Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/gX2DDhaMs5oqoaOYL0q0cEOZF8s.roa
File: gX2DDhaMs5oqoaOYL0q0cEOZF8s.roa (raw, json)
Hash identifier: H+YeXrWXaJ9GsMVkXCtx5MQkdl0IghU7uR3o7WS1fZ8=
Subject key identifier: 81:7D:83:0E:16:8C:B3:9A:2A:A1:A3:98:2F:4A:B4:70:43:99:17:CB
Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial: 03
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/gX2DDhaMs5oqoaOYL0q0cEOZF8s.roa
Signing time: Thu 21 Jul 2022 04:14:33 +0000
ROA not before: Thu 21 Jul 2022 04:14:33 +0000
ROA not after: Fri 21 Jul 2023 02:05:48 +0000
asID: 23808
IP address blocks: 202.140.192.0/19 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Validity
Not Before: Jul 21 04:14:33 2022 GMT
Not After : Jul 21 02:05:48 2023 GMT
Subject: CN=817D830E168CB39A2AA1A3982F4AB470439917CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:eb:d5:91:60:c3:bd:96:02:39:57:61:cc:
65:43:6c:ed:ee:7a:b0:09:4c:bf:04:b1:81:41:90:
8c:4a:6c:7f:9e:c7:0d:cf:81:52:ac:50:b2:24:52:
a7:6d:da:b4:78:c1:7f:f5:e9:be:c9:ae:00:c2:29:
ca:95:8a:54:89:8c:a2:67:c0:46:e5:91:d7:8b:f5:
c8:a1:5d:89:bf:1c:5a:25:a0:13:6f:5b:80:05:1d:
5a:e1:27:7b:c8:30:82:41:4a:ba:ad:f4:fa:03:9b:
b6:7a:73:94:fc:ce:4e:77:72:3b:79:16:75:a1:5c:
f0:79:77:43:e9:02:4a:df:33:36:da:24:f8:9e:2a:
b6:07:ba:60:50:89:21:c2:05:d6:17:10:33:bc:ba:
11:ca:e4:f5:42:8c:c2:f4:19:05:aa:2f:ff:9f:ea:
a5:22:02:0c:7e:8c:98:cc:d9:8d:20:92:34:49:55:
78:63:e9:db:e3:39:53:71:e2:1d:ae:cf:c2:86:0f:
40:db:32:6b:da:39:e7:e1:b0:ea:4c:6f:43:c7:19:
cf:ce:ce:ea:3e:02:4c:47:e5:ea:b8:62:b0:50:5c:
45:d5:a3:98:f5:15:8d:2f:d9:df:92:bd:53:c5:d0:
9c:72:47:40:d8:0e:49:47:52:6a:4e:0c:5f:02:74:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:83:0E:16:8C:B3:9A:2A:A1:A3:98:2F:4A:B4:70:43:99:17:CB
X509v3 Authority Key Identifier:
keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/gX2DDhaMs5oqoaOYL0q0cEOZF8s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.140.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:49:9a:32:8a:e7:a7:20:dd:7b:06:ca:fa:ca:7d:67:31:2d:
2a:0c:e6:cc:4b:4f:23:25:41:c2:2d:88:7a:75:92:6e:2c:d1:
e8:2b:27:65:f2:52:84:b7:2d:fe:cd:fa:81:55:2f:c9:3b:8a:
1f:91:98:21:65:db:75:66:3a:3a:2e:47:82:31:de:44:3f:22:
6d:fa:46:41:21:f1:3b:d3:5a:33:35:2d:87:ab:e0:ac:c6:fb:
96:78:88:40:c0:ca:d1:2c:d5:82:20:89:58:51:2a:03:12:b8:
50:20:19:e4:50:1e:94:ff:09:54:99:75:32:70:83:4b:8d:c9:
7d:4b:29:2a:55:0c:1e:2e:a1:c5:4a:26:46:75:84:5d:23:db:
6c:37:f1:ea:47:d5:b5:f6:1a:7f:42:1b:14:cd:b1:d4:22:43:
0a:01:c8:50:3e:3b:b0:d7:04:e0:0f:28:22:83:04:27:78:46:
64:3b:2f:fb:82:84:1b:d1:2e:88:d6:34:09:5c:6e:aa:a3:4f:
d0:dd:16:90:95:36:63:89:b6:4d:7a:17:65:a9:02:ae:32:fe:
db:11:88:4c:fa:c3:2a:3a:91:dd:cf:06:ae:e4:7a:8d:bc:7e:
2a:d5:a3:f8:b3:98:32:7e:56:2d:b0:db:c6:03:87:50:0c:45:
2d:96:8b:c5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0
MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTIyMDcyMTA0
MTQzM1oXDTIzMDcyMTAyMDU0OFowMzExMC8GA1UEAxMoODE3RDgzMEUxNjhDQjM5
QTJBQTFBMzk4MkY0QUI0NzA0Mzk5MTdDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9069WRYMO9lgI5V2HMZUNs7e56sAlMvwSxgUGQjEpsf57HDc+B
UqxQsiRSp23atHjBf/XpvsmuAMIpypWKVImMomfARuWR14v1yKFdib8cWiWgE29b
gAUdWuEne8gwgkFKuq30+gObtnpzlPzOTndyO3kWdaFc8Hl3Q+kCSt8zNtok+J4q
tge6YFCJIcIF1hcQM7y6Ecrk9UKMwvQZBaov/5/qpSICDH6MmMzZjSCSNElVeGPp
2+M5U3HiHa7PwoYPQNsya9o55+Gw6kxvQ8cZz87O6j4CTEfl6rhisFBcRdWjmPUV
jS/Z35K9U8XQnHJHQNgOSUdSak4MXwJ0Pk8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSBfYMOFoyzmiqho5gvSrRwQ5kXyzAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO
uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL
UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODQvZ1gyRERoYU1zNW9xb2FPWUwwcTBjRU9aRjhzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcqMwDANBgkqhkiG9w0BAQsFAAOCAQEAnkmaMornpyDdewbK+sp9ZzEtKgzm
zEtPIyVBwi2IenWSbizR6CsnZfJShLct/s36gVUvyTuKH5GYIWXbdWY6Oi5HgjHe
RD8ibfpGQSHxO9NaMzUth6vgrMb7lniIQMDK0SzVgiCJWFEqAxK4UCAZ5FAelP8J
VJl1MnCDS43JfUspKlUMHi6hxUomRnWEXSPbbDfx6kfVtfYaf0IbFM2x1CJDCgHI
UD47sNcE4A8oIoMEJ3hGZDsv+4KEG9EuiNY0CVxuqqNP0N0WkJU2Y4m2TXoXZakC
rjL+2xGITPrDKjqR3c8GruR6jbx+KtWj+LOYMn5WLbDbxgOHUAxFLZaLxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org