Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/yJLSbQ2XCRJRjxCznfa7yZ-6OpI.roa
File: yJLSbQ2XCRJRjxCznfa7yZ-6OpI.roa (raw, json)
Hash identifier: GUX+MBDt1V4QOTJIy55UlwqFVAxcCPxHB4nBhdUNRoM=
Subject key identifier: C8:92:D2:6D:0D:97:09:12:51:8F:10:B3:9D:F6:BB:C9:9F:BA:3A:92
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 12
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/yJLSbQ2XCRJRjxCznfa7yZ-6OpI.roa
Signing time: Wed 20 Apr 2022 09:07:29 +0000
ROA not before: Wed 20 Apr 2022 09:07:29 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 218.40.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:07:29 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=C892D26D0D970912518F10B39DF6BBC99FBA3A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:5e:c0:b5:97:71:47:d1:e6:f4:da:8c:b1:
00:f9:4e:d7:71:ad:73:c5:d9:4c:4a:ab:41:08:57:
04:de:f9:fb:53:9f:bc:1f:7c:6d:7c:c6:e9:e1:c6:
d9:62:38:a4:0c:04:b4:37:0e:1b:5c:37:13:80:05:
64:6c:16:25:0d:5b:3a:e6:91:f9:8e:fa:ed:b2:18:
7d:25:cb:dd:3e:1e:2d:67:a4:d4:22:d9:51:cf:b6:
da:95:94:a9:ee:73:8e:02:db:f7:0d:62:03:f5:76:
f9:03:d1:39:92:1a:bd:0f:59:af:99:44:c4:ae:a2:
3b:a8:2d:54:0c:be:a3:a7:cb:2f:e8:ff:25:1d:84:
6c:7d:22:b7:9a:cf:c5:33:36:96:dd:52:d2:bf:3b:
fb:2d:3b:bf:d7:6f:53:33:fc:a0:c1:9f:09:79:c3:
41:15:e1:bd:fe:89:d8:a4:12:da:86:de:97:13:e8:
ec:83:b9:dd:b5:29:5d:24:34:cb:07:84:e0:28:03:
4c:bc:b7:2b:cc:bd:64:4d:8c:5e:89:3d:09:9a:38:
f7:66:b9:48:4b:dc:9c:a1:ab:e2:34:e2:42:a1:43:
78:98:0f:27:51:20:fd:9f:96:68:24:80:0b:c5:a5:
34:c4:e2:17:c7:41:d5:ff:0f:e5:89:a6:4f:4b:b3:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:D2:6D:0D:97:09:12:51:8F:10:B3:9D:F6:BB:C9:9F:BA:3A:92
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/yJLSbQ2XCRJRjxCznfa7yZ-6OpI.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.196.0/22
Signature Algorithm: sha256WithRSAEncryption
10:bf:94:c8:56:6e:82:63:35:fc:e9:66:6d:58:58:d2:47:50:
da:69:df:04:49:e0:d1:bd:49:e3:84:2e:c9:0d:02:b9:8a:05:
94:a2:fa:ec:b8:b7:98:64:c2:42:96:af:d9:10:d4:55:fe:99:
01:17:12:42:bc:a9:d8:ff:42:f3:ca:3a:86:fe:0d:18:bb:80:
f3:f2:ea:c8:e2:38:04:eb:48:3c:86:bb:d6:a7:b3:55:ac:cd:
a7:7f:ca:63:89:12:95:60:e7:db:1d:da:e3:f9:22:67:1f:cc:
32:97:fb:0c:5a:07:50:28:1f:72:7d:61:7c:45:ea:50:ff:f8:
a3:81:0e:df:c4:71:07:c0:08:9f:c4:53:93:6d:dc:31:23:b8:
8b:ac:4b:42:51:b3:c5:74:e8:78:6b:2e:8a:bd:8b:1e:e6:0f:
a8:d5:0f:09:70:09:81:6e:72:7d:fc:b8:ee:d9:b4:2e:2d:b5:
92:49:e0:1a:4c:62:f9:03:2c:de:d2:95:5c:5c:f0:6e:34:8f:
35:a0:5f:00:b7:19:7a:ac:04:ac:f5:eb:32:f5:6f:5e:78:f2:
01:b5:ce:c3:9b:9c:38:30:c5:52:1d:13:ad:e8:01:8d:16:af:
0c:5a:c5:18:a6:33:2e:df:63:7e:e2:7f:8f:9a:6a:68:1e:00:
23:ac:ff:7a
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MDcyOVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQzg5MkQyNkQwRDk3MDkx
MjUxOEYxMEIzOURGNkJCQzk5RkJBM0E5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMc+XsC1l3FH0eb02oyxAPlO13Gtc8XZTEqrQQhXBN75+1OfvB98
bXzG6eHG2WI4pAwEtDcOG1w3E4AFZGwWJQ1bOuaR+Y767bIYfSXL3T4eLWek1CLZ
Uc+22pWUqe5zjgLb9w1iA/V2+QPROZIavQ9Zr5lExK6iO6gtVAy+o6fLL+j/JR2E
bH0it5rPxTM2lt1S0r87+y07v9dvUzP8oMGfCXnDQRXhvf6J2KQS2obelxPo7IO5
3bUpXSQ0yweE4CgDTLy3K8y9ZE2MXok9CZo492a5SEvcnKGr4jTiQqFDeJgPJ1Eg
/Z+WaCSAC8WlNMTiF8dB1f8P5YmmT0uzOTUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTIktJtDZcJElGPELOd9rvJn7o6kjAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEveUpMU2JRMlhDUkpSanhDem5mYTd5Wi02T3BJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtooxDANBgkqhkiG9w0BAQsFAAOCAQEA
EL+UyFZugmM1/OlmbVhY0kdQ2mnfBEng0b1J44QuyQ0CuYoFlKL67Li3mGTCQpav
2RDUVf6ZARcSQryp2P9C88o6hv4NGLuA8/LqyOI4BOtIPIa71qezVazNp3/KY4kS
lWDn2x3a4/kiZx/MMpf7DFoHUCgfcn1hfEXqUP/4o4EO38RxB8AIn8RTk23cMSO4
i6xLQlGzxXToeGsuir2LHuYPqNUPCXAJgW5yffy47tm0Li21kkngGkxi+QMs3tKV
XFzwbjSPNaBfALcZeqwErPXrMvVvXnjyAbXOw5ucODDFUh0TregBjRavDFrFGKYz
Lt9jfuJ/j5pqaB4AI6z/eg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org