Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/8Jb72rUeCGBhsLWMKY1wX8VrUg8.roa
File: 8Jb72rUeCGBhsLWMKY1wX8VrUg8.roa (raw, json)
Hash identifier: xgSzOsM/jma9gEubOGVNAd4SzHpGExOxNGXLObuI7qc=
Subject key identifier: F0:96:FB:DA:B5:1E:08:60:61:B0:B5:8C:29:8D:70:5F:C5:6B:52:0F
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 18
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/8Jb72rUeCGBhsLWMKY1wX8VrUg8.roa
Signing time: Wed 20 Apr 2022 09:07:31 +0000
ROA not before: Wed 20 Apr 2022 09:07:31 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 211.8.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:07:31 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=F096FBDAB51E086061B0B58C298D705FC56B520F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:1b:f9:d4:0f:30:3f:7e:96:96:2a:ed:cc:
2d:66:73:c0:f8:f5:76:53:cf:d9:2b:8b:e8:f3:7b:
09:d0:c0:fe:ff:e2:f3:4c:d7:eb:68:c6:f6:8d:fe:
7c:b9:c6:26:62:dd:d7:95:5a:63:87:ab:05:4c:c3:
47:4a:76:62:91:ca:07:13:d1:74:05:3b:f3:da:9c:
5d:d1:d9:a7:8b:17:28:4c:0e:b3:aa:58:36:f1:d6:
14:01:c0:ea:3f:91:f3:ad:04:ca:57:70:7e:9d:29:
5e:f2:62:28:74:19:22:1c:09:2b:24:61:41:26:f7:
1b:d4:51:0d:5f:fb:f8:82:16:bb:47:2b:e5:16:9f:
fa:20:a9:81:ee:1f:2c:d9:a8:13:64:fb:66:01:32:
85:b4:70:67:48:d3:24:54:30:35:a4:c1:e0:68:03:
c4:b6:32:64:4d:26:65:a8:31:d3:2c:cc:7c:8a:49:
3b:4a:e0:d9:35:8d:41:e2:89:1f:45:b3:e5:f5:69:
54:7f:05:27:42:b3:e5:6d:79:83:f1:10:76:e9:03:
ce:0b:ba:cb:ca:eb:d5:2e:f6:6f:80:24:7e:c8:4c:
e2:af:e1:d3:a8:b7:1b:8a:15:b1:24:52:ff:6b:b5:
08:39:bf:9d:57:57:3b:46:f9:81:1f:a0:4d:3b:22:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:FB:DA:B5:1E:08:60:61:B0:B5:8C:29:8D:70:5F:C5:6B:52:0F
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/8Jb72rUeCGBhsLWMKY1wX8VrUg8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:d4:26:9b:2c:de:a3:2c:31:fd:ac:01:72:f0:5c:c2:36:4a:
af:7b:18:80:4a:ab:9c:31:57:d3:73:77:15:ec:04:c7:37:b2:
39:2a:ed:63:4f:c2:76:3b:26:21:b9:51:c0:01:38:ed:ad:6c:
ba:fa:d8:f3:41:9b:1a:ed:9f:27:be:b8:ce:3e:92:c0:e8:1e:
4e:62:de:5f:32:99:06:50:0f:67:b8:e8:b5:23:0b:eb:3d:1c:
43:64:56:f0:45:8e:ac:f8:3d:42:df:c1:03:5e:e7:0d:c2:8e:
c5:74:ac:d8:1c:8e:1a:8d:5a:0b:f0:92:41:c2:71:fb:74:9b:
e5:aa:e0:55:7a:93:61:4f:a1:53:86:ef:26:6e:15:9d:1d:8f:
f2:51:1b:7d:0a:2d:ac:8a:e1:bd:c7:4a:60:95:25:a4:a0:11:
71:2a:5b:25:46:b2:a5:76:87:7c:dc:97:53:16:06:85:ab:e1:
af:4b:3b:69:83:48:98:0d:20:9a:90:8f:84:f4:7a:de:03:5d:
55:5c:45:2b:99:a9:01:c9:61:5a:80:75:80:03:9b:f2:50:b7:
de:e7:cd:cb:d1:ad:fa:77:57:68:1e:13:e5:08:c4:38:84:21:
58:4b:37:0d:20:3d:94:63:0f:1c:d0:c3:4f:22:40:72:97:b0:
87:88:13:3e
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MDczMVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRjA5NkZCREFCNTFFMDg2
MDYxQjBCNThDMjk4RDcwNUZDNTZCNTIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOp1G/nUDzA/fpaWKu3MLWZzwPj1dlPP2SuL6PN7CdDA/v/i80zX
62jG9o3+fLnGJmLd15VaY4erBUzDR0p2YpHKBxPRdAU789qcXdHZp4sXKEwOs6pY
NvHWFAHA6j+R860Eyldwfp0pXvJiKHQZIhwJKyRhQSb3G9RRDV/7+IIWu0cr5Raf
+iCpge4fLNmoE2T7ZgEyhbRwZ0jTJFQwNaTB4GgDxLYyZE0mZagx0yzMfIpJO0rg
2TWNQeKJH0Wz5fVpVH8FJ0Kz5W15g/EQdukDzgu6y8rr1S72b4AkfshM4q/h06i3
G4oVsSRS/2u1CDm/nVdXO0b5gR+gTTsi3XMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTwlvvatR4IYGGwtYwpjXBfxWtSDzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvOEpiNzJyVWVDR0Joc0xXTUtZMXdYOFZyVWc4LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANMIMA0GCSqGSIb3DQEBCwUAA4IBAQCC
1CabLN6jLDH9rAFy8FzCNkqvexiASqucMVfTc3cV7ATHN7I5Ku1jT8J2OyYhuVHA
ATjtrWy6+tjzQZsa7Z8nvrjOPpLA6B5OYt5fMpkGUA9nuOi1IwvrPRxDZFbwRY6s
+D1C38EDXucNwo7FdKzYHI4ajVoL8JJBwnH7dJvlquBVepNhT6FThu8mbhWdHY/y
URt9Ci2siuG9x0pglSWkoBFxKlslRrKldod83JdTFgaFq+GvSztpg0iYDSCakI+E
9HreA11VXEUrmakByWFagHWAA5vyULfe583L0a36d1doHhPlCMQ4hCFYSzcNID2U
Yw8c0MNPIkByl7CHiBM+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:16 2025 by rpki-client