Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/el4DQ_HE-k5nrWmjjt-2iBlMxgk.roa
File: el4DQ_HE-k5nrWmjjt-2iBlMxgk.roa (raw, json)
Hash identifier: yxAwE8RTCyPnsX2rPlrUAOE3ScJHta/Z53X9DHz+twU=
Subject key identifier: 7A:5E:03:43:F1:C4:FA:4E:67:AD:69:A3:8E:DF:B6:88:19:4C:C6:09
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 29
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/el4DQ_HE-k5nrWmjjt-2iBlMxgk.roa
Signing time: Mon 01 May 2023 01:29:26 +0000
ROA not before: Mon 01 May 2023 01:29:26 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 23778
IP address blocks: 103.18.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: May 1 01:29:26 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=7A5E0343F1C4FA4E67AD69A38EDFB688194CC609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:3a:6c:0a:c0:11:83:61:31:07:fc:b5:ea:
5f:d6:99:21:8a:bc:27:8a:ac:4e:50:e7:97:16:4f:
0c:0d:55:34:0d:11:60:70:75:0f:dc:1d:f2:0a:ad:
15:09:b7:08:67:47:42:7a:25:03:ae:5d:c9:d4:62:
b2:1d:13:16:44:22:c2:cf:db:0d:0e:2b:bf:df:b3:
68:1f:58:da:e6:40:b3:3c:93:aa:8f:86:da:0f:5e:
24:b4:5d:07:54:36:d5:c1:56:a0:68:1e:4c:ba:7b:
a2:d1:51:1c:13:50:0d:84:36:59:aa:26:5b:3a:b8:
5a:52:ec:fa:3c:cf:b4:bd:55:0d:63:bb:0d:24:3d:
a2:b2:b6:55:4a:ae:27:45:bb:29:aa:cf:13:51:ae:
ba:89:f9:3f:0b:20:c0:4c:e5:4a:f6:c3:35:e0:7c:
3f:8b:4e:26:8b:06:86:49:d0:57:ff:29:66:cc:d2:
24:9d:4d:da:bd:ff:36:e8:fa:f3:c1:b8:97:88:d7:
3d:2b:c9:19:b5:45:48:e0:d9:12:f5:ed:5c:59:57:
dd:29:cc:bc:5f:a2:a2:40:46:fa:14:2c:5a:48:6a:
89:b5:fe:c6:1d:20:b3:df:9c:36:ab:33:75:28:56:
d2:b6:a2:0d:9c:d4:f5:0d:6e:aa:3b:73:b2:0e:58:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:03:43:F1:C4:FA:4E:67:AD:69:A3:8E:DF:B6:88:19:4C:C6:09
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/el4DQ_HE-k5nrWmjjt-2iBlMxgk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:31:e2:6e:90:6b:ed:f1:d7:3b:e2:d4:79:9d:9d:33:21:93:
d6:6e:a2:41:99:2e:22:93:6f:4f:cb:88:d9:db:90:a9:a9:58:
82:52:a1:91:7d:cb:d9:ce:1c:4c:e1:b2:cc:bd:a2:75:91:60:
f5:a4:bf:c1:8a:6b:88:58:27:78:5f:b1:59:b5:a8:44:87:ff:
6f:dc:d7:23:24:00:fa:32:18:c6:b0:66:a2:1c:bb:da:b4:70:
82:9d:cc:54:ae:a7:80:a0:8f:37:5a:75:1c:68:a0:83:69:21:
e5:0f:48:78:e1:98:88:62:37:44:7c:fc:88:fd:55:91:9e:bd:
4d:d9:49:a3:11:5b:79:11:e8:e7:3c:ab:91:a0:44:e1:ad:49:
c3:23:2c:75:ca:7d:89:3e:9c:56:af:93:d4:2b:06:2e:1d:a7:
ee:6b:85:29:37:97:89:c2:10:be:75:76:2d:22:2a:ed:f4:9f:
a2:8b:63:41:80:6b:eb:7f:8e:05:f3:04:9c:54:93:dd:4f:51:
76:63:6c:de:43:2f:51:a4:fc:31:b1:f8:b0:cc:92:7b:8b:d7:
a1:a1:62:75:98:38:f3:f0:88:1a:0b:64:3c:60:cb:50:02:90:
2f:33:65:9d:49:5a:2c:c4:59:86:f4:ad:d0:4e:a8:b0:b8:34:
79:16:3a:4f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw
RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTIzMDUwMTAx
MjkyNloXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoN0E1RTAzNDNGMUM0RkE0
RTY3QUQ2OUEzOEVERkI2ODgxOTRDQzYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5cOmwKwBGDYTEH/LXqX9aZIYq8J4qsTlDnlxZPDA1VNA0RYHB1
D9wd8gqtFQm3CGdHQnolA65dydRish0TFkQiws/bDQ4rv9+zaB9Y2uZAszyTqo+G
2g9eJLRdB1Q21cFWoGgeTLp7otFRHBNQDYQ2WaomWzq4WlLs+jzPtL1VDWO7DSQ9
orK2VUquJ0W7KarPE1Guuon5PwsgwEzlSvbDNeB8P4tOJosGhknQV/8pZszSJJ1N
2r3/Nuj688G4l4jXPSvJGbVFSODZEvXtXFlX3SnMvF+iokBG+hQsWkhqibX+xh0g
s9+cNqszdShW0raiDZzU9Q1uqjtzsg5YgWsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR6XgND8cT6TmetaaOO37aIGUzGCTAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It
jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u
S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTkvZWw0RFFfSEUtazVucldtamp0LTJpQmxNeGdrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcSGDANBgkqhkiG9w0BAQsFAAOCAQEAmzHibpBr7fHXO+LUeZ2dMyGT1m6i
QZkuIpNvT8uI2duQqalYglKhkX3L2c4cTOGyzL2idZFg9aS/wYpriFgneF+xWbWo
RIf/b9zXIyQA+jIYxrBmohy72rRwgp3MVK6ngKCPN1p1HGigg2kh5Q9IeOGYiGI3
RHz8iP1VkZ69TdlJoxFbeRHo5zyrkaBE4a1JwyMsdcp9iT6cVq+T1CsGLh2n7muF
KTeXicIQvnV2LSIq7fSfootjQYBr63+OBfMEnFST3U9RdmNs3kMvUaT8MbH4sMyS
e4vXoaFidZg48/CIGgtkPGDLUAKQLzNlnUlaLMRZhvSt0E6osLg0eRY6Tw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org