Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/KAIoWv8k9G93kmgGYcRjiDtq0g8.roa
File: KAIoWv8k9G93kmgGYcRjiDtq0g8.roa (raw, json)
Hash identifier: va3hJoVuHOlfEDLe4hOBPPUohNlW6FXjMM4HAHOkYw0=
Subject key identifier: 28:02:28:5A:FF:24:F4:6F:77:92:68:06:61:C4:63:88:3B:6A:D2:0F
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 2B
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/KAIoWv8k9G93kmgGYcRjiDtq0g8.roa
Signing time: Wed 18 Aug 2021 07:54:24 +0000
ROA not before: Wed 18 Aug 2021 07:54:24 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 60.236.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Aug 18 07:54:24 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=2802285AFF24F46F7792680661C463883B6AD20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:85:d6:19:3c:2e:a2:63:9e:7f:2b:ad:8f:22:
ac:27:cc:36:05:db:48:c1:8f:e6:f8:71:d2:57:bc:
6e:06:18:b0:e4:b6:9f:f6:3b:1c:47:48:dd:b6:02:
4b:58:a7:84:14:1a:60:f7:83:df:e6:d0:f5:d5:13:
22:38:14:c3:62:63:2c:93:73:70:66:43:fb:78:52:
fc:b0:a1:55:5e:c2:47:ec:ac:83:43:66:4f:f6:f8:
49:73:f6:c3:f0:2a:a9:26:2a:d7:e1:09:95:dd:ba:
e5:28:24:7e:08:30:0d:39:21:61:e0:63:12:4f:02:
c3:7b:a8:97:9b:a1:74:6c:f5:d9:aa:d9:eb:03:d8:
94:d2:df:67:a2:a8:04:15:d4:6b:1c:89:fd:4d:ec:
6c:5e:8f:d9:59:da:b4:5f:a5:e5:03:09:6d:6c:58:
18:60:87:4d:4d:77:13:89:ef:d9:98:ae:9e:51:be:
88:22:ff:0e:90:fd:4a:f8:81:90:27:24:1a:a3:2f:
eb:bb:31:7d:75:6a:d6:d3:da:95:a9:33:a5:fc:9f:
2a:ce:d3:a3:76:47:e2:63:59:9e:fb:77:0e:33:ce:
b1:f4:45:22:cd:ad:6f:31:06:0c:e9:00:1c:3e:19:
b3:35:85:8d:27:81:e1:27:6b:75:19:0b:35:9b:0f:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:28:5A:FF:24:F4:6F:77:92:68:06:61:C4:63:88:3B:6A:D2:0F
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/KAIoWv8k9G93kmgGYcRjiDtq0g8.roa
sbgp-ipAddrBlock: critical
IPv4:
60.236.0.0/14
Signature Algorithm: sha256WithRSAEncryption
06:85:b5:0f:25:0b:cf:a0:d0:5a:96:d9:a0:e7:02:19:4e:30:
2f:68:5e:43:84:6d:a4:ee:41:33:d4:c2:95:68:84:8c:ae:4d:
8d:b2:65:12:17:5b:1d:11:49:b6:5f:88:87:34:b5:1a:56:61:
57:3c:c5:e0:29:4d:df:c9:7e:3d:dd:99:42:e4:99:f4:92:a0:
1d:d2:77:a7:8c:87:31:da:33:f0:4b:d8:30:94:a8:80:26:1e:
16:c6:6d:b8:52:f9:2d:45:93:3f:41:97:3f:05:88:a2:a1:f0:
23:aa:e5:b1:cb:ca:ef:4b:b9:24:61:f3:ef:6b:39:76:1f:5a:
c2:b1:00:49:00:bf:2d:d0:95:a0:4e:fa:4c:00:eb:96:3f:d9:
c4:66:6c:49:d0:19:9a:26:ae:60:f7:45:ba:4a:e5:c4:5d:cc:
83:c3:fc:b9:e2:13:65:8b:cc:8e:86:7b:84:c2:4c:66:8b:d3:
1b:06:40:20:16:d3:9b:f5:cf:ce:48:cd:f0:df:1d:c1:c9:87:
0c:d3:c7:5b:c9:28:36:64:07:38:1a:0c:0d:51:4c:5e:a3:8c:
49:51:2e:64:e6:d9:c9:a4:4e:15:bc:bb:96:0e:99:11:5c:e0:
32:42:11:e4:0b:4b:f3:fa:13:5e:9f:c0:4c:90:c0:64:d7:6a:
81:a7:9f:51
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzYw
Mjk1Qzg1RkYzN0UyRENGNzVBRjAxNEQ0NEFEM0JGOEMzM0E0MB4XDTIxMDgxODA3
NTQyNFoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoMjgwMjI4NUFGRjI0RjQ2
Rjc3OTI2ODA2NjFDNDYzODgzQjZBRDIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAP6F1hk8LqJjnn8rrY8irCfMNgXbSMGP5vhx0le8bgYYsOS2n/Y7
HEdI3bYCS1inhBQaYPeD3+bQ9dUTIjgUw2JjLJNzcGZD+3hS/LChVV7CR+ysg0Nm
T/b4SXP2w/AqqSYq1+EJld265SgkfggwDTkhYeBjEk8Cw3uol5uhdGz12arZ6wPY
lNLfZ6KoBBXUaxyJ/U3sbF6P2VnatF+l5QMJbWxYGGCHTU13E4nv2ZiunlG+iCL/
DpD9SviBkCckGqMv67sxfXVq1tPalakzpfyfKs7To3ZH4mNZnvt3DjPOsfRFIs2t
bzEGDOkAHD4ZszWFjSeB4SdrdRkLNZsPrMkCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBQoAiha/yT0b3eSaAZhxGOIO2rSDzAfBgNVHSMEGDAWgBR8YClchf834tz3WvAU
1ErTv4wzpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM5L2ZHQXBYSVhfTi1MYzkxcndGTlJLMDctTU02US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZHQXBYSVhfTi1MYzkxcndGTlJLMDct
TU02US5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzkvS0FJb1d2OGs5Rzkza21nR1ljUmppRHRxMGc4LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjzsMA0GCSqGSIb3DQEBCwUAA4IBAQAG
hbUPJQvPoNBaltmg5wIZTjAvaF5DhG2k7kEz1MKVaISMrk2NsmUSF1sdEUm2X4iH
NLUaVmFXPMXgKU3fyX493ZlC5Jn0kqAd0nenjIcx2jPwS9gwlKiAJh4Wxm24Uvkt
RZM/QZc/BYiiofAjquWxy8rvS7kkYfPvazl2H1rCsQBJAL8t0JWgTvpMAOuWP9nE
ZmxJ0BmaJq5g90W6SuXEXcyDw/y54hNli8yOhnuEwkxmi9MbBkAgFtOb9c/OSM3w
3x3ByYcM08dbySg2ZAc4GgwNUUxeo4xJUS5k5tnJpE4VvLuWDpkRXOAyQhHkC0vz
+hNen8BMkMBk12qBp59R
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org