Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q2hG3Wugk256xfKg1wka6DYtQnQ.roa
File: Q2hG3Wugk256xfKg1wka6DYtQnQ.roa (raw, json)
Hash identifier: RYJht3NWO9qWcqrmX6BpjJ3QZR/VenWRIDcWPDYPV2o=
Subject key identifier: 43:68:46:DD:6B:A0:93:6E:7A:C5:F2:A0:D7:09:1A:E8:36:2D:42:74
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 2F
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q2hG3Wugk256xfKg1wka6DYtQnQ.roa
Signing time: Mon 01 Nov 2021 01:28:28 +0000
ROA not before: Mon 01 Nov 2021 01:28:28 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:28 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=436846DD6BA0936E7AC5F2A0D7091AE8362D4274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:be:82:37:ad:bb:82:52:e8:fc:72:00:52:2b:
90:6b:35:e7:80:b1:3d:83:a7:2b:70:65:ca:49:32:
b9:ec:2e:98:0c:8f:db:81:8b:f3:67:b1:44:d6:19:
fd:c4:f6:3d:f5:f6:0b:ef:d6:90:43:81:54:6e:b9:
86:24:eb:4f:fd:eb:04:36:02:d6:9a:02:88:88:76:
05:2b:82:49:cd:54:7f:f5:b9:81:d7:ba:64:a0:c3:
f4:b7:ee:00:2f:15:68:f1:4c:b7:5b:3d:e2:7f:00:
99:53:e7:72:43:75:25:88:30:6e:5c:d7:52:87:85:
cc:dc:ba:82:22:b5:10:13:36:99:b0:a3:ac:30:98:
c0:2c:2e:1c:6f:4f:e8:df:17:f5:80:65:d8:c8:0d:
19:3a:ec:a0:a3:b1:fb:e8:0d:8d:58:52:18:9e:6a:
be:a4:46:97:eb:65:5b:8c:0e:ca:1f:00:8b:e3:9a:
55:66:ba:a6:e1:20:4d:db:5b:83:63:c1:aa:2a:9f:
7a:d7:8d:16:4f:d6:f7:e2:6c:69:84:d3:fb:41:be:
11:7c:72:e3:68:e4:47:04:d5:fa:6c:d3:52:ff:b9:
9b:a9:f5:7b:72:ba:d1:d3:ec:28:81:5b:fc:f4:df:
e2:86:0f:46:0f:a1:bf:11:97:01:79:a1:a5:30:28:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:46:DD:6B:A0:93:6E:7A:C5:F2:A0:D7:09:1A:E8:36:2D:42:74
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q2hG3Wugk256xfKg1wka6DYtQnQ.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.176.0/21
Signature Algorithm: sha256WithRSAEncryption
65:bf:73:fa:6f:14:c6:2f:84:c6:dc:47:c1:de:fd:06:d9:db:
fa:8d:82:89:e2:ec:1a:4c:df:9f:9e:46:71:29:e8:9c:0d:df:
ab:d8:2a:3b:07:d7:8a:fb:e3:a1:fe:a7:ff:7f:63:4e:f9:bc:
62:7a:2a:e4:0c:f2:39:26:17:9c:1f:3e:7c:91:5a:60:2a:1f:
ee:ec:d9:3e:1d:dc:a2:71:b5:fb:ad:32:ce:dc:5b:74:27:67:
3f:fb:5a:dd:1c:5f:6d:ec:ad:f7:b1:ae:d8:44:18:b9:1a:cc:
2d:ad:34:d3:8c:82:75:e7:06:5e:c3:81:a9:70:e4:90:a5:1f:
9d:5b:39:5a:9e:e2:bc:e0:1d:2a:38:a3:d6:45:00:41:bb:75:
68:61:aa:8c:dd:8b:24:c2:16:58:c6:b4:51:f7:93:b8:fc:cb:
f6:21:ed:b3:c0:f8:f3:08:70:29:6f:7b:3a:d3:a6:1d:f4:26:
46:19:6e:f1:ed:fd:4c:96:31:fc:28:c8:88:a7:fc:00:d4:83:
05:c3:58:f2:17:86:34:f4:b5:e1:73:3d:6c:ce:e0:49:cb:10:
4b:c1:de:c7:2f:fb:cd:8f:55:b7:94:3e:89:82:e3:88:ff:ba:
99:e8:99:17:f6:6e:5f:67:49:d1:b5:a5:51:38:7b:3d:ae:38:
e0:8e:a9:f8
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5
NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTIxMTEwMTAx
MjgyOFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDM2ODQ2REQ2QkEwOTM2
RTdBQzVGMkEwRDcwOTFBRTgzNjJENDI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPe+gjetu4JS6PxyAFIrkGs154CxPYOnK3BlykkyuewumAyP24GL
82exRNYZ/cT2PfX2C+/WkEOBVG65hiTrT/3rBDYC1poCiIh2BSuCSc1Uf/W5gde6
ZKDD9LfuAC8VaPFMt1s94n8AmVPnckN1JYgwblzXUoeFzNy6giK1EBM2mbCjrDCY
wCwuHG9P6N8X9YBl2MgNGTrsoKOx++gNjVhSGJ5qvqRGl+tlW4wOyh8Ai+OaVWa6
puEgTdtbg2PBqiqfeteNFk/W9+JsaYTT+0G+EXxy42jkRwTV+mzTUv+5m6n1e3K6
0dPsKIFb/PTf4oYPRg+hvxGXAXmhpTAoFVECAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBRDaEbda6CTbnrF8qDXCRroNi1CdDAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B
SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5
cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9RMmhHM1d1Z2syNTZ4ZktnMXdrYTZEWXRRblEucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDnUGwMA0GCSqGSIb3DQEBCwUAA4IBAQBlv3P6
bxTGL4TG3EfB3v0G2dv6jYKJ4uwaTN+fnkZxKeicDd+r2Co7B9eK++Oh/qf/f2NO
+bxieirkDPI5JhecHz58kVpgKh/u7Nk+HdyicbX7rTLO3Ft0J2c/+1rdHF9t7K33
sa7YRBi5GswtrTTTjIJ15wZew4GpcOSQpR+dWzlanuK84B0qOKPWRQBBu3VoYaqM
3YskwhZYxrRR95O4/Mv2Ie2zwPjzCHApb3s606Yd9CZGGW7x7f1MljH8KMiIp/wA
1IMFw1jyF4Y09LXhcz1szuBJyxBLwd7HL/vNj1W3lD6JguOI/7qZ6JkX9m5fZ0nR
taVROHs9rjjgjqn4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org