Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/xpkg8Pvlkm0rAIlqbKzNdJTWwCM.roa
File: xpkg8Pvlkm0rAIlqbKzNdJTWwCM.roa (raw, json)
Hash identifier: HZRK/kIuoW0D2/Ult9lw6DUysW8a+0hzB1m15xgeCn0=
Subject key identifier: C6:99:20:F0:FB:E5:92:6D:2B:00:89:6A:6C:AC:CD:74:94:D6:C0:23
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 32
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xpkg8Pvlkm0rAIlqbKzNdJTWwCM.roa
Signing time: Wed 20 Apr 2022 09:22:25 +0000
ROA not before: Wed 20 Apr 2022 09:22:25 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 203.139.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:22:25 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=C69920F0FBE5926D2B00896A6CACCD7494D6C023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:65:9d:19:df:8d:bd:4b:eb:39:d6:06:74:
20:c9:fa:cd:43:e0:1a:5d:95:ae:88:f3:6a:25:cb:
3f:a1:f8:cc:ab:b1:0c:5a:6c:c2:d3:50:0c:ea:ee:
14:92:66:32:b2:43:84:e4:7c:76:1b:1a:bc:6a:de:
00:28:1e:97:1d:aa:45:10:6c:61:cc:d3:81:d2:7c:
e0:0f:62:35:1d:14:54:85:e7:8e:7f:19:79:ec:67:
09:f1:66:bd:05:27:ec:73:56:f4:4f:13:66:cf:58:
bb:a6:60:13:dc:31:1a:07:fd:e2:2d:7d:ad:c2:a2:
4d:59:81:96:48:c0:cd:0e:3c:25:ee:8b:a4:6b:82:
4d:66:a9:ca:ca:a1:31:ea:c8:4c:0d:a6:20:35:0b:
78:1b:2c:b6:7e:b8:f0:5c:52:5b:68:5e:f1:89:d5:
72:9c:5f:48:0f:69:3e:05:70:d7:64:37:fc:e2:4f:
7d:3e:11:e2:8b:e7:b9:30:8d:c6:40:53:88:f4:a6:
8b:01:cb:ec:41:4c:0c:2e:f7:14:da:22:20:cc:63:
85:81:10:21:e8:cf:57:6e:c3:be:34:c4:17:16:93:
76:1a:7b:5a:29:3a:0d:33:3c:ce:f1:6e:de:3c:53:
70:72:65:20:ce:e0:64:ba:af:c4:5a:3d:93:48:96:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:20:F0:FB:E5:92:6D:2B:00:89:6A:6C:AC:CD:74:94:D6:C0:23
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xpkg8Pvlkm0rAIlqbKzNdJTWwCM.roa
sbgp-ipAddrBlock: critical
IPv4:
203.139.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8f:3b:1b:9f:97:9d:48:b1:12:50:b8:e5:0f:9f:02:4f:da:d7:
5f:fc:76:94:ea:b8:9f:a6:f8:50:71:8d:f7:a4:ab:ae:89:c9:
18:9a:df:02:69:52:90:a3:23:e4:01:9e:0d:c6:35:27:74:4f:
f7:a4:7d:e3:29:b9:79:8b:0e:01:4a:41:1f:9d:be:de:26:c9:
cb:b4:df:76:96:1a:13:91:e4:2e:06:3f:86:5f:6b:47:29:82:
4c:1e:2a:4f:91:90:1f:64:07:51:5d:4d:7e:ac:b0:b6:29:7f:
62:a8:18:e9:54:60:36:dc:d4:ec:72:eb:2c:a7:49:bc:7e:cf:
15:a2:6a:44:71:00:a9:fe:ec:7a:7f:5a:06:ca:9a:c0:4c:4c:
65:92:4c:47:ff:cd:a5:ae:29:2e:21:84:9d:5b:fc:5c:ad:5a:
db:4d:83:4a:43:0f:96:94:98:80:28:2e:c6:5a:94:f3:dc:f3:
23:9e:bc:db:b1:ba:cb:76:37:d5:d1:99:2d:52:53:33:bb:09:
2f:df:45:aa:10:03:1e:76:ec:fa:5c:38:87:92:75:fc:ec:9f:
e5:5e:ad:4b:11:6d:38:ee:16:da:63:51:a0:91:49:4b:37:3e:
4b:91:98:3a:72:a6:76:ec:d7:03:8b:07:5b:b0:39:9d:35:eb:
31:a0:54:f0
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MjIyNVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQzY5OTIwRjBGQkU1OTI2
RDJCMDA4OTZBNkNBQ0NENzQ5NEQ2QzAyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOULZZ0Z3429S+s51gZ0IMn6zUPgGl2VrojzaiXLP6H4zKuxDFps
wtNQDOruFJJmMrJDhOR8dhsavGreACgelx2qRRBsYczTgdJ84A9iNR0UVIXnjn8Z
eexnCfFmvQUn7HNW9E8TZs9Yu6ZgE9wxGgf94i19rcKiTVmBlkjAzQ48Je6LpGuC
TWapysqhMerITA2mIDULeBsstn648FxSW2he8YnVcpxfSA9pPgVw12Q3/OJPfT4R
4ovnuTCNxkBTiPSmiwHL7EFMDC73FNoiIMxjhYEQIejPV27DvjTEFxaTdhp7Wik6
DTM8zvFu3jxTcHJlIM7gZLqvxFo9k0iW238CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTGmSDw++WSbSsAiWpsrM10lNbAIzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEveHBrZzhQdmxrbTByQUlscWJLek5kSlRXd0NNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8uLADANBgkqhkiG9w0BAQsFAAOCAQEA
jzsbn5edSLESULjlD58CT9rXX/x2lOq4n6b4UHGN96SrronJGJrfAmlSkKMj5AGe
DcY1J3RP96R94ym5eYsOAUpBH52+3ibJy7TfdpYaE5HkLgY/hl9rRymCTB4qT5GQ
H2QHUV1Nfqywtil/YqgY6VRgNtzU7HLrLKdJvH7PFaJqRHEAqf7sen9aBsqawExM
ZZJMR//Npa4pLiGEnVv8XK1a202DSkMPlpSYgCguxlqU89zzI56827G6y3Y31dGZ
LVJTM7sJL99FqhADHnbs+lw4h5J1/Oyf5V6tSxFtOO4W2mNRoJFJSzc+S5GYOnKm
duzXA4sHW7A5nTXrMaBU8A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org