Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/C1LCOYSR6NmFoL-RZLdBAo8Z-70.roa
File: C1LCOYSR6NmFoL-RZLdBAo8Z-70.roa (raw, json)
Hash identifier: SlVV0ElWEz5lBwJ+kFe87xA3VXq+SZM89ypcfhs1axw=
Subject key identifier: 0B:52:C2:39:84:91:E8:D9:85:A0:BF:91:64:B7:41:02:8F:19:FB:BD
Certificate issuer: /CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Certificate serial: 14
Authority key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/C1LCOYSR6NmFoL-RZLdBAo8Z-70.roa
Signing time: Wed 01 Sep 2021 01:30:29 +0000
ROA not before: Wed 01 Sep 2021 01:30:29 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 55900
IP address blocks: 109.236.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Validity
Not Before: Sep 1 01:30:29 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=0B52C2398491E8D985A0BF9164B741028F19FBBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:99:49:e8:53:45:ce:9b:c2:49:9b:76:42:
e8:97:32:97:7c:3e:d3:5e:d5:6d:e7:08:ad:b7:b0:
88:3e:4f:72:4e:52:d8:cc:41:76:7f:3e:08:58:9a:
f3:cb:53:3c:33:f3:9d:fd:14:cc:d3:d4:16:e8:d3:
a7:99:dd:37:fe:56:04:70:70:6d:60:d3:12:9c:cd:
ba:f6:8b:72:9a:ec:fa:41:2f:02:d7:37:7d:6a:3c:
1c:02:7d:06:6f:ed:90:20:7e:e5:e0:69:49:2c:2f:
de:16:04:89:49:d9:85:33:30:2e:e6:41:50:d1:a8:
2c:cf:02:cc:30:37:a1:cf:cd:63:20:4b:46:03:2a:
da:6f:a5:35:79:bb:c3:7e:a5:b7:74:bb:65:c4:67:
84:e9:8e:07:54:13:a6:20:3a:b2:8e:13:d6:dc:a1:
78:e8:a8:2d:fd:bc:2a:b1:e1:63:87:f6:8f:93:2d:
04:f8:07:71:6d:f0:05:b1:4b:19:9a:e0:06:ca:1d:
4c:03:61:2a:26:b9:f3:60:d1:34:a4:5f:b4:86:48:
0a:dd:e2:58:81:a5:f8:15:c0:c6:45:84:f8:c4:a9:
ab:74:df:cb:46:3d:30:c0:59:fe:0c:fc:a8:60:bb:
0b:d8:07:93:11:c5:ee:ed:fe:a3:31:47:9b:5d:67:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:C2:39:84:91:E8:D9:85:A0:BF:91:64:B7:41:02:8F:19:FB:BD
X509v3 Authority Key Identifier:
keyid:B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/C1LCOYSR6NmFoL-RZLdBAo8Z-70.roa
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
75:4a:7d:d9:9b:d5:fa:c0:7d:32:c0:06:ae:f0:ae:7b:65:36:
67:17:53:0c:10:b4:d0:95:29:f0:f1:3d:66:43:4a:f5:2a:cc:
ba:b6:be:32:c0:08:e8:15:62:26:cb:36:54:63:60:d5:14:79:
a2:85:1b:57:f3:b9:74:57:c3:13:af:98:56:f7:bb:7c:4a:ce:
4f:8a:47:6a:12:c4:51:2b:3f:e2:b3:c1:a1:42:54:65:b8:b3:
ef:36:57:c6:8f:4f:89:2e:a5:88:da:59:db:7c:ba:71:42:a0:
7f:00:ab:b3:c4:42:dd:1a:b2:e0:b8:b1:b8:96:0b:20:e3:e7:
e8:eb:d5:05:c8:a1:45:b8:f2:ed:ed:c5:02:f9:41:d7:c1:94:
ab:ea:12:07:fb:43:2f:43:17:c7:24:32:4e:31:bc:97:48:c7:
24:da:aa:3d:35:fc:95:ae:28:45:53:60:aa:d8:de:99:92:4a:
d0:f0:b4:4e:11:1b:0b:bd:9d:eb:57:99:80:94:ef:c3:f3:a6:
b5:ce:bc:ff:2a:71:0b:78:ac:f3:38:cb:4f:01:1a:a4:f0:27:
a8:88:8e:e7:e8:a7:0f:12:4e:b9:93:07:66:b6:32:45:7e:26:
ca:61:d0:8b:4f:b0:b8:e6:b3:d8:fd:e6:c9:4a:26:29:7b:bf:
a1:b1:7d:61
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOERE
MUQ2RDc3RkYzMzkzMUJGNzQ4QkE5QkYwRUJGNDkzOUQ4MDMxMB4XDTIxMDkwMTAx
MzAyOVoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoMEI1MkMyMzk4NDkxRThE
OTg1QTBCRjkxNjRCNzQxMDI4RjE5RkJCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOpjmUnoU0XOm8JJm3ZC6Jcyl3w+017VbecIrbewiD5Pck5S2MxB
dn8+CFia88tTPDPznf0UzNPUFujTp5ndN/5WBHBwbWDTEpzNuvaLcprs+kEvAtc3
fWo8HAJ9Bm/tkCB+5eBpSSwv3hYEiUnZhTMwLuZBUNGoLM8CzDA3oc/NYyBLRgMq
2m+lNXm7w36lt3S7ZcRnhOmOB1QTpiA6so4T1tyheOioLf28KrHhY4f2j5MtBPgH
cW3wBbFLGZrgBsodTANhKia582DRNKRftIZICt3iWIGl+BXAxkWE+MSpq3Tfy0Y9
MMBZ/gz8qGC7C9gHkxHF7u3+ozFHm11nnGcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQLUsI5hJHo2YWgv5Fkt0ECjxn7vTAfBgNVHSMEGDAWgBS43R1td/8zkxv3SLqb
8Ov0k52AMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L3VOMGRiWGZfTTVNYjkwaTZtX0RyOUpPZGdERS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VOMGRiWGZfTTVNYjkwaTZtX0RyOUpP
ZGdERS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MzkvQzFMQ09ZU1I2Tm1Gb0wtUlpMZEJBbzhaLTcwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG3sADANBgkqhkiG9w0BAQsFAAOCAQEA
dUp92ZvV+sB9MsAGrvCue2U2ZxdTDBC00JUp8PE9ZkNK9SrMura+MsAI6BViJss2
VGNg1RR5ooUbV/O5dFfDE6+YVve7fErOT4pHahLEUSs/4rPBoUJUZbiz7zZXxo9P
iS6liNpZ23y6cUKgfwCrs8RC3Rqy4LixuJYLIOPn6OvVBcihRbjy7e3FAvlB18GU
q+oSB/tDL0MXxyQyTjG8l0jHJNqqPTX8la4oRVNgqtjemZJK0PC0ThEbC72d61eZ
gJTvw/Omtc68/ypxC3is8zjLTwEapPAnqIiO5+inDxJOuZMHZrYyRX4mymHQi0+w
uOaz2P3myUomKXu/obF9YQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org