Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/Kbyn9EVOKYgNHF40G_qXbo_x1ic.roa
File: Kbyn9EVOKYgNHF40G_qXbo_x1ic.roa (raw, json)
Hash identifier: tRkgKzTYS5YH0bKB7f5C1uGOmMUf6BzCvN4DSWuj+/Y=
Subject key identifier: 29:BC:A7:F4:45:4E:29:88:0D:1C:5E:34:1B:FA:97:6E:8F:F1:D6:27
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 41
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Kbyn9EVOKYgNHF40G_qXbo_x1ic.roa
Signing time: Thu 01 Sep 2022 01:28:36 +0000
ROA not before: Thu 01 Sep 2022 01:28:36 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 55900
IP address blocks: 180.131.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Sep 1 01:28:36 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=29BCA7F4454E29880D1C5E341BFA976E8FF1D627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:d8:ca:31:07:90:9e:80:72:88:26:52:79:
de:c8:07:25:a2:82:cd:1d:e5:05:0d:36:ef:4b:46:
10:21:56:6e:21:43:09:e7:85:30:29:38:67:5f:46:
67:fc:7a:6c:36:ac:7e:06:a0:b5:ba:6d:f6:9e:bc:
f8:d9:21:14:09:fc:7f:d2:d9:d6:00:79:94:fc:23:
1e:75:83:97:e9:42:40:db:6f:5a:a3:c8:8f:4d:9d:
6b:8a:b1:3f:23:a0:59:9d:cf:e3:0b:87:f5:0a:b8:
06:e1:46:12:4b:4c:cd:6b:ff:87:07:34:87:d7:fc:
cf:a8:2c:ab:72:2b:e2:86:4c:97:19:22:ac:03:a0:
d0:b0:39:6d:6b:0a:3c:93:19:f6:19:a1:dc:4b:ad:
4e:ac:3d:9a:24:08:97:73:c2:8c:fb:68:31:9e:cc:
98:51:de:cc:11:35:be:73:a0:ef:ef:44:3c:48:9f:
1d:be:7d:70:ed:1f:8b:62:84:de:3e:04:99:04:00:
e8:53:1d:3b:ff:3a:ce:77:cd:8f:d8:cc:2d:61:5e:
1f:23:d8:30:dd:92:fd:e0:49:1e:72:04:e6:83:fd:
f7:eb:72:be:5c:1f:c1:0f:3b:c0:d4:ed:b8:e9:c5:
6e:fe:61:0e:c7:34:03:68:29:62:2f:a5:30:d5:36:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:A7:F4:45:4E:29:88:0D:1C:5E:34:1B:FA:97:6E:8F:F1:D6:27
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Kbyn9EVOKYgNHF40G_qXbo_x1ic.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.208.0/20
Signature Algorithm: sha256WithRSAEncryption
40:a1:59:85:84:58:dd:fd:f0:87:35:ab:16:70:49:73:33:e4:
22:60:cc:9a:35:97:78:c1:4b:c8:58:f6:92:3b:c3:24:d9:1b:
12:f4:e5:4e:a0:97:9f:9a:0a:16:d8:39:dd:1a:c0:23:cc:31:
15:6a:38:fc:55:f1:b2:03:66:4c:6f:21:c0:35:16:d3:1c:b6:
17:a7:0b:ec:c4:06:1f:ec:31:0e:b4:ec:d9:d1:ca:cc:d5:71:
98:da:0e:1e:77:df:a5:e6:1f:51:f7:05:3e:a9:86:94:a0:c0:
c8:7a:91:72:f3:2d:38:52:25:20:97:8c:6b:9e:66:3a:37:cb:
a1:a9:fa:c1:c2:33:6e:ee:6a:3a:ce:6a:1e:ce:14:bd:9a:33:
e5:05:b2:61:53:52:d7:f4:7c:30:41:c4:34:15:03:ac:44:0d:
05:91:0e:c0:e3:c7:49:30:76:dd:3b:57:07:88:a0:43:c2:d1:
36:e4:74:75:6d:47:2c:db:ea:56:0c:58:b6:5e:08:b1:7a:41:
21:54:6b:2c:b7:f8:b0:e0:09:99:4b:5e:44:2d:9a:fa:dc:6c:
94:88:78:45:b8:b8:24:40:23:e3:42:1e:95:9c:49:0a:4b:26:
d1:0d:73:de:69:52:d5:cc:86:7c:07:bd:4b:0a:df:d8:68:6d:
c0:1b:03:0b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIyMDkwMTAx
MjgzNloXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoMjlCQ0E3RjQ0NTRFMjk4
ODBEMUM1RTM0MUJGQTk3NkU4RkYxRDYyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALlZ2MoxB5CegHKIJlJ53sgHJaKCzR3lBQ0270tGECFWbiFDCeeF
MCk4Z19GZ/x6bDasfgagtbpt9p68+NkhFAn8f9LZ1gB5lPwjHnWDl+lCQNtvWqPI
j02da4qxPyOgWZ3P4wuH9Qq4BuFGEktMzWv/hwc0h9f8z6gsq3Ir4oZMlxkirAOg
0LA5bWsKPJMZ9hmh3EutTqw9miQIl3PCjPtoMZ7MmFHezBE1vnOg7+9EPEifHb59
cO0fi2KE3j4EmQQA6FMdO/86znfNj9jMLWFeHyPYMN2S/eBJHnIE5oP99+tyvlwf
wQ87wNTtuOnFbv5hDsc0A2gpYi+lMNU2ILcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQpvKf0RU4piA0cXjQb+pduj/HWJzAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvS2J5bjlFVk9LWWdOSEY0MEdfcVhib194MWljLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBLSD0DANBgkqhkiG9w0BAQsFAAOCAQEAQKFZhYRY3f3whzWrFnBJczPkImDM
mjWXeMFLyFj2kjvDJNkbEvTlTqCXn5oKFtg53RrAI8wxFWo4/FXxsgNmTG8hwDUW
0xy2F6cL7MQGH+wxDrTs2dHKzNVxmNoOHnffpeYfUfcFPqmGlKDAyHqRcvMtOFIl
IJeMa55mOjfLoan6wcIzbu5qOs5qHs4UvZoz5QWyYVNS1/R8MEHENBUDrEQNBZEO
wOPHSTB23TtXB4igQ8LRNuR0dW1HLNvqVgxYtl4IsXpBIVRrLLf4sOAJmUteRC2a
+txslIh4Rbi4JEAj40IelZxJCksm0Q1z3mlS1cyGfAe9Swrf2GhtwBsDCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org