Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa
File: QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa (raw, json)
Hash identifier: hRTCnQFpjKLtL9VC6buJ1iaN554iOQkvumrxhW77EPo=
Subject key identifier: 41:86:5A:CF:94:CD:08:B7:62:DA:D9:C2:F5:5D:81:07:1A:F8:7B:0D
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 31
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa
Signing time: Wed 20 Apr 2022 09:22:25 +0000
ROA not before: Wed 20 Apr 2022 09:22:25 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.134.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:22:25 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=41865ACF94CD08B762DAD9C2F55D81071AF87B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:95:2f:29:fe:81:a3:11:23:17:4f:87:21:
9c:cb:ca:52:b4:13:03:85:2a:b5:e3:b9:69:79:7a:
81:e3:3a:2a:d8:c5:3e:22:96:7f:f6:88:8d:83:ef:
e5:21:11:f3:b8:b1:f1:c5:fd:50:f8:1f:b9:9a:90:
6d:5a:cf:db:a4:3d:6e:d3:f7:71:99:e6:4a:ee:1d:
96:a8:46:76:88:c4:b9:25:96:77:4f:ab:b3:93:20:
94:97:ca:32:b2:30:82:b5:91:75:cf:25:0c:ca:0c:
f0:e2:bd:1a:e3:9d:13:04:8d:a3:98:8f:da:30:a5:
2a:4c:d2:dc:01:7a:f2:98:b6:20:e3:d1:95:40:16:
6b:e2:e9:5a:b0:93:0c:44:75:1c:98:62:eb:3c:29:
3f:0f:6c:53:aa:aa:41:be:8c:be:07:9c:3c:63:18:
32:45:3f:a5:73:4c:a3:eb:02:47:d5:ae:6d:7b:b5:
c4:4d:32:10:95:44:64:02:f8:b8:78:b1:a7:7a:2c:
cd:e2:a4:4c:3d:34:bb:fd:89:fc:8a:9e:22:bd:d5:
2a:f1:ac:6f:f2:0d:45:52:3e:a2:1a:24:41:54:9f:
54:5f:c9:27:13:40:d9:62:b0:3a:81:9b:26:63:7c:
99:18:e2:73:9d:96:bd:e1:ac:94:8b:9e:38:54:7c:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:5A:CF:94:CD:08:B7:62:DA:D9:C2:F5:5D:81:07:1A:F8:7B:0D
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.134.64.0/20
Signature Algorithm: sha256WithRSAEncryption
21:63:6e:b5:11:76:37:93:bb:b6:52:00:2d:94:ff:f5:0e:0a:
aa:7f:f7:1b:66:b9:98:2b:e7:6a:ba:f3:0d:e8:35:b3:ed:12:
40:26:11:c3:f3:f9:ff:6c:96:c2:18:6d:22:d1:c8:5e:44:b6:
4b:09:3a:a6:38:f1:73:76:5f:a5:07:f1:4f:b7:02:08:02:fb:
9a:07:a7:86:77:14:c2:bc:b4:cb:ff:77:64:07:9d:1f:c6:38:
07:c1:bf:33:e3:38:76:3a:33:68:31:ab:e7:d4:98:61:11:75:
17:7b:a4:42:73:6d:10:55:2f:97:01:19:7e:2a:f0:20:87:b6:
aa:fa:b6:43:d4:07:fe:51:9f:81:bb:7b:6b:69:ec:ce:de:35:
42:e3:42:c2:c7:40:01:6e:b3:87:fa:e1:89:1a:95:a1:c1:77:
c4:2f:02:9b:5a:93:ca:46:8d:95:e1:b5:f0:6e:91:54:f4:56:
77:cc:98:64:9f:be:a2:94:17:2b:e3:eb:90:a3:8d:fe:8c:94:
df:3c:fe:b2:13:1d:b0:ba:ec:3c:92:45:aa:6c:66:9e:ec:32:
a0:1d:7b:28:97:40:3e:57:f5:0b:11:02:96:54:21:13:6c:03:
26:66:7e:2b:f2:4d:84:c9:22:bc:f3:34:5c:60:9c:29:47:98:
e8:3b:70:30
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MjIyNVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNDE4NjVBQ0Y5NENEMDhC
NzYyREFEOUMyRjU1RDgxMDcxQUY4N0IwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcvlS8p/oGjESMXT4chnMvKUrQTA4UqteO5aXl6geM6KtjFPiKW
f/aIjYPv5SER87ix8cX9UPgfuZqQbVrP26Q9btP3cZnmSu4dlqhGdojEuSWWd0+r
s5MglJfKMrIwgrWRdc8lDMoM8OK9GuOdEwSNo5iP2jClKkzS3AF68pi2IOPRlUAW
a+LpWrCTDER1HJhi6zwpPw9sU6qqQb6MvgecPGMYMkU/pXNMo+sCR9WubXu1xE0y
EJVEZAL4uHixp3oszeKkTD00u/2J/IqeIr3VKvGsb/INRVI+ohokQVSfVF/JJxNA
2WKwOoGbJmN8mRjic52WveGslIueOFR8Q6ECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRBhlrPlM0It2La2cL1XYEHGvh7DTAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvUVlaYXo1VE5DTGRpMnRuQzlWMkJCeHI0ZXcwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKGQDANBgkqhkiG9w0BAQsFAAOCAQEA
IWNutRF2N5O7tlIALZT/9Q4Kqn/3G2a5mCvnarrzDeg1s+0SQCYRw/P5/2yWwhht
ItHIXkS2Swk6pjjxc3ZfpQfxT7cCCAL7mgenhncUwry0y/93ZAedH8Y4B8G/M+M4
djozaDGr59SYYRF1F3ukQnNtEFUvlwEZfirwIIe2qvq2Q9QH/lGfgbt7a2nszt41
QuNCwsdAAW6zh/rhiRqVocF3xC8Cm1qTykaNleG18G6RVPRWd8yYZJ++opQXK+Pr
kKON/oyU3zz+shMdsLrsPJJFqmxmnuwyoB17KJdAPlf1CxECllQhE2wDJmZ+K/JN
hMkivPM0XGCcKUeY6DtwMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org