Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ynqshOYgA-cXuR7wq-_C2aFcewg.roa
File: ynqshOYgA-cXuR7wq-_C2aFcewg.roa (raw, json)
Hash identifier: XDNVCs7Xc/mVXv2JSp2Ef7jt46BME1b/evyXssNoyT0=
Subject key identifier: CA:7A:AC:84:E6:20:03:E7:17:B9:1E:F0:AB:EF:C2:D9:A1:5C:7B:08
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 58
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ynqshOYgA-cXuR7wq-_C2aFcewg.roa
Signing time: Mon 01 Nov 2021 01:28:30 +0000
ROA not before: Mon 01 Nov 2021 01:28:30 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 124.41.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:30 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=CA7AAC84E62003E717B91EF0ABEFC2D9A15C7B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:e6:7d:29:dc:db:06:2a:21:5a:16:fa:00:
d4:74:08:8e:16:7f:ab:eb:5b:f0:8b:1d:bd:0a:52:
47:93:d4:15:7e:98:c2:fb:10:59:0b:cd:4d:5d:d0:
98:ea:5a:6f:5e:41:e2:f0:79:fa:e1:31:ae:aa:0a:
1e:46:ba:60:60:c6:36:82:9e:6a:a4:d4:53:16:8b:
62:2d:f8:ee:48:b6:a1:e2:d8:73:44:df:29:86:87:
9a:6a:ab:f1:0e:bd:99:6a:fb:6c:4c:48:17:3f:2b:
34:6e:6c:a2:68:28:8f:1c:f8:9e:4c:7d:b1:4b:a4:
e9:9d:91:4f:d9:99:15:4a:d5:c5:0b:44:21:de:91:
ef:dd:c0:c0:cc:37:39:52:3f:3c:e1:a5:3f:e2:e3:
d1:84:8a:58:bd:ef:b5:fa:a6:4f:51:80:55:0b:d0:
b3:1a:20:54:cc:a5:d2:6d:9f:c5:49:16:c5:46:d0:
f3:05:73:60:1d:c2:fe:fb:fd:04:af:cd:b7:cf:85:
8d:59:0d:c3:f9:c7:23:22:f6:ce:92:ff:c7:84:31:
00:e2:10:48:e7:c4:bd:03:d7:5d:05:f9:8a:f3:85:
3a:a0:83:e8:ec:c4:8a:af:1f:76:13:c8:92:f2:0b:
3d:17:bb:06:5e:69:3f:50:1f:ee:74:84:0d:68:7a:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:AC:84:E6:20:03:E7:17:B9:1E:F0:AB:EF:C2:D9:A1:5C:7B:08
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ynqshOYgA-cXuR7wq-_C2aFcewg.roa
sbgp-ipAddrBlock: critical
IPv4:
124.41.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2d:a4:65:02:3e:6a:61:4d:c0:27:6a:55:46:dc:87:ce:07:e9:
f1:33:85:d9:e0:c1:08:59:0d:18:2c:00:b1:0f:d8:4e:dc:72:
96:d8:13:21:d2:2b:71:69:66:a8:a6:e3:70:2a:4b:0f:39:88:
67:aa:f2:f5:13:46:a7:69:40:1f:70:13:a0:54:b1:4f:14:fc:
65:71:26:f1:2b:d0:dc:ac:91:21:23:6b:34:f7:75:52:36:db:
37:f4:67:65:aa:87:b5:e8:ff:fe:af:9f:b6:05:6f:ba:87:f5:
92:52:38:b4:5b:35:55:0b:68:b0:d1:62:10:b9:f8:72:63:f2:
a5:5b:20:49:8e:f9:81:77:58:2e:92:33:e2:66:38:2d:30:13:
31:39:11:75:f9:7a:a6:7e:70:f3:c5:75:06:a6:52:29:b8:80:
b4:f4:45:cf:e3:99:2f:7a:18:57:5f:be:2d:83:d4:8f:03:ee:
56:e3:36:ff:36:58:87:68:b6:1c:c3:ac:a0:4f:c1:64:c5:24:
4c:5b:c7:27:9b:e5:1a:1d:6a:e8:14:52:4b:6f:28:e5:ac:92:
a0:ba:bf:76:14:fc:eb:12:86:8a:fc:bd:68:2e:89:fe:e9:f8:
5c:68:90:8b:3b:2d:4e:4d:39:b6:45:3d:89:82:7e:7c:10:92:
c2:f2:ff:63
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzMFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0E3QUFDODRFNjIwMDNF
NzE3QjkxRUYwQUJFRkMyRDlBMTVDN0IwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALbM5n0p3NsGKiFaFvoA1HQIjhZ/q+tb8IsdvQpSR5PUFX6YwvsQ
WQvNTV3QmOpab15B4vB5+uExrqoKHka6YGDGNoKeaqTUUxaLYi347ki2oeLYc0Tf
KYaHmmqr8Q69mWr7bExIFz8rNG5somgojxz4nkx9sUuk6Z2RT9mZFUrVxQtEId6R
793AwMw3OVI/POGlP+Lj0YSKWL3vtfqmT1GAVQvQsxogVMyl0m2fxUkWxUbQ8wVz
YB3C/vv9BK/Nt8+FjVkNw/nHIyL2zpL/x4QxAOIQSOfEvQPXXQX5ivOFOqCD6OzE
iq8fdhPIkvILPRe7Bl5pP1Af7nSEDWh67mMCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBTKeqyE5iAD5xe5HvCr78LZoVx7CDAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi95bnFzaE9ZZ0EtY1h1Ujd3cS1fQzJhRmNld2cucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQHfCkAMA0GCSqGSIb3DQEBCwUAA4IBAQAtpGUC
PmphTcAnalVG3IfOB+nxM4XZ4MEIWQ0YLACxD9hO3HKW2BMh0itxaWaopuNwKksP
OYhnqvL1E0anaUAfcBOgVLFPFPxlcSbxK9DcrJEhI2s093VSNts39Gdlqoe16P/+
r5+2BW+6h/WSUji0WzVVC2iw0WIQufhyY/KlWyBJjvmBd1gukjPiZjgtMBMxORF1
+XqmfnDzxXUGplIpuIC09EXP45kvehhXX74tg9SPA+5W4zb/NliHaLYcw6ygT8Fk
xSRMW8cnm+UaHWroFFJLbyjlrJKgur92FPzrEoaK/L1oLon+6fhcaJCLOy1OTTm2
RT2Jgn58EJLC8v9j
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org