Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/NR-faFcDXUfNxkGtHoaEkCbJ3Ho.roa
File: NR-faFcDXUfNxkGtHoaEkCbJ3Ho.roa (raw, json)
Hash identifier: 2ubPyKTb0FdL9RVX2Ye2IJvF4ykrQMC1BUf3C2mjnqs=
Subject key identifier: 35:1F:9F:68:57:03:5D:47:CD:C6:41:AD:1E:86:84:90:26:C9:DC:7A
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 77
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NR-faFcDXUfNxkGtHoaEkCbJ3Ho.roa
Signing time: Mon 01 Nov 2021 01:28:40 +0000
ROA not before: Mon 01 Nov 2021 01:28:40 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 210.128.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:40 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=351F9F6857035D47CDC641AD1E86849026C9DC7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:43:c4:19:ac:a8:ac:02:fc:ad:0f:14:bf:
4c:0b:a5:50:93:64:b4:e4:94:d2:ff:1b:95:04:5b:
bc:14:be:9e:d7:50:1a:07:ab:be:c8:99:55:a0:99:
fd:93:2e:87:2e:34:8d:e8:35:6a:06:e1:05:86:14:
8f:87:d5:45:79:25:be:3c:d1:64:30:c9:a4:8f:06:
2f:b4:49:c2:47:12:23:a9:3e:3b:50:5e:5e:c5:38:
7a:de:6a:df:1f:da:38:0c:c0:4e:77:a5:aa:8d:2f:
02:6c:35:e3:8a:b0:f7:dd:8a:d0:2c:27:64:1c:de:
dd:63:bd:bc:90:ef:26:e9:84:a3:e2:3f:fc:ab:f8:
14:70:a1:c0:fc:83:76:d9:f0:c8:8e:76:1b:a8:b1:
32:f8:d9:bb:8d:41:b2:ec:c7:a5:a1:09:77:e5:78:
1a:cf:97:e2:5e:bc:d2:a9:3b:4d:0f:a2:65:54:be:
89:c9:b5:89:3d:d4:00:f0:e2:c6:75:ab:b8:d8:d3:
91:f4:54:16:18:1c:78:d2:30:96:f1:97:43:e0:08:
d7:66:1e:fc:23:10:01:c8:49:aa:0f:22:27:14:1e:
08:1f:c7:6c:79:9b:6c:df:f2:77:41:36:74:1a:dc:
29:5d:99:a4:23:d9:00:f7:e0:49:fd:0c:27:db:31:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:9F:68:57:03:5D:47:CD:C6:41:AD:1E:86:84:90:26:C9:DC:7A
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NR-faFcDXUfNxkGtHoaEkCbJ3Ho.roa
sbgp-ipAddrBlock: critical
IPv4:
210.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:47:91:01:1b:a4:a9:9e:ac:a7:79:2b:71:8a:3a:5f:5a:72:
25:e5:d7:28:e5:5f:99:8d:d1:2b:71:b3:1a:bc:03:0f:bd:56:
f7:a0:49:df:03:72:b8:1a:df:59:0b:1d:89:63:13:49:09:2b:
f7:28:48:38:69:e6:9a:f3:62:6c:2a:9e:03:65:b9:38:92:a0:
69:5d:c0:f0:9f:7b:9d:85:a8:1a:e5:1d:f2:c9:65:5c:70:a8:
8d:53:86:9e:7d:8c:3b:2f:e2:18:45:71:88:19:87:2f:eb:34:
1b:25:a7:78:64:fe:23:8b:24:50:32:5d:98:9a:80:03:c5:ef:
3e:b3:72:c8:96:36:23:4f:24:5b:29:b7:f3:bb:b7:f4:ba:f4:
f8:7f:f8:6e:cb:20:de:b4:ad:4a:f2:6a:0f:1c:8a:55:ff:bc:
75:58:54:2b:b4:53:ec:fe:d1:29:6d:d5:5d:f8:76:03:1a:ad:
f6:cf:20:fe:9f:d0:67:df:20:60:35:ee:11:6c:92:7c:1d:fd:
98:90:7e:e9:2b:fe:f6:d0:d4:0d:c7:fc:52:46:0d:6d:f4:5e:
54:f1:af:d6:17:5c:01:06:28:6b:97:0f:11:0f:ec:ac:b6:c8:
b3:5a:3a:74:19:6b:92:2c:29:dd:df:f0:ca:27:34:f2:19:63:
d4:56:ca:88
-----BEGIN CERTIFICATE-----
MIIEtzCCA5+gAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
Mjg0MFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzUxRjlGNjg1NzAzNUQ0
N0NEQzY0MUFEMUU4Njg0OTAyNkM5REM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJjRQ8QZrKisAvytDxS/TAulUJNktOSU0v8blQRbvBS+ntdQGger
vsiZVaCZ/ZMuhy40jeg1agbhBYYUj4fVRXklvjzRZDDJpI8GL7RJwkcSI6k+O1Be
XsU4et5q3x/aOAzATnelqo0vAmw144qw992K0CwnZBze3WO9vJDvJumEo+I//Kv4
FHChwPyDdtnwyI52G6ixMvjZu41BsuzHpaEJd+V4Gs+X4l680qk7TQ+iZVS+icm1
iT3UAPDixnWruNjTkfRUFhgceNIwlvGXQ+AI12Ye/CMQAchJqg8iJxQeCB/HbHmb
bN/yd0E2dBrcKV2ZpCPZAPfgSf0MJ9sx/4cCAwEAAaOCAdQwggHQMB0GA1UdDgQW
BBQ1H59oVwNdR83GQa0ehoSQJsncejAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9OUi1mYUZjRFhVZk54a0d0SG9hRWtDYkozSG8ucm9hMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMA0oAwDQYJKoZIhvcNAQELBQADggEBAItHkQEb
pKmerKd5K3GKOl9aciXl1yjlX5mN0Stxsxq8Aw+9VvegSd8Dcrga31kLHYljE0kJ
K/coSDhp5przYmwqngNluTiSoGldwPCfe52FqBrlHfLJZVxwqI1Thp59jDsv4hhF
cYgZhy/rNBslp3hk/iOLJFAyXZiagAPF7z6zcsiWNiNPJFspt/O7t/S69Ph/+G7L
IN60rUryag8cilX/vHVYVCu0U+z+0Slt1V34dgMarfbPIP6f0GffIGA17hFsknwd
/ZiQfukr/vbQ1A3H/FJGDW30XlTxr9YXXAEGKGuXDxEP7Ky2yLNaOnQZa5IsKd3f
8MonNPIZY9RWyog=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org