Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/gExxtoMcXKt6XU0iiG1N_NFvur0.roa
File: gExxtoMcXKt6XU0iiG1N_NFvur0.roa (raw, json)
Hash identifier: 9DwUlhiyERFgVuno2QtpClnrTDnr3ay5BTfDKFqbWXk=
Subject key identifier: 80:4C:71:B6:83:1C:5C:AB:7A:5D:4D:22:88:6D:4D:FC:D1:6F:BA:BD
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 18
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/gExxtoMcXKt6XU0iiG1N_NFvur0.roa
Signing time: Sat 30 Oct 2021 05:08:48 +0000
ROA not before: Sat 30 Oct 2021 05:08:48 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Oct 30 05:08:48 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=804C71B6831C5CAB7A5D4D22886D4DFCD16FBABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:4c:36:b2:30:e4:ba:7e:c3:f5:7f:6a:8b:
a0:43:f4:f4:32:94:4e:d3:b7:b7:d7:54:58:02:d6:
de:81:aa:1e:0c:33:fd:19:90:f2:96:1d:0b:d5:4d:
28:bb:21:ce:a4:7a:da:25:61:d3:56:68:38:c5:bd:
3a:17:fa:e2:fe:bd:e6:0e:c5:9e:af:ac:61:46:38:
bd:19:77:8b:7d:8b:da:be:87:b3:11:81:94:a4:b4:
22:43:b5:d1:77:84:7c:e0:04:17:53:c2:d5:74:d7:
a5:0f:3b:0c:c5:78:12:14:4c:19:94:0e:7a:80:72:
a9:c9:f1:e0:2c:b3:2f:90:ce:1c:a8:94:7a:4b:90:
c0:ff:22:26:05:9f:74:9e:05:86:25:9c:bb:f6:1e:
ca:44:d5:fb:b0:28:63:58:67:e7:37:e8:ef:35:89:
16:fe:cd:38:20:de:8e:86:39:a6:9a:bc:ca:34:64:
f1:85:29:06:82:3e:36:26:2e:30:58:03:61:4c:1e:
68:8f:41:4a:03:28:25:d6:ae:26:c5:9f:ec:29:2e:
f8:32:46:b9:93:77:7a:2e:02:2a:8f:e0:98:91:7a:
f3:b5:7d:1c:a8:e9:4e:df:3f:1e:33:5c:b3:6f:01:
56:05:7a:a8:f1:47:27:76:b6:20:0c:af:81:4d:6e:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:71:B6:83:1C:5C:AB:7A:5D:4D:22:88:6D:4D:FC:D1:6F:BA:BD
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/gExxtoMcXKt6XU0iiG1N_NFvur0.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.16.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5b:c5:db:df:76:00:e8:82:f8:c1:62:bd:03:8b:da:2c:0d:
73:19:14:7b:d6:f4:81:61:65:7b:7e:72:8d:d2:5a:d1:d7:21:
57:ab:87:ef:5b:60:47:32:21:f8:43:d2:b6:d7:d8:42:a4:7b:
b2:f3:dc:e8:82:66:49:3b:3b:e5:c9:fe:3c:e8:a9:b1:0d:76:
3b:2d:9c:24:8d:be:6e:8e:e2:4c:ba:57:ae:12:95:b0:b6:3b:
56:3d:79:f6:5b:ce:89:9c:90:5b:cb:f0:ec:00:ce:7b:61:73:
76:d0:96:1a:3c:b9:05:ed:e6:7a:16:0d:e9:43:5d:ed:99:ad:
41:1f:75:e5:b1:4f:96:6f:1a:04:bb:44:8d:0b:98:46:a4:f6:
7c:f2:04:dd:bf:e2:b0:49:d8:7f:e6:47:72:7d:a2:09:7a:db:
48:bc:83:97:cc:94:51:62:4e:11:3f:22:3b:a7:43:3a:c7:14:
21:8b:df:97:31:59:c4:be:15:cc:be:be:2a:d8:ed:89:b0:36:
46:d8:b8:7f:9c:82:95:a8:f4:5b:fe:38:5b:e8:df:cf:aa:78:
53:f4:73:ba:0f:8b:a2:93:9f:71:e7:23:7e:86:02:c1:c4:ff:
0d:f5:ba:4a:14:06:96:97:e4:88:08:f8:55:fc:fe:04:35:e6:
94:9b:86:8e
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE0
RDg1QkQ0ODM2MEE2NUQ5RDQxNDRFQzZEMjA3NTJDMUVEQzdEMB4XDTIxMTAzMDA1
MDg0OFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODA0QzcxQjY4MzFDNUNB
QjdBNUQ0RDIyODg2RDRERkNEMTZGQkFCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKgdTDayMOS6fsP1f2qLoEP09DKUTtO3t9dUWALW3oGqHgwz/RmQ
8pYdC9VNKLshzqR62iVh01ZoOMW9Ohf64v695g7Fnq+sYUY4vRl3i32L2r6HsxGB
lKS0IkO10XeEfOAEF1PC1XTXpQ87DMV4EhRMGZQOeoByqcnx4CyzL5DOHKiUekuQ
wP8iJgWfdJ4FhiWcu/YeykTV+7AoY1hn5zfo7zWJFv7NOCDejoY5ppq8yjRk8YUp
BoI+NiYuMFgDYUweaI9BSgMoJdauJsWf7Cku+DJGuZN3ei4CKo/gmJF687V9HKjp
Tt8/HjNcs28BVgV6qPFHJ3a2IAyvgU1uL10CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSATHG2gxxcq3pdTSKIbU380W+6vTAfBgNVHSMEGDAWgBTIFNhb1INgpl2dQUTs
bSB1LB7cfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3
ZTNIMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81NzMvZ0V4eHRvTWNYS3Q2WFUwaWlHMU5fTkZ2dXIwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfvEDANBgkqhkiG9w0BAQsFAAOCAQEA
VFvF2992AOiC+MFivQOL2iwNcxkUe9b0gWFle35yjdJa0dchV6uH71tgRzIh+EPS
ttfYQqR7svPc6IJmSTs75cn+POipsQ12Oy2cJI2+bo7iTLpXrhKVsLY7Vj159lvO
iZyQW8vw7ADOe2FzdtCWGjy5Be3mehYN6UNd7ZmtQR915bFPlm8aBLtEjQuYRqT2
fPIE3b/isEnYf+ZHcn2iCXrbSLyDl8yUUWJOET8iO6dDOscUIYvflzFZxL4VzL6+
KtjtibA2Rti4f5yClaj0W/44W+jfz6p4U/Rzug+LopOfcecjfoYCwcT/DfW6ShQG
lpfkiAj4Vfz+BDXmlJuGjg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org