7c:40:f4:
fa:8f:90:e7:09:7d:b0:c8:b0:20:ca:ae:b9:7c:cb:
c3:c1:33:49:af:7e:b9:ec:e6:49:5e:1f:01:6d:2c:
b2:1a:8e:5e:d7:11:9f:ba:fe:46:ff:05:e1:e8:dd:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:EF:A7:5C:E5:EB:77:65:FB:4E:28:C3:F0:38:A4:0F:BC:AB:42
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xr_vp1zl63dl-04ow_A4pA-8q0I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.224.0/20
Signature Algorithm: sha256WithRSAEncryption
22:ee:51:de:45:9a:d5:8e:6b:5a:39:6d:0d:c8:8b:6c:90:42:
d7:93:d6:74:f7:ff:51:bb:3c:49:d9:7e:05:3e:51:7d:f3:c4:
cb:a7:f5:c6:17:9d:04:c7:99:c8:82:d5:d1:27:10:e2:df:1c:
42:4f:58:4e:3d:61:f0:26:64:c3:2c:e9:91:79:48:cd:d9:6a:
b3:87:25:31:9c:af:c5:48:12:cf:ca:f1:d8:6c:1d:f0:40:11:
13:92:2c:a2:75:0f:f1:53:1a:32:07:f0:83:18:a1:0e:88:aa:
2e:97:0d:1f:47:c6:2d:cc:3d:89:85:07:7d:c9:df:dd:d2:72:
09:0a:79:ca:b5:0c:bf:ec:50:59:ce:93:94:af:b6:31:df:e2:
df:2b:44:8c:7a:82:d9:85:79:c3:64:7e:0a:1a:c7:75:87:9d:
a5:ed:c5:29:30:f7:fa:2b:ab:71:42:ef:7f:f5:8f:56:7e:a0:
2d:bf:46:eb:bb:51:d4:ab:da:d9:84:47:c0:5b:f2:13:df:71:
b9:d2:b7:2d:00:92:04:fa:c6:47:5a:24:fe:7a:77:5d:69:c7:
cd:76:19:c5:ed:f5:75:b2:28:2c:95:94:72:23:9a:a8:19:b6:
8d:24:e8:1f:c3:f3:31:8c:99:05:4e:c1:69:d7:14:fe:4e:a8:
e0:7e:44:84
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA4MjQw
ODAwMDdaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVFQkZFRkE3NUNFNUVC
Nzc2NUZCNEUyOEMzRjAzOEE0MEZCQ0FCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjCoqKLjd0yglThF0tvJ9mMwOeJdRUf3xLkOXi+Vc1ki4KVsGv
TsQWZlz4q78VvjkBhrfPr/r07WlWDMMLt79btAfMCjrcR0B7KroJJLYVLd6krLP9
viMn1ARgxQOBE0ioFmSARpo6T8JW9qb2PFE4gxB0r9AbmIgXvNa2zCrsi9t6MNvZ
w7J/PHQpwjIS+0LpE0zcDP9QH8qc6UBlFanvBLXj3GeSRrUJ9N3TP7hoFPsUPQ+W
rZ1ATEvLj87c9X1VB1jjakA3Tdi/PjgSJnxA9PqPkOcJfbDIsCDKrrl8y8PBM0mv
frns5kleHwFtLLIajl7XEZ+6/kb/BeHo3YGJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXr/vp1zl63dl+04ow/A4pA+8q0IwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1hyX3ZwMXpsNjNkbC0wNG93X0E0cEEtOHEwSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASZeOAwDQYJKoZIhvcNAQELBQADggEBACLuUd5FmtWOa1o5bQ3Ii2yQQteT
1nT3/1G7PEnZfgU+UX3zxMun9cYXnQTHmciC1dEnEOLfHEJPWE49YfAmZMMs6ZF5
SM3ZarOHJTGcr8VIEs/K8dhsHfBAEROSLKJ1D/FTGjIH8IMYoQ6Iqi6XDR9Hxi3M
PYmFB33J393ScgkKecq1DL/sUFnOk5SvtjHf4t8rRIx6gtmFecNkfgoax3WHnaXt
xSkw9/orq3FC73/1j1Z+oC2/Ruu7UdSr2tmER8Bb8hPfcbnSty0AkgT6xkdaJP56
d11px812GcXt9XWyKCyVlHIjmqgZto0k6B/D8zGMmQVOwWnXFP5OqOB+RIQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org