Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/nb6yiz_HaUuSBgSa5oAs6aRfLjg.roa
File: nb6yiz_HaUuSBgSa5oAs6aRfLjg.roa (raw, json)
Hash identifier: +qhVNs3asohAEqiv54Uq+kZVOxaroXkt3z4qoNhEUes=
Subject key identifier: 9D:BE:B2:8B:3F:C7:69:4B:92:06:04:9A:E6:80:2C:E9:A4:5F:2E:38
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 46
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nb6yiz_HaUuSBgSa5oAs6aRfLjg.roa
Signing time: Tue 02 Mar 2021 08:41:37 +0000
ROA not before: Tue 02 Mar 2021 08:41:37 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 114.31.88.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:41:37 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=9DBEB28B3FC7694B9206049AE6802CE9A45F2E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:2b:c5:d4:21:da:2e:b0:70:1a:b5:49:8e:
46:6d:c1:65:f8:ac:79:58:02:e5:82:7c:39:66:6a:
e7:67:c6:22:0e:d6:5a:f6:dd:b7:af:44:fe:d9:61:
50:fc:13:2f:bc:95:f2:fc:0b:1f:51:d8:33:25:09:
fa:ca:2d:0d:5b:74:fb:d8:3d:e4:c2:cb:38:0e:ce:
b0:17:0f:87:c5:55:bd:87:2a:1c:b0:cf:85:b7:4f:
db:18:34:41:e3:38:48:81:a8:9f:40:5d:2d:15:eb:
21:5d:74:07:d9:f9:2b:48:a6:bf:fc:a0:92:ed:28:
78:7b:fa:40:66:18:a9:84:1e:26:90:d7:65:68:16:
cf:bf:44:d6:7e:ed:a3:86:9a:73:5e:8f:3f:8d:c2:
f5:40:9e:f2:ec:8a:2e:68:45:79:c8:60:a8:a5:09:
87:66:cc:9d:8f:16:64:20:2d:19:21:03:a9:d6:1b:
db:b8:45:6c:bc:5b:b2:fc:6a:c1:74:6b:cb:bc:89:
31:52:54:93:39:d2:df:20:fc:e5:64:7c:9a:4a:da:
74:fd:60:d5:10:88:3e:df:3f:06:cc:c1:63:c9:8b:
8c:9f:0b:d2:50:ff:81:67:44:00:9b:b1:ca:81:47:
89:61:61:e5:ce:39:e9:f6:62:2f:b8:bf:37:8b:f9:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:B2:8B:3F:C7:69:4B:92:06:04:9A:E6:80:2C:E9:A4:5F:2E:38
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nb6yiz_HaUuSBgSa5oAs6aRfLjg.roa
sbgp-ipAddrBlock: critical
IPv4:
114.31.88.0/21
Signature Algorithm: sha256WithRSAEncryption
09:4b:3a:05:af:8b:c9:cd:68:c3:2f:0b:cc:ff:7f:7c:4e:77:
07:e1:80:76:97:e2:83:e8:56:63:f6:a4:7f:2c:49:ff:34:9a:
61:bb:21:1b:04:9d:12:e7:d8:aa:55:6b:d5:0b:dc:24:f3:1a:
3f:6e:bd:9d:02:b4:ce:92:ff:f0:9a:44:bb:24:f4:35:f1:ad:
09:ad:00:17:8e:3e:36:6e:2b:56:25:cf:60:d2:6c:d8:65:e4:
d5:1d:de:24:04:ca:ff:f1:7c:52:7c:73:df:52:97:79:35:bb:
b6:9b:0b:dd:fa:bd:50:50:00:14:85:5e:f3:75:65:7d:15:6b:
2a:c5:ae:8c:7e:9b:dd:e0:77:ec:5a:8b:8f:22:94:80:da:a1:
e4:96:9d:8b:73:d6:08:52:74:8c:d2:18:5c:8b:f6:ea:24:d1:
e4:87:dd:5e:38:96:b2:f4:db:d0:22:5e:45:ae:b0:6d:14:f1:
5d:50:d3:b9:48:bd:2a:bf:01:f2:a1:c0:f7:95:e0:cb:c8:f3:
c3:57:c9:4e:d5:1a:e6:d2:46:ec:2c:08:f7:cf:87:b7:56:58:
4d:ac:3f:40:d1:03:25:96:3b:3a:4b:ec:c7:a3:76:b4:37:f1:
bf:ae:5d:19:39:b2:38:50:52:a4:91:e2:54:3e:1b:bc:c6:60:
61:3f:9e:4d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDYx
MERBNjhFOTNFRDUzOEE0OEE0NkM1MjE0MDI0RUQ1NEQwN0Y2MB4XDTIxMDMwMjA4
NDEzN1oXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoOURCRUIyOEIzRkM3Njk0
QjkyMDYwNDlBRTY4MDJDRTlBNDVGMkUzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN6EK8XUIdousHAatUmORm3BZfiseVgC5YJ8OWZq52fGIg7WWvbd
t69E/tlhUPwTL7yV8vwLH1HYMyUJ+sotDVt0+9g95MLLOA7OsBcPh8VVvYcqHLDP
hbdP2xg0QeM4SIGon0BdLRXrIV10B9n5K0imv/ygku0oeHv6QGYYqYQeJpDXZWgW
z79E1n7to4aac16PP43C9UCe8uyKLmhFechgqKUJh2bMnY8WZCAtGSEDqdYb27hF
bLxbsvxqwXRry7yJMVJUkznS3yD85WR8mkradP1g1RCIPt8/BszBY8mLjJ8L0lD/
gWdEAJuxyoFHiWFh5c456fZiL7i/N4v5c2kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSdvrKLP8dpS5IGBJrmgCzppF8uODAfBgNVHSMEGDAWgBRAYQ2mjpPtU4pIpGxS
FAJO1U0H9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY5L1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRWTkJfWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRW
TkJfWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjkvbmI2eWl6X0hhVXVTQmdTYTVvQXM2YVJmTGpnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3IfWDANBgkqhkiG9w0BAQsFAAOCAQEA
CUs6Ba+Lyc1owy8LzP9/fE53B+GAdpfig+hWY/akfyxJ/zSaYbshGwSdEufYqlVr
1QvcJPMaP269nQK0zpL/8JpEuyT0NfGtCa0AF44+Nm4rViXPYNJs2GXk1R3eJATK
//F8Unxz31KXeTW7tpsL3fq9UFAAFIVe83VlfRVrKsWujH6b3eB37FqLjyKUgNqh
5Jadi3PWCFJ0jNIYXIv26iTR5IfdXjiWsvTb0CJeRa6wbRTxXVDTuUi9Kr8B8qHA
95Xgy8jzw1fJTtUa5tJG7CwI98+Ht1ZYTaw/QNEDJZY7Okvsx6N2tDfxv65dGTmy
OFBSpJHiVD4bvMZgYT+eTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org