Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/DqhaCJsNVEDREuPauPdHT_yVJ0c.roa
File: DqhaCJsNVEDREuPauPdHT_yVJ0c.roa (raw, json)
Hash identifier: NhZc0AefWI9quwq1Kz2KHHwzzqcYVkfZzazBnfrtDWo=
Subject key identifier: 0E:A8:5A:08:9B:0D:54:40:D1:12:E3:DA:B8:F7:47:4F:FC:95:27:47
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 29
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/DqhaCJsNVEDREuPauPdHT_yVJ0c.roa
Signing time: Wed 20 Apr 2022 09:17:22 +0000
ROA not before: Wed 20 Apr 2022 09:17:22 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.156.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:17:22 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=0EA85A089B0D5440D112E3DAB8F7474FFC952747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e2:06:c4:2f:09:a1:97:bb:db:f8:a4:b7:
fe:27:54:c9:ab:a6:b1:b9:9e:94:a5:a6:4d:2f:67:
2f:06:ad:c3:d1:a7:18:5d:ad:7c:64:2e:9e:95:93:
12:1b:89:6b:84:38:62:3e:a9:25:74:12:35:c0:f8:
fa:e9:a1:89:54:d1:01:ea:81:2f:1b:6a:28:06:5f:
d8:88:80:9a:e1:cc:60:27:64:97:e3:48:af:7a:d0:
c6:d6:1f:e3:ec:72:08:ca:d5:70:d1:70:f7:a7:e4:
d9:3f:e0:ba:16:f8:bc:42:14:75:7f:6d:d6:9e:21:
fe:b7:51:20:10:89:90:34:0a:f1:33:c0:3b:b7:65:
24:f5:b9:68:6f:42:fc:06:78:31:31:a6:ab:33:d7:
d5:1f:c5:0e:db:69:94:b3:45:98:2f:49:16:4a:d5:
f7:4b:58:dc:07:04:f6:36:28:19:30:83:a6:51:23:
59:a8:3a:61:24:1c:21:34:6e:d1:04:cc:83:2c:4e:
47:35:ef:91:f9:79:50:ae:ee:0d:7c:69:3d:03:a3:
b5:97:5a:15:68:24:4e:98:4b:90:15:ec:90:c3:8e:
b3:c1:02:d8:33:c2:51:43:3a:4a:1e:1d:b6:5e:07:
a2:78:72:dc:4c:b8:60:33:ce:c0:1c:3e:42:62:59:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:5A:08:9B:0D:54:40:D1:12:E3:DA:B8:F7:47:4F:FC:95:27:47
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/DqhaCJsNVEDREuPauPdHT_yVJ0c.roa
sbgp-ipAddrBlock: critical
IPv4:
210.156.104.0/21
Signature Algorithm: sha256WithRSAEncryption
61:fe:5c:7b:e4:0b:55:82:71:65:7e:a3:69:24:73:3f:ad:81:
42:19:9d:8e:17:b1:c8:8f:7f:e4:21:10:ad:dc:94:d7:71:60:
01:ba:ab:22:38:c2:9d:f9:77:6f:1a:71:ac:05:60:b2:f1:0e:
9b:02:e8:71:cf:dd:e4:a1:42:1a:3e:a4:64:fe:b4:1d:8b:e5:
df:a3:12:6f:44:f2:af:2b:21:f8:cb:7b:e3:58:46:06:6a:4d:
34:e0:62:04:b6:0f:50:97:b3:bc:b4:3b:72:e0:d0:68:d9:0d:
6f:fe:3c:8e:bd:8a:cd:19:5a:0d:05:b2:9e:31:61:71:ff:21:
52:0a:39:f8:c4:ef:16:c8:10:80:0f:6a:8e:d8:9e:1c:48:8d:
ac:10:49:d4:fa:e1:b7:48:22:02:87:0d:96:9b:af:60:5a:a3:
fe:56:50:81:4f:c1:5e:20:3b:66:fc:a4:c5:b3:65:b0:76:79:
2d:7f:96:eb:a8:dc:44:45:bc:60:c4:44:96:a5:a9:88:32:ca:
76:ef:0e:a1:7c:d7:ac:a8:ea:04:ac:8e:d4:31:71:54:ee:12:
b7:02:ce:e3:1c:98:c9:15:24:aa:3c:7f:64:46:71:01:52:da:
bb:47:6e:ab:78:34:08:16:b7:da:1f:3d:b4:73:d7:79:18:d4:
f3:0e:2c:81
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTcyMloXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMEVBODVBMDg5QjBENTQ0
MEQxMTJFM0RBQjhGNzQ3NEZGQzk1Mjc0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKrY4gbELwmhl7vb+KS3/idUyaumsbmelKWmTS9nLwatw9GnGF2t
fGQunpWTEhuJa4Q4Yj6pJXQSNcD4+umhiVTRAeqBLxtqKAZf2IiAmuHMYCdkl+NI
r3rQxtYf4+xyCMrVcNFw96fk2T/guhb4vEIUdX9t1p4h/rdRIBCJkDQK8TPAO7dl
JPW5aG9C/AZ4MTGmqzPX1R/FDttplLNFmC9JFkrV90tY3AcE9jYoGTCDplEjWag6
YSQcITRu0QTMgyxORzXvkfl5UK7uDXxpPQOjtZdaFWgkTphLkBXskMOOs8EC2DPC
UUM6Sh4dtl4Honhy3Ey4YDPOwBw+QmJZS1UCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQOqFoImw1UQNES49q490dP/JUnRzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvRHFoYUNKc05WRURSRXVQYXVQZEhUX3lWSjBjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9KcaDANBgkqhkiG9w0BAQsFAAOCAQEA
Yf5ce+QLVYJxZX6jaSRzP62BQhmdjhexyI9/5CEQrdyU13FgAbqrIjjCnfl3bxpx
rAVgsvEOmwLocc/d5KFCGj6kZP60HYvl36MSb0Tyrysh+Mt741hGBmpNNOBiBLYP
UJezvLQ7cuDQaNkNb/48jr2KzRlaDQWynjFhcf8hUgo5+MTvFsgQgA9qjtieHEiN
rBBJ1Prht0giAocNlpuvYFqj/lZQgU/BXiA7ZvykxbNlsHZ5LX+W66jcREW8YMRE
lqWpiDLKdu8OoXzXrKjqBKyO1DFxVO4StwLO4xyYyRUkqjx/ZEZxAVLau0duq3g0
CBa32h89tHPXeRjU8w4sgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org