Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/aWKAhwZdwQmZVmPMSFjmjScV6F4.roa
File: aWKAhwZdwQmZVmPMSFjmjScV6F4.roa (raw, json)
Hash identifier: 90CdxrFMkCV0pqNT1V7NhON5WRsJqHuKsA0jg4XiD3o=
Subject key identifier: 69:62:80:87:06:5D:C1:09:99:56:63:CC:48:58:E6:8D:27:15:E8:5E
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 33
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/aWKAhwZdwQmZVmPMSFjmjScV6F4.roa
Signing time: Wed 01 Dec 2021 01:28:56 +0000
ROA not before: Wed 01 Dec 2021 01:28:56 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 9621
IP address blocks: 218.40.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Dec 1 01:28:56 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=69628087065DC109995663CC4858E68D2715E85E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:e8:b3:ce:5e:69:f1:6e:1f:bb:ca:6b:3d:
d7:15:90:5d:24:ce:66:33:1a:17:a0:bb:1c:64:d3:
a1:c3:ff:bf:8f:35:8b:ca:51:15:6c:a0:45:8a:75:
d4:38:a0:e1:37:fb:96:7a:2c:7e:38:6d:21:85:b8:
5d:cd:8d:9a:9d:b6:79:e1:e0:1b:8c:69:a1:56:5f:
76:2a:f0:f9:c3:8e:59:15:2d:fc:7f:46:1f:37:86:
c9:51:9f:48:8b:0a:51:bb:9f:f9:d0:9c:d7:8c:f6:
06:04:b7:1c:06:ac:6b:7f:e4:0a:10:36:03:cf:00:
5b:fc:31:03:c8:1d:cb:7c:c6:74:e7:44:1f:1c:59:
94:25:5f:a2:11:91:15:c0:cd:80:0b:bd:4a:f6:45:
7d:b3:06:d9:8f:ca:21:eb:a7:d2:ee:f9:8f:7e:f8:
11:b3:12:92:e7:9f:b7:f3:02:02:41:b0:1a:c1:c3:
2e:0f:e8:33:c7:3c:d6:70:42:37:5d:f3:54:24:0d:
0d:f0:1c:97:4a:38:f2:a5:cc:b6:e2:7f:92:be:ce:
9f:17:bd:28:2f:6f:72:e2:42:3b:64:b0:b0:8d:1a:
37:6f:bd:67:43:9c:4a:a7:d9:5c:7c:0b:66:54:55:
47:ae:ae:47:b4:32:2a:17:36:2d:08:f4:34:9a:91:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:80:87:06:5D:C1:09:99:56:63:CC:48:58:E6:8D:27:15:E8:5E
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/aWKAhwZdwQmZVmPMSFjmjScV6F4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.176.0/20
Signature Algorithm: sha256WithRSAEncryption
71:dd:71:ee:5d:56:c0:fe:00:8a:e5:1c:c2:00:dd:11:c8:9a:
20:6d:03:95:91:bc:9d:e1:88:e3:c3:c1:ed:e8:23:8e:9f:98:
00:fb:e7:31:0d:60:e4:ec:66:93:49:5a:f3:d7:68:2c:17:c0:
bb:59:e5:95:bd:41:4a:9f:4d:5d:17:e1:08:ef:f5:df:ca:b0:
2c:31:7e:82:41:75:63:5a:14:2c:a5:4c:90:fc:0d:0b:2e:24:
d0:8c:81:70:27:a3:d7:3c:33:7c:01:c3:9f:32:d6:05:76:51:
72:16:de:a8:cc:dc:61:87:ff:28:76:92:af:33:fc:f6:1f:38:
a6:90:b6:79:ed:d0:2e:80:43:a6:fb:d3:0e:2b:7a:9b:2e:6c:
d2:b1:bf:3c:5b:a0:7b:49:b2:9a:84:f8:54:c0:b9:e6:3b:ea:
6e:a4:fd:d0:63:3e:71:5f:3f:4a:54:80:d1:b4:15:7d:42:cf:
d3:8b:ab:4b:90:cc:8d:ba:28:93:80:a8:da:c6:61:04:e4:fb:
a9:e0:e1:e3:fa:54:0d:48:9b:24:04:53:70:0c:a6:cd:65:1a:
29:1c:66:2f:a3:33:c6:82:27:fc:bd:2e:2c:ef:5a:8f:1b:fa:
f5:45:8e:1a:d1:e2:c4:44:8f:74:4a:f9:e4:b2:3f:87:4c:7b:
eb:af:e6:6f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4
MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIxMTIwMTAx
Mjg1NloXDTIyMTExNTAxMzAwMVowMzExMC8GA1UEAxMoNjk2MjgwODcwNjVEQzEw
OTk5NTY2M0NDNDg1OEU2OEQyNzE1RTg1RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANfW6LPOXmnxbh+7yms91xWQXSTOZjMaF6C7HGTTocP/v481i8pR
FWygRYp11Dig4Tf7lnosfjhtIYW4Xc2Nmp22eeHgG4xpoVZfdirw+cOOWRUt/H9G
HzeGyVGfSIsKUbuf+dCc14z2BgS3HAasa3/kChA2A88AW/wxA8gdy3zGdOdEHxxZ
lCVfohGRFcDNgAu9SvZFfbMG2Y/KIeun0u75j374EbMSkueft/MCAkGwGsHDLg/o
M8c81nBCN13zVCQNDfAcl0o48qXMtuJ/kr7Onxe9KC9vcuJCO2SwsI0aN2+9Z0Oc
SqfZXHwLZlRVR66uR7QyKhc2LQj0NJqRpxUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRpYoCHBl3BCZlWY8xIWOaNJxXoXjAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn
4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ
TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84OTcvYVdLQWh3WmR3UW1aVm1QTVNGam1qU2NWNkY0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNoosDANBgkqhkiG9w0BAQsFAAOCAQEA
cd1x7l1WwP4AiuUcwgDdEciaIG0DlZG8neGI48PB7egjjp+YAPvnMQ1g5Oxmk0la
89doLBfAu1nllb1BSp9NXRfhCO/138qwLDF+gkF1Y1oULKVMkPwNCy4k0IyBcCej
1zwzfAHDnzLWBXZRchbeqMzcYYf/KHaSrzP89h84ppC2ee3QLoBDpvvTDit6my5s
0rG/PFuge0mymoT4VMC55jvqbqT90GM+cV8/SlSA0bQVfULP04urS5DMjbook4Co
2sZhBOT7qeDh4/pUDUibJARTcAymzWUaKRxmL6MzxoIn/L0uLO9ajxv69UWOGtHi
xESPdEr55LI/h0x766/mbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org