Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/kTS76pLnwb3PNAw6SV4NP-yWvvU.roa
File: kTS76pLnwb3PNAw6SV4NP-yWvvU.roa (raw, json)
Hash identifier: UcZqGD9QxGJcylZFAi4PbT2isEZqK5OzYazSXt9FxV8=
Subject key identifier: 91:34:BB:EA:92:E7:C1:BD:CF:34:0C:3A:49:5E:0D:3F:EC:96:BE:F5
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 3C
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kTS76pLnwb3PNAw6SV4NP-yWvvU.roa
Signing time: Wed 20 Apr 2022 09:32:48 +0000
ROA not before: Wed 20 Apr 2022 09:32:48 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:32:48 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=9134BBEA92E7C1BDCF340C3A495E0D3FEC96BEF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:cb:d1:77:03:88:b1:72:1d:de:76:2b:70:
e3:f6:9e:d7:e5:78:48:ca:97:4c:62:60:02:e2:23:
3f:61:e9:24:a5:55:58:c0:5f:60:51:3e:b9:c2:68:
b4:3c:77:47:f0:13:fc:a5:18:47:9e:b8:96:98:24:
19:09:05:b7:37:6b:a7:3f:54:c9:26:23:c9:e0:f0:
d2:ad:bd:a5:0e:33:6c:e1:e2:73:56:c2:6a:2b:f3:
f9:b2:74:66:cc:26:68:db:28:db:db:1f:74:51:19:
f0:c1:7e:5a:69:94:3e:14:b8:c3:6e:0f:73:75:3c:
dc:67:d6:46:5d:df:20:0b:8d:b8:10:63:63:9c:81:
97:7b:5a:92:ae:25:6d:eb:e9:3c:bb:52:be:5a:a4:
23:50:4d:f8:ba:69:b5:43:8b:32:82:b8:62:02:89:
72:90:a1:47:ac:39:9a:73:05:d9:ef:dc:9b:ff:ad:
a0:93:9c:1b:6d:22:46:34:38:f3:35:c6:21:be:db:
8c:c6:82:89:51:bc:83:2e:08:26:20:3b:74:fc:b1:
ed:c5:29:1f:c9:b9:99:25:31:9e:1d:53:ff:49:38:
39:7b:73:1f:84:5c:e2:ad:d4:5a:21:56:b9:58:90:
70:41:d4:c0:c0:3b:8f:3a:42:f5:db:d3:ca:2c:c6:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:BB:EA:92:E7:C1:BD:CF:34:0C:3A:49:5E:0D:3F:EC:96:BE:F5
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kTS76pLnwb3PNAw6SV4NP-yWvvU.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.29.0/24
Signature Algorithm: sha256WithRSAEncryption
27:60:2a:bd:6a:cb:58:92:d7:9f:17:9b:eb:4d:12:9e:4e:ef:
76:7a:37:c2:dd:76:a9:3b:e2:c9:c5:e8:d3:dc:2d:3b:ba:43:
16:c1:f1:ad:17:51:27:9d:46:77:69:da:8c:fb:25:c9:c5:eb:
68:3c:1f:ac:52:cb:c8:41:b9:6e:e6:16:2f:84:0b:34:0a:b9:
b3:16:70:3f:81:e4:a0:2d:e1:2f:cf:9b:f3:ca:33:b5:20:98:
f7:e1:1d:53:1b:b2:8f:d4:35:9a:d1:e8:35:71:cf:ae:0a:63:
14:bb:da:55:19:04:80:0f:04:1c:e2:ef:91:dc:8e:78:b3:09:
d2:f8:ba:19:2c:fa:00:a5:ad:2e:2b:bc:c8:66:8f:e5:d8:82:
52:4f:cb:e6:4e:c2:90:8b:b2:ac:10:b0:34:08:2d:e7:09:b4:
ab:83:f1:b8:94:bd:bc:f6:bb:aa:0e:46:b5:63:f1:60:ea:bd:
cf:42:f0:ec:65:80:47:a8:f5:ec:fc:dd:66:f9:94:6c:4f:16:
b7:1f:02:35:0d:b3:ac:86:3e:4e:7e:ec:6a:55:27:52:fd:d3:
b3:17:29:76:dc:84:79:51:bc:36:52:b8:db:3e:80:a4:b1:af:
dd:2e:06:5f:15:d9:d5:a7:21:ca:cf:98:7f:5c:e8:0c:5d:e6:
9c:28:4d:b5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MzI0OFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoOTEzNEJCRUE5MkU3QzFC
RENGMzQwQzNBNDk1RTBEM0ZFQzk2QkVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALq3y9F3A4ixch3editw4/ae1+V4SMqXTGJgAuIjP2HpJKVVWMBf
YFE+ucJotDx3R/AT/KUYR564lpgkGQkFtzdrpz9UySYjyeDw0q29pQ4zbOHic1bC
aivz+bJ0ZswmaNso29sfdFEZ8MF+WmmUPhS4w24Pc3U83GfWRl3fIAuNuBBjY5yB
l3takq4lbevpPLtSvlqkI1BN+LpptUOLMoK4YgKJcpChR6w5mnMF2e/cm/+toJOc
G20iRjQ48zXGIb7bjMaCiVG8gy4IJiA7dPyx7cUpH8m5mSUxnh1T/0k4OXtzH4Rc
4q3UWiFWuViQcEHUwMA7jzpC9dvTyizGEesCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSRNLvqkufBvc80DDpJXg0/7Ja+9TAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEva1RTNzZwTG53YjNQTkF3NlNWNE5QLXlXdnZVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohHTANBgkqhkiG9w0BAQsFAAOCAQEA
J2AqvWrLWJLXnxeb600Snk7vdno3wt12qTviycXo09wtO7pDFsHxrRdRJ51Gd2na
jPslycXraDwfrFLLyEG5buYWL4QLNAq5sxZwP4HkoC3hL8+b88oztSCY9+EdUxuy
j9Q1mtHoNXHPrgpjFLvaVRkEgA8EHOLvkdyOeLMJ0vi6GSz6AKWtLiu8yGaP5diC
Uk/L5k7CkIuyrBCwNAgt5wm0q4PxuJS9vPa7qg5GtWPxYOq9z0Lw7GWAR6j17Pzd
ZvmUbE8Wtx8CNQ2zrIY+Tn7salUnUv3TsxcpdtyEeVG8NlK42z6ApLGv3S4GXxXZ
1achys+Yf1zoDF3mnChNtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org