Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/S2om04yyxO1nT9wq2VfVEXYmieU.roa
File: S2om04yyxO1nT9wq2VfVEXYmieU.roa (raw, json)
Hash identifier: e6iJLX+QFIQzGQis60SvbJQCRN2Y4dstyw4d+MUPcJw=
Subject key identifier: 4B:6A:26:D3:8C:B2:C4:ED:67:4F:DC:2A:D9:57:D5:11:76:26:89:E5
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 8B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/S2om04yyxO1nT9wq2VfVEXYmieU.roa
Signing time: Wed 29 Dec 2021 09:18:39 +0000
ROA not before: Wed 29 Dec 2021 09:18:39 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 32787
IP address blocks: 210.130.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 29 09:18:39 2021 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=4B6A26D38CB2C4ED674FDC2AD957D511762689E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:80:b1:9a:99:2e:c9:50:6e:d9:5f:a4:48:
06:57:e1:0d:64:0b:05:6f:6e:12:c9:69:87:23:0e:
d2:85:42:10:12:3b:ca:8d:e1:13:d9:0e:5d:2b:07:
b5:8b:15:67:0a:93:ae:c7:90:48:18:8f:18:ed:6a:
24:76:a6:cf:0d:60:8e:56:15:1b:4e:46:90:af:61:
ea:35:a0:eb:50:64:fe:8d:6a:47:9d:a7:d5:ec:16:
ee:dd:98:18:f6:c3:9c:6e:72:54:ac:62:e6:f9:81:
23:c6:e4:3f:a9:28:48:9e:df:ef:dc:01:1f:fc:54:
c6:13:5f:49:4a:77:0d:db:36:28:ac:8c:0e:ad:02:
a2:39:46:8b:08:0e:d1:46:30:15:92:d0:ab:c5:b6:
92:0e:d6:62:a9:ac:dc:a0:99:9c:6d:4c:e9:49:c9:
e7:db:c7:19:8a:49:25:75:81:41:87:24:47:2c:30:
22:5f:e5:77:c8:37:1d:21:a8:c6:73:e0:e7:38:30:
a2:b5:2e:20:34:73:4d:8d:1c:17:20:2f:bf:cb:d3:
40:fb:3d:44:dd:35:f9:ee:64:8c:5b:ff:71:c5:91:
72:d5:64:e9:c3:21:23:91:42:33:11:f7:0a:ae:19:
9a:17:e9:a7:58:52:3b:ad:05:14:df:ea:a6:39:c8:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:26:D3:8C:B2:C4:ED:67:4F:DC:2A:D9:57:D5:11:76:26:89:E5
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/S2om04yyxO1nT9wq2VfVEXYmieU.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.224.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0a:77:2d:09:46:f3:93:0b:43:c7:cc:81:3e:29:e4:b5:8b:
1c:e4:0d:8c:bb:2b:ff:02:62:d0:a4:83:96:39:75:29:4e:46:
a1:cd:3b:00:49:92:e6:c9:7c:a4:be:1d:32:5c:c7:fd:53:5c:
5c:73:c3:aa:80:77:ea:02:8a:30:9b:80:17:df:35:88:7a:e4:
99:ab:04:12:ff:4b:af:2d:c2:07:21:9e:57:1f:bb:0b:6a:a5:
85:52:59:5d:7f:97:82:f8:42:10:cf:a7:82:43:12:6a:bc:0d:
b1:3f:48:54:fb:f1:78:0f:9b:cd:ae:d1:ed:0c:c1:fa:d5:10:
ab:e1:8c:74:9a:c3:6d:2c:0d:50:c4:fd:5e:39:25:14:58:93:
da:f7:8f:9b:02:05:73:1d:65:69:fe:bc:ae:b4:ab:f2:7d:f6:
39:e4:6a:aa:af:be:50:15:8d:3c:1c:c3:6c:33:b1:cd:a8:34:
b9:6c:ed:f8:c7:dd:ca:f5:fb:3c:d1:09:11:9c:98:e5:ae:18:
06:b9:a4:ee:11:23:8d:b0:5a:78:80:5d:6c:9a:8b:29:5b:3d:
5c:ed:8a:3b:88:7d:4e:16:bd:68:64:a3:22:5b:cf:51:b3:8b:
b2:22:4a:39:16:5a:60:52:48:f4:aa:e8:8b:f9:1e:cb:04:3e:
38:4a:4a:fa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMTEyMjkw
OTE4MzlaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCNkEyNkQzOENCMkM0
RUQ2NzRGREMyQUQ5NTdENTExNzYyNjg5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2CoCxmpkuyVBu2V+kSAZX4Q1kCwVvbhLJaYcjDtKFQhASO8qN
4RPZDl0rB7WLFWcKk67HkEgYjxjtaiR2ps8NYI5WFRtORpCvYeo1oOtQZP6Naked
p9XsFu7dmBj2w5xuclSsYub5gSPG5D+pKEie3+/cAR/8VMYTX0lKdw3bNiisjA6t
AqI5RosIDtFGMBWS0KvFtpIO1mKprNygmZxtTOlJyefbxxmKSSV1gUGHJEcsMCJf
5XfINx0hqMZz4Oc4MKK1LiA0c02NHBcgL7/L00D7PUTdNfnuZIxb/3HFkXLVZOnD
ISORQjMR9wquGZoX6adYUjutBRTf6qY5yGopAgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUS2om04yyxO1nT9wq2VfVEXYmieUwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvUzJvbTA0eXl4TzFuVDl3cTJWZlZFWFltaWVVLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEANKC4DANBgkqhkiG9w0BAQsFAAOCAQEAkQp3
LQlG85MLQ8fMgT4p5LWLHOQNjLsr/wJi0KSDljl1KU5Goc07AEmS5sl8pL4dMlzH
/VNcXHPDqoB36gKKMJuAF981iHrkmasEEv9Lry3CByGeVx+7C2qlhVJZXX+XgvhC
EM+ngkMSarwNsT9IVPvxeA+bza7R7QzB+tUQq+GMdJrDbSwNUMT9XjklFFiT2veP
mwIFcx1laf68rrSr8n32OeRqqq++UBWNPBzDbDOxzag0uWzt+MfdyvX7PNEJEZyY
5a4YBrmk7hEjjbBaeIBdbJqLKVs9XO2KO4h9Tha9aGSjIlvPUbOLsiJKORZaYFJI
9Kroi/keywQ+OEpK+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org