Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/XN8-jXNyi183Yk7RZRwzAfWZzeM.roa
File: XN8-jXNyi183Yk7RZRwzAfWZzeM.roa (raw, json)
Hash identifier: CL87slkYV1cRLYM1liGcd18FgbkzT1v6sXQnVQ6L7Zs=
Subject key identifier: 5C:DF:3E:8D:73:72:8B:5F:37:62:4E:D1:65:1C:33:01:F5:99:CD:E3
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 2F
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/XN8-jXNyi183Yk7RZRwzAfWZzeM.roa
Signing time: Mon 01 May 2023 01:29:28 +0000
ROA not before: Mon 01 May 2023 01:29:28 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 23778
IP address blocks: 211.19.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: May 1 01:29:28 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=5CDF3E8D73728B5F37624ED1651C3301F599CDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:b7:5f:4d:ee:25:8a:ff:f4:7c:b9:05:06:
17:d8:29:ba:8a:62:a0:6e:e1:a6:24:cf:2c:45:ed:
36:6d:09:99:53:26:9b:23:84:50:da:56:b9:6d:5f:
05:21:53:2b:80:61:42:30:01:af:60:c8:d9:24:b1:
61:86:09:c1:de:99:a7:a9:db:de:53:ae:eb:c8:b8:
5d:82:05:61:97:65:cf:98:0f:4c:7f:5d:c8:3c:37:
ee:3f:0d:a0:1a:59:92:46:57:cd:a8:37:0e:53:4b:
ea:94:95:8f:80:35:7b:34:e0:64:b6:cd:8d:70:97:
9a:d2:bf:83:1f:72:3a:2f:f2:48:c5:6d:03:b5:94:
c2:93:0e:bb:e6:4d:bd:22:31:89:e5:46:28:77:f5:
47:8c:f1:47:05:96:ed:61:eb:cc:fa:c8:9b:50:12:
de:96:74:13:65:3c:e7:71:8f:d6:b1:3c:04:45:f4:
24:dc:60:c7:76:42:7b:13:de:38:0c:e9:ef:45:93:
f0:1e:45:ef:af:a7:87:73:80:8c:46:fc:e3:a4:a8:
b4:46:94:83:1f:d1:d8:d3:77:2a:21:0f:07:52:73:
b2:cc:c9:54:2a:b8:9d:5d:6f:68:ef:4d:d1:68:d5:
9c:1d:1f:8a:3a:6e:12:46:53:23:34:5b:d7:0f:39:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:3E:8D:73:72:8B:5F:37:62:4E:D1:65:1C:33:01:F5:99:CD:E3
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/XN8-jXNyi183Yk7RZRwzAfWZzeM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.19.196.0/22
Signature Algorithm: sha256WithRSAEncryption
61:76:f3:19:af:a2:e8:fe:d9:94:0b:00:5d:bb:6c:7c:28:3b:
c7:68:ba:92:2e:b0:bd:27:bc:a7:40:6b:e1:41:a9:cb:6f:ca:
4d:73:c1:93:e6:b2:cb:f7:61:51:c0:a3:51:e2:31:e7:c2:4d:
b9:bd:00:21:10:13:2b:ee:e3:2e:e7:3c:64:34:58:46:c4:38:
4a:9a:b5:a3:cd:7d:dd:ea:3c:d1:5b:ed:f5:df:14:ad:18:e8:
a8:cc:58:e7:d3:78:fb:05:73:0c:20:85:72:27:4b:21:fe:30:
bf:5b:a7:1e:63:88:b2:b2:52:89:89:91:b4:d2:e8:9e:a8:34:
62:54:21:e9:5c:77:56:bf:97:6b:38:9b:9e:b6:76:e9:02:31:
8e:ca:13:27:5e:54:6f:30:40:04:3c:13:f2:dd:31:77:ea:9e:
1d:4c:cb:0c:bf:72:3a:22:e6:6c:1c:69:d2:3a:84:49:ca:0e:
12:50:6c:f0:1c:a7:d1:8d:29:48:b9:11:ea:67:76:e0:c5:5b:
0c:af:d1:66:6f:8a:a7:ae:dd:0b:4e:50:4e:d3:35:0d:3e:ac:
96:d1:e4:49:68:81:3b:a5:d8:2a:54:e3:2b:d2:98:fb:be:89:
48:be:5b:7c:b6:28:27:e9:19:4b:be:e9:48:db:e6:d7:92:00:
df:93:32:54
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw
RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTIzMDUwMTAx
MjkyOFoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoNUNERjNFOEQ3MzcyOEI1
RjM3NjI0RUQxNjUxQzMzMDFGNTk5Q0RFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANHzt19N7iWK//R8uQUGF9gpuopioG7hpiTPLEXtNm0JmVMmmyOE
UNpWuW1fBSFTK4BhQjABr2DI2SSxYYYJwd6Zp6nb3lOu68i4XYIFYZdlz5gPTH9d
yDw37j8NoBpZkkZXzag3DlNL6pSVj4A1ezTgZLbNjXCXmtK/gx9yOi/ySMVtA7WU
wpMOu+ZNvSIxieVGKHf1R4zxRwWW7WHrzPrIm1AS3pZ0E2U853GP1rE8BEX0JNxg
x3ZCexPeOAzp70WT8B5F76+nh3OAjEb846SotEaUgx/R2NN3KiEPB1JzsszJVCq4
nV1vaO9N0WjVnB0fijpuEkZTIzRb1w85X+kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRc3z6Nc3KLXzdiTtFlHDMB9ZnN4zAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It
jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u
S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTkvWE44LWpYTnlpMTgzWWs3UlpSd3pBZldaemVNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtMTxDANBgkqhkiG9w0BAQsFAAOCAQEAYXbzGa+i6P7ZlAsAXbtsfCg7x2i6
ki6wvSe8p0Br4UGpy2/KTXPBk+ayy/dhUcCjUeIx58JNub0AIRATK+7jLuc8ZDRY
RsQ4Spq1o8193eo80Vvt9d8UrRjoqMxY59N4+wVzDCCFcidLIf4wv1unHmOIsrJS
iYmRtNLonqg0YlQh6Vx3Vr+XazibnrZ26QIxjsoTJ15UbzBABDwT8t0xd+qeHUzL
DL9yOiLmbBxp0jqEScoOElBs8Byn0Y0pSLkR6md24MVbDK/RZm+Kp67dC05QTtM1
DT6sltHkSWiBO6XYKlTjK9KY+76JSL5bfLYoJ+kZS77pSNvm15IA35MyVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org