Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/b11A7Kz_IX-l_9GVpKnP6qYY91g.roa
File: b11A7Kz_IX-l_9GVpKnP6qYY91g.roa (raw, json)
Hash identifier: C2C9Tpk+ai/e/79tYlhSOqAumG3syD9FK+V8J8RkOik=
Subject key identifier: 6F:5D:40:EC:AC:FF:21:7F:A5:FF:D1:95:A4:A9:CF:EA:A6:18:F7:58
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 2D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/b11A7Kz_IX-l_9GVpKnP6qYY91g.roa
Signing time: Wed 20 Apr 2022 09:17:23 +0000
ROA not before: Wed 20 Apr 2022 09:17:23 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.146.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:17:23 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=6F5D40ECACFF217FA5FFD195A4A9CFEAA618F758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:35:dc:85:cc:88:d6:bf:40:ce:83:b7:ce:
01:a4:70:c2:72:48:1e:ea:8d:79:79:14:85:2b:32:
45:df:a9:27:4c:14:f4:da:2b:40:22:7c:64:fe:5b:
bb:0a:26:9d:f8:8f:5f:f3:57:d3:6c:6e:60:bd:b9:
3f:4b:00:4a:5c:ee:b8:aa:96:0c:4c:52:a4:5b:e1:
17:fa:c7:7a:2f:73:03:8d:45:8f:4d:a5:68:cb:2c:
09:81:ed:6c:d8:4a:78:11:16:56:0c:6a:bc:ae:2d:
8e:e5:06:57:3d:99:88:a3:c6:0c:1c:5d:3c:66:24:
d7:0f:c2:90:b3:b2:d9:8a:bb:0a:18:57:2e:f2:ad:
5f:40:cc:4d:5a:7b:e5:fa:09:c7:95:d3:0e:94:34:
5b:ce:ce:00:34:ec:d8:55:dd:9d:ef:90:76:8c:9e:
73:d8:bc:a6:93:39:60:3d:cb:e1:b6:66:57:bf:de:
5c:5f:50:4a:f0:ee:65:58:53:e5:bf:c8:c0:a3:05:
aa:2d:67:72:50:34:b9:1b:8c:09:4b:36:95:a0:e3:
6c:83:9a:f9:f8:c9:73:8e:5c:02:98:56:cb:08:b0:
0c:dc:74:9e:13:16:e4:4c:2b:5a:f0:bf:01:c5:3d:
66:7e:87:ab:e9:40:47:05:47:a2:de:6e:7b:21:fb:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:40:EC:AC:FF:21:7F:A5:FF:D1:95:A4:A9:CF:EA:A6:18:F7:58
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/b11A7Kz_IX-l_9GVpKnP6qYY91g.roa
sbgp-ipAddrBlock: critical
IPv4:
210.146.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:d0:0c:f1:00:52:0f:3f:a4:be:52:1c:1a:5e:dc:7e:8f:7a:
36:11:e7:e1:2d:03:37:7c:57:a1:81:41:fe:c1:68:5f:4c:c3:
5f:ea:c1:f5:95:bb:ca:f1:6d:60:2a:57:8d:01:9e:34:10:55:
3f:18:f3:87:da:b2:11:07:f4:71:df:50:c7:d4:0e:2a:5c:10:
4e:76:48:05:d8:aa:04:f8:07:01:9b:95:8f:eb:84:a6:fe:a7:
74:7a:a8:32:1a:c4:9b:ee:68:25:ff:ba:2d:90:dd:ef:24:a4:
05:8a:e1:1c:97:65:31:46:25:f4:e6:95:85:03:24:d3:0f:a8:
99:de:b4:4b:bb:d9:34:cb:34:70:76:33:2e:da:25:a2:38:8a:
db:4e:40:66:bd:cc:92:03:89:db:5d:0b:7e:b5:c3:ba:62:48:
50:75:ae:e6:dd:f3:43:35:92:2a:50:c8:83:9a:6a:46:08:ac:
0e:26:f0:79:06:c9:54:da:a0:c2:67:93:42:5a:48:87:04:48:
cd:37:c0:74:3f:2f:93:da:7c:4f:49:66:28:61:a7:8c:ed:71:
22:80:e6:da:9d:ee:7a:ce:d1:4e:39:4e:e2:b1:3b:6d:12:ca:
8e:1e:53:2d:3d:1b:8e:ce:84:54:1f:af:3b:c0:9b:af:ed:e8:
30:01:9b:04
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTcyM1oXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNkY1RDQwRUNBQ0ZGMjE3
RkE1RkZEMTk1QTRBOUNGRUFBNjE4Rjc1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOzNdyFzIjWv0DOg7fOAaRwwnJIHuqNeXkUhSsyRd+pJ0wU9Nor
QCJ8ZP5buwomnfiPX/NX02xuYL25P0sASlzuuKqWDExSpFvhF/rHei9zA41Fj02l
aMssCYHtbNhKeBEWVgxqvK4tjuUGVz2ZiKPGDBxdPGYk1w/CkLOy2Yq7ChhXLvKt
X0DMTVp75foJx5XTDpQ0W87OADTs2FXdne+Qdoyec9i8ppM5YD3L4bZmV7/eXF9Q
SvDuZVhT5b/IwKMFqi1nclA0uRuMCUs2laDjbIOa+fjJc45cAphWywiwDNx0nhMW
5EwrWvC/AcU9Zn6Hq+lARwVHot5ueyH7VDkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRvXUDsrP8hf6X/0ZWkqc/qphj3WDAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvYjExQTdLel9JWC1sXzlHVnBLblA2cVlZOTFnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdKSADANBgkqhkiG9w0BAQsFAAOCAQEA
i9AM8QBSDz+kvlIcGl7cfo96NhHn4S0DN3xXoYFB/sFoX0zDX+rB9ZW7yvFtYCpX
jQGeNBBVPxjzh9qyEQf0cd9Qx9QOKlwQTnZIBdiqBPgHAZuVj+uEpv6ndHqoMhrE
m+5oJf+6LZDd7ySkBYrhHJdlMUYl9OaVhQMk0w+omd60S7vZNMs0cHYzLtolojiK
205AZr3MkgOJ210LfrXDumJIUHWu5t3zQzWSKlDIg5pqRgisDibweQbJVNqgwmeT
QlpIhwRIzTfAdD8vk9p8T0lmKGGnjO1xIoDm2p3ues7RTjlO4rE7bRLKjh5TLT0b
js6EVB+vO8Cbr+3oMAGbBA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org