Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/Ja6TOFKXNqWrU222kwP3Bp2EXy4.roa
File: Ja6TOFKXNqWrU222kwP3Bp2EXy4.roa (raw, json)
Hash identifier: FzsewwHzy3fGC+JZkEHe6ewtiGvG42bY1scy865kN2Q=
Subject key identifier: 25:AE:93:38:52:97:36:A5:AB:53:6D:B6:93:03:F7:06:9D:84:5F:2E
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 2F
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Ja6TOFKXNqWrU222kwP3Bp2EXy4.roa
Signing time: Wed 20 Apr 2022 09:22:24 +0000
ROA not before: Wed 20 Apr 2022 09:22:24 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.142.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:22:24 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=25AE9338529736A5AB536DB69303F7069D845F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:42:5f:61:bc:6e:4a:1f:e6:81:68:97:68:
44:ee:46:05:ec:88:20:98:15:b2:14:1d:66:e1:9d:
4a:48:b0:27:c6:78:cb:f4:ab:b6:94:60:b0:56:dd:
ce:d7:5f:46:73:17:b1:7b:b4:ae:98:b1:43:41:ae:
9d:5f:1e:ab:b6:60:1b:96:ad:95:03:c8:0a:f4:ae:
14:99:6b:08:b2:c3:05:cd:0b:56:cf:67:d5:11:3c:
00:f4:5f:34:ba:1c:4b:51:2e:bd:98:2d:fa:73:99:
72:cc:d7:d3:4d:a1:32:e7:0c:63:db:13:e4:48:a8:
17:a5:58:26:d6:aa:41:17:ec:10:3d:e7:a8:d5:e8:
b5:6b:e3:c4:7f:f5:88:e0:ae:47:3f:cc:bc:9e:37:
54:ae:93:b8:d4:d7:18:31:82:68:f3:29:0d:5b:4e:
ef:ca:5d:5e:ff:a0:a8:b3:6d:0b:4c:af:ec:12:ee:
d5:21:3d:41:9e:cd:af:8c:68:74:5a:1b:54:ae:14:
4f:ef:57:6f:06:82:dd:ea:0f:30:c0:f5:41:0b:bd:
5e:29:6a:11:64:53:71:49:00:c9:d6:c3:00:96:96:
e1:74:b2:5e:ec:b6:b8:9c:21:1c:6f:c5:f0:8a:00:
f6:cc:71:86:26:a3:ac:2e:79:ea:9e:3a:f8:01:11:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:93:38:52:97:36:A5:AB:53:6D:B6:93:03:F7:06:9D:84:5F:2E
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Ja6TOFKXNqWrU222kwP3Bp2EXy4.roa
sbgp-ipAddrBlock: critical
IPv4:
210.142.160.0/20
Signature Algorithm: sha256WithRSAEncryption
25:ab:b2:69:b2:3c:55:a3:7a:88:da:e1:5a:99:84:b7:3a:66:
5c:85:68:b9:c2:5e:5a:8c:69:bc:7c:7d:15:3a:5a:07:b0:34:
d6:0d:cc:b1:b2:c6:13:be:1c:b1:07:8c:8f:2f:24:62:52:30:
c6:ab:19:d2:e9:85:f5:ad:e8:18:06:a8:0c:32:12:10:27:7c:
f3:73:94:a1:e7:70:2d:a9:83:de:0a:67:7d:2c:9a:bb:7b:db:
f0:a7:7e:5d:69:a8:72:79:b2:fe:f1:c1:69:c6:47:fa:73:b0:
86:f2:41:b1:34:90:26:1c:82:d5:26:53:48:6a:bb:9d:1e:42:
5a:c3:df:51:c7:b9:31:5f:0f:91:0b:eb:79:9c:e0:43:bf:ba:
0c:75:35:a8:a9:04:50:1d:b4:da:d2:63:49:f4:b2:89:d6:01:
63:95:0f:5a:5b:4a:37:ba:62:40:b5:05:5a:83:be:46:19:b4:
e9:c4:08:d9:19:04:97:ee:05:7e:6e:8f:64:03:00:f7:20:34:
93:d8:59:c1:6f:20:c3:3a:69:0b:cc:fc:00:2c:15:79:33:0a:
fc:90:47:e8:15:ea:f1:5f:c6:0b:2b:76:8b:2d:24:92:b9:e7:
4e:05:fc:6d:88:64:07:1c:54:25:4e:29:c6:77:4b:a0:b7:fe:
6b:21:01:15
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MjIyNFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMjVBRTkzMzg1Mjk3MzZB
NUFCNTM2REI2OTMwM0Y3MDY5RDg0NUYyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANZ9Ql9hvG5KH+aBaJdoRO5GBeyIIJgVshQdZuGdSkiwJ8Z4y/Sr
tpRgsFbdztdfRnMXsXu0rpixQ0GunV8eq7ZgG5atlQPICvSuFJlrCLLDBc0LVs9n
1RE8APRfNLocS1EuvZgt+nOZcszX002hMucMY9sT5EioF6VYJtaqQRfsED3nqNXo
tWvjxH/1iOCuRz/MvJ43VK6TuNTXGDGCaPMpDVtO78pdXv+gqLNtC0yv7BLu1SE9
QZ7Nr4xodFobVK4UT+9XbwaC3eoPMMD1QQu9XilqEWRTcUkAydbDAJaW4XSyXuy2
uJwhHG/F8IoA9sxxhiajrC556p46+AER2VUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQlrpM4Upc2patTbbaTA/cGnYRfLjAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvSmE2VE9GS1hOcVdyVTIyMmt3UDNCcDJFWHk0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKOoDANBgkqhkiG9w0BAQsFAAOCAQEA
JauyabI8VaN6iNrhWpmEtzpmXIVoucJeWoxpvHx9FTpaB7A01g3MsbLGE74csQeM
jy8kYlIwxqsZ0umF9a3oGAaoDDISECd883OUoedwLamD3gpnfSyau3vb8Kd+XWmo
cnmy/vHBacZH+nOwhvJBsTSQJhyC1SZTSGq7nR5CWsPfUce5MV8PkQvreZzgQ7+6
DHU1qKkEUB202tJjSfSyidYBY5UPWltKN7piQLUFWoO+Rhm06cQI2RkEl+4Ffm6P
ZAMA9yA0k9hZwW8gwzppC8z8ACwVeTMK/JBH6BXq8V/GCyt2iy0kkrnnTgX8bYhk
BxxUJU4pxndLoLf+ayEBFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org