Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KGhj3Bsd4pjzKTSk8SD0qsOS2TQ.roa
File: KGhj3Bsd4pjzKTSk8SD0qsOS2TQ.roa (raw, json)
Hash identifier: AxunhYRGHnJ3dkpMoQ09WqVlSAhsFzNZWDKO/hSTcCI=
Subject key identifier: 28:68:63:DC:1B:1D:E2:98:F3:29:34:A4:F1:20:F4:AA:C3:92:D9:34
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: C1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KGhj3Bsd4pjzKTSk8SD0qsOS2TQ.roa
Signing time: Mon 24 Oct 2022 04:49:01 +0000
ROA not before: Mon 24 Oct 2022 04:49:01 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 4721
IP address blocks: 220.208.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 24 04:49:01 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=286863DC1B1DE298F32934A4F120F4AAC392D934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:70:28:91:32:df:f4:8e:dc:74:bd:bf:af:
f0:ee:be:ea:7e:46:ea:be:05:d0:84:67:5e:3c:d5:
7e:e0:5f:40:f3:5d:3b:3b:d5:46:26:5b:23:28:61:
98:28:ca:b5:af:5c:49:e9:55:15:63:75:78:4d:92:
8c:e1:f0:6e:bf:27:4c:6e:8b:d1:2a:d1:8d:b1:0c:
1d:64:4a:d6:d2:54:5f:57:db:33:72:91:9c:b6:42:
68:ff:19:33:74:00:85:35:4e:d6:6f:96:5d:85:85:
f1:e8:74:dd:c5:aa:3f:87:96:d8:15:72:c7:16:9e:
5a:96:ab:db:18:8b:1e:be:5c:cc:6c:67:b5:bd:0c:
7e:9e:75:f0:65:ba:60:47:d4:fb:ee:76:b7:fa:cb:
b7:8e:24:80:2e:d6:2e:05:7b:78:da:1f:e2:8d:da:
e2:95:4a:2e:71:80:28:8c:22:d3:48:5b:c2:57:3a:
a4:1b:b9:cd:f2:1a:87:99:e9:50:91:0d:f9:58:81:
9a:1d:73:4e:16:2f:9d:78:7e:38:f4:05:c5:3a:b0:
0f:06:e9:f6:ce:7d:49:a6:22:5d:be:f1:38:79:22:
78:7e:95:5c:2f:ed:83:8e:94:76:e8:93:6f:63:f0:
de:a5:a9:ef:99:66:98:f6:3c:48:2a:93:06:d1:3a:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:63:DC:1B:1D:E2:98:F3:29:34:A4:F1:20:F4:AA:C3:92:D9:34
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KGhj3Bsd4pjzKTSk8SD0qsOS2TQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:1f:bc:c5:32:27:9a:f5:73:a4:37:c2:23:f7:8e:e3:9e:24:
52:54:97:0c:1b:06:62:4c:7c:bd:fa:f9:c8:3d:da:18:12:6a:
6e:ba:ad:81:17:b4:74:40:cd:1a:58:68:92:4e:7c:d6:1a:2d:
8c:13:43:e7:93:f0:ab:e1:28:f1:0b:a6:28:51:92:b7:e5:06:
2d:f8:8c:99:df:a3:81:26:4f:3d:82:10:36:47:12:9f:4c:e2:
c0:b9:13:aa:ac:82:14:ab:7d:5b:3b:a3:52:55:b7:d4:4f:8a:
5e:81:99:37:23:99:ff:b0:f6:c9:6c:e8:4d:28:21:68:5f:7f:
25:cf:ae:c1:cc:40:75:eb:74:04:fb:5f:e2:90:cb:db:e8:3c:
38:02:f1:b7:38:62:e0:d1:ce:b4:be:ef:1f:fb:95:56:85:0d:
58:b9:f8:19:27:33:e0:e0:8f:21:f1:30:c0:3e:33:d6:8a:f9:
b7:6a:89:d0:91:71:d9:eb:81:bd:6d:27:26:e9:8b:20:2d:65:
3a:21:d6:1c:88:6f:1a:8b:14:52:67:5a:40:c7:e9:58:76:73:
81:fe:f7:e5:02:b7:7c:ff:d2:a1:c6:b2:b5:c2:2d:98:18:f7:
b4:01:84:cf:01:03:58:70:3d:97:6a:9d:96:9e:7b:4b:95:35:
de:8d:dc:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
NDQ5MDFaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4Njg2M0RDMUIxREUy
OThGMzI5MzRBNEYxMjBGNEFBQzM5MkQ5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXWXAokTLf9I7cdL2/r/Duvup+Ruq+BdCEZ1481X7gX0DzXTs7
1UYmWyMoYZgoyrWvXEnpVRVjdXhNkozh8G6/J0xui9Eq0Y2xDB1kStbSVF9X2zNy
kZy2Qmj/GTN0AIU1TtZvll2FhfHodN3Fqj+HltgVcscWnlqWq9sYix6+XMxsZ7W9
DH6edfBlumBH1Pvudrf6y7eOJIAu1i4Fe3jaH+KN2uKVSi5xgCiMItNIW8JXOqQb
uc3yGoeZ6VCRDflYgZodc04WL514fjj0BcU6sA8G6fbOfUmmIl2+8Th5Inh+lVwv
7YOOlHbok29j8N6lqe+ZZpj2PEgqkwbROqt3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKGhj3Bsd4pjzKTSk8SD0qsOS2TQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0tHaGozQnNkNHBqektUU2s4U0QwcXNPUzJUUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbc0EAwDQYJKoZIhvcNAQELBQADggEBAKkfvMUyJ5r1c6Q3wiP3juOeJFJU
lwwbBmJMfL36+cg92hgSam66rYEXtHRAzRpYaJJOfNYaLYwTQ+eT8KvhKPELpihR
krflBi34jJnfo4EmTz2CEDZHEp9M4sC5E6qsghSrfVs7o1JVt9RPil6BmTcjmf+w
9sls6E0oIWhffyXPrsHMQHXrdAT7X+KQy9voPDgC8bc4YuDRzrS+7x/7lVaFDVi5
+BknM+DgjyHxMMA+M9aK+bdqidCRcdnrgb1tJybpiyAtZToh1hyIbxqLFFJnWkDH
6Vh2c4H+9+UCt3z/0qHGsrXCLZgY97QBhM8BA1hwPZdqnZaee0uVNd6N3HE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org