Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/q9NW4Fq2xfjdnFlCOerV6RaKzHA.roa
File: q9NW4Fq2xfjdnFlCOerV6RaKzHA.roa (raw, json)
Hash identifier: B7v+B2R+2KFa6SqM1+Jrjky1KcXHXC7HQqpBBhPxOHE=
Subject key identifier: AB:D3:56:E0:5A:B6:C5:F8:DD:9C:59:42:39:EA:D5:E9:16:8A:CC:70
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q9NW4Fq2xfjdnFlCOerV6RaKzHA.roa
Signing time: Wed 01 Dec 2021 05:34:21 +0000
ROA not before: Wed 01 Dec 2021 05:34:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 202.7.108.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:34:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=ABD356E05AB6C5F8DD9C594239EAD5E9168ACC70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:71:d9:35:38:98:04:ad:87:17:6a:b6:9d:
19:2e:b8:df:30:4e:d5:bc:30:32:4a:b3:d7:83:a6:
69:ec:ce:cf:e2:10:95:a2:d6:9d:6f:cd:45:9f:e4:
d3:ee:03:ae:67:41:c4:50:6e:db:93:e6:48:ae:2e:
dd:58:ad:de:90:f6:80:0f:e3:0c:63:41:37:ba:15:
fa:b1:b9:9f:0a:37:5f:a3:85:d2:1d:07:db:52:db:
c6:e1:7e:0b:e4:e1:8c:92:0d:cf:f5:99:41:a5:ae:
cd:0f:ec:a6:24:3a:aa:d4:07:c0:e1:8d:84:59:cf:
45:eb:6c:4b:12:c8:7b:95:8d:53:40:31:1b:84:0f:
8e:1e:e0:15:fb:b3:19:75:3a:cb:d0:50:1c:aa:6d:
b4:4c:01:7a:2e:7c:e7:e4:43:77:01:4d:ca:f7:b5:
eb:28:a6:62:6b:52:e5:f4:90:b7:d3:cf:5d:ca:34:
75:88:b1:8e:c0:d7:a0:cc:ac:ab:8e:01:7a:87:1f:
96:37:c7:82:7a:49:f3:b2:a3:ef:db:d4:66:ca:ad:
dd:bd:40:c2:9c:fc:e8:3e:ea:d3:a1:d1:bc:2c:1b:
3d:25:e7:a7:1c:4b:34:67:a9:12:1e:30:64:6a:98:
f1:d2:34:e9:db:27:b2:28:4e:e2:3d:bf:39:36:83:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:56:E0:5A:B6:C5:F8:DD:9C:59:42:39:EA:D5:E9:16:8A:CC:70
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/q9NW4Fq2xfjdnFlCOerV6RaKzHA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:8b:21:5d:ac:3f:2b:7c:9f:7b:bd:37:10:58:1f:6c:7e:56:
5f:2d:5e:3f:4c:52:2c:82:e5:4f:10:6f:8c:79:c1:fb:b6:d3:
70:d1:02:ce:57:c4:c5:12:17:98:eb:5f:52:c2:03:60:17:e0:
f5:11:9f:4f:01:d3:d9:95:28:46:f2:f2:55:5e:b9:30:df:c1:
59:eb:13:36:fd:a3:0f:9c:63:00:3d:5b:27:47:c0:e0:73:7d:
42:f3:6a:e4:03:e0:d0:84:ac:25:11:70:7f:6b:0c:b0:0a:f3:
be:19:e5:66:87:e9:59:40:21:74:83:a4:4b:b6:99:07:fa:17:
4e:fa:31:f8:6c:51:c9:37:1c:19:79:a0:bf:e6:ee:3c:78:67:
67:8b:e5:78:4b:4d:27:5b:0e:f4:9d:8d:fc:47:ec:6b:10:a2:
aa:2e:14:d4:f3:52:89:2c:b1:47:1e:ff:ab:8d:84:8c:e9:56:
16:ec:2b:7a:61:ff:14:18:d2:9c:37:9a:ea:b2:15:da:07:be:
4e:cf:55:f7:a7:b8:1c:f1:8e:d3:18:88:bd:98:13:a2:43:5c:
f5:c5:2a:a5:91:28:a8:9a:7b:12:cc:d7:2a:c0:97:97:94:0d:
b5:4d:2f:81:d3:d2:3e:0d:be:a5:95:a1:12:76:44:5e:78:3a:
dd:eb:22:2b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MDYx
MERBNjhFOTNFRDUzOEE0OEE0NkM1MjE0MDI0RUQ1NEQwN0Y2MB4XDTIxMTIwMTA1
MzQyMVoXDTIyMTExNTAxMzAwMVowMzExMC8GA1UEAxMoQUJEMzU2RTA1QUI2QzVG
OEREOUM1OTQyMzlFQUQ1RTkxNjhBQ0M3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALKncdk1OJgErYcXaradGS643zBO1bwwMkqz14OmaezOz+IQlaLW
nW/NRZ/k0+4DrmdBxFBu25PmSK4u3Vit3pD2gA/jDGNBN7oV+rG5nwo3X6OF0h0H
21LbxuF+C+ThjJINz/WZQaWuzQ/spiQ6qtQHwOGNhFnPRetsSxLIe5WNU0AxG4QP
jh7gFfuzGXU6y9BQHKpttEwBei585+RDdwFNyve16yimYmtS5fSQt9PPXco0dYix
jsDXoMysq44BeocfljfHgnpJ87Kj79vUZsqt3b1Awpz86D7q06HRvCwbPSXnpxxL
NGepEh4wZGqY8dI06dsnsihO4j2/OTaDIeECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSr01bgWrbF+N2cWUI56tXpForMcDAfBgNVHSMEGDAWgBRAYQ2mjpPtU4pIpGxS
FAJO1U0H9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY5L1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRWTkJfWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FHRU5wbzZUN1ZPS1NLUnNVaFFDVHRW
TkJfWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjkvcTlOVzRGcTJ4ZmpkbkZsQ09lclY2UmFLekhBLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsoHbDANBgkqhkiG9w0BAQsFAAOCAQEA
q4shXaw/K3yfe703EFgfbH5WXy1eP0xSLILlTxBvjHnB+7bTcNECzlfExRIXmOtf
UsIDYBfg9RGfTwHT2ZUoRvLyVV65MN/BWesTNv2jD5xjAD1bJ0fA4HN9QvNq5APg
0ISsJRFwf2sMsArzvhnlZofpWUAhdIOkS7aZB/oXTvox+GxRyTccGXmgv+buPHhn
Z4vleEtNJ1sO9J2N/EfsaxCiqi4U1PNSiSyxRx7/q42EjOlWFuwremH/FBjSnDea
6rIV2ge+Ts9V96e4HPGO0xiIvZgTokNc9cUqpZEoqJp7EszXKsCXl5QNtU0vgdPS
Pg2+pZWhEnZEXng63esiKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org