Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/nOComKblMwoOtMPWQVX5XfXEt0U.roa
File: nOComKblMwoOtMPWQVX5XfXEt0U.roa (raw, json)
Hash identifier: D5wcwGnIe72DjNJjxJ+TPZiMnOYwYtsdb31/rg+FVUE=
Subject key identifier: 9C:E0:A8:98:A6:E5:33:0A:0E:B4:C3:D6:41:55:F9:5D:F5:C4:B7:45
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 29
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/nOComKblMwoOtMPWQVX5XfXEt0U.roa
Signing time: Wed 18 Aug 2021 07:54:22 +0000
ROA not before: Wed 18 Aug 2021 07:54:22 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 122.130.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Aug 18 07:54:22 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=9CE0A898A6E5330A0EB4C3D64155F95DF5C4B745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:a5:22:2e:3b:f0:b8:74:7d:eb:98:50:4a:
8a:e2:c5:20:37:9d:0a:3e:44:ee:24:6c:8c:e5:2b:
1a:16:7a:48:90:4b:84:90:2e:97:69:de:4e:b6:dd:
d9:ec:f4:c8:6a:6b:92:b1:52:50:77:24:e2:22:5d:
6a:bf:4a:11:f6:26:8d:e0:42:1e:49:a9:2b:40:df:
31:03:70:67:cd:ec:37:3f:ef:fe:f0:b8:0b:fc:3e:
7e:03:f4:54:f5:f0:53:b5:9a:8f:54:cf:72:6a:80:
c7:d7:90:cd:e5:8d:c2:ac:4e:89:9d:8b:01:12:a6:
a0:da:eb:96:21:ed:37:1e:8b:32:9d:e6:52:bd:0c:
ef:7c:2a:b1:6a:ca:ae:d5:ec:f1:0b:6d:d0:67:f0:
d1:a8:7b:8b:9c:33:d1:99:0d:be:e2:de:ea:4a:86:
8f:c5:54:44:ab:4d:9c:16:c4:24:19:f4:ba:db:4c:
b4:cf:66:a6:ad:5f:2b:11:7c:c8:ea:c0:62:fc:23:
71:46:ab:77:ba:8d:d9:5c:26:06:08:3e:07:52:6b:
e2:e1:3b:30:23:52:2b:9a:ce:fa:62:1a:e4:e9:57:
c1:87:02:81:ca:ba:89:fe:0c:af:d8:06:3b:d5:a4:
4d:c2:b4:fe:8f:92:f3:8d:92:2b:d0:04:d9:36:d2:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:A8:98:A6:E5:33:0A:0E:B4:C3:D6:41:55:F9:5D:F5:C4:B7:45
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/nOComKblMwoOtMPWQVX5XfXEt0U.roa
sbgp-ipAddrBlock: critical
IPv4:
122.130.0.0/15
Signature Algorithm: sha256WithRSAEncryption
76:ec:7c:39:e1:da:3f:2c:c6:62:eb:aa:32:15:20:de:1d:63:
9b:bf:7c:21:dc:22:c1:b4:cd:5a:d0:1e:ce:98:6e:ec:01:9e:
66:18:c4:c9:54:75:30:0b:2b:a8:b1:d6:03:e4:fc:45:31:71:
f3:82:04:ce:90:54:0e:2a:c8:80:05:f5:b8:26:65:ff:a1:b1:
14:c9:24:c2:99:2e:f0:0c:43:9d:1d:68:05:f3:d4:3c:11:cc:
08:8d:6b:74:10:2d:80:11:63:35:15:50:6c:83:2b:3c:73:36:
bd:09:ff:d4:fe:be:8b:54:ae:0c:97:d5:ab:f7:5a:90:7a:76:
7f:d5:02:d0:51:63:39:92:57:30:a9:cc:31:c6:77:13:5b:0e:
ed:f4:65:41:61:72:4d:14:ab:36:3c:be:09:e9:fd:82:2d:98:
09:80:bb:2d:4f:c0:de:63:03:f1:2c:1e:df:f5:71:00:ea:88:
14:4f:79:01:1e:e8:77:50:25:30:4c:7e:c8:fd:fb:4c:7a:d1:
09:83:0d:52:d4:42:43:fe:69:bf:40:a0:b4:6c:2a:fa:5b:65:
9f:9f:fa:73:5a:ca:3a:cf:19:c4:0a:c2:d7:2b:37:a0:fa:10:
7d:83:01:38:46:b7:4b:f1:7d:36:ca:ab:a4:3f:2e:09:eb:56:
be:34:46:15
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzYw
Mjk1Qzg1RkYzN0UyRENGNzVBRjAxNEQ0NEFEM0JGOEMzM0E0MB4XDTIxMDgxODA3
NTQyMloXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoOUNFMEE4OThBNkU1MzMw
QTBFQjRDM0Q2NDE1NUY5NURGNUM0Qjc0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOo6pSIuO/C4dH3rmFBKiuLFIDedCj5E7iRsjOUrGhZ6SJBLhJAu
l2neTrbd2ez0yGprkrFSUHck4iJdar9KEfYmjeBCHkmpK0DfMQNwZ83sNz/v/vC4
C/w+fgP0VPXwU7Waj1TPcmqAx9eQzeWNwqxOiZ2LARKmoNrrliHtNx6LMp3mUr0M
73wqsWrKrtXs8Qtt0Gfw0ah7i5wz0ZkNvuLe6kqGj8VURKtNnBbEJBn0uttMtM9m
pq1fKxF8yOrAYvwjcUard7qN2VwmBgg+B1Jr4uE7MCNSK5rO+mIa5OlXwYcCgcq6
if4Mr9gGO9WkTcK0/o+S842SK9AE2TbSTlcCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBSc4KiYpuUzCg60w9ZBVfld9cS3RTAfBgNVHSMEGDAWgBR8YClchf834tz3WvAU
1ErTv4wzpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM5L2ZHQXBYSVhfTi1MYzkxcndGTlJLMDctTU02US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZHQXBYSVhfTi1MYzkxcndGTlJLMDct
TU02US5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85Mzkvbk9Db21LYmxNd29PdE1QV1FWWDVYZlhFdDBVLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXqCMA0GCSqGSIb3DQEBCwUAA4IBAQB2
7Hw54do/LMZi66oyFSDeHWObv3wh3CLBtM1a0B7OmG7sAZ5mGMTJVHUwCyuosdYD
5PxFMXHzggTOkFQOKsiABfW4JmX/obEUySTCmS7wDEOdHWgF89Q8EcwIjWt0EC2A
EWM1FVBsgys8cza9Cf/U/r6LVK4Ml9Wr91qQenZ/1QLQUWM5klcwqcwxxncTWw7t
9GVBYXJNFKs2PL4J6f2CLZgJgLstT8DeYwPxLB7f9XEA6ogUT3kBHuh3UCUwTH7I
/ftMetEJgw1S1EJD/mm/QKC0bCr6W2Wfn/pzWso6zxnECsLXKzeg+hB9gwE4RrdL
8X02yqukPy4J61a+NEYV
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:00 2025 by rpki-client