Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZLMLfrii_lUjZQgh117YJUXZUco.roa
File: ZLMLfrii_lUjZQgh117YJUXZUco.roa (raw, json)
Hash identifier: mwWAUFeTqAa9jdsv+pneHcxQ4AgYEkf/VFslzx3WfmI=
Subject key identifier: 64:B3:0B:7E:B8:A2:FE:55:23:65:08:21:D7:5E:D8:25:45:D9:51:CA
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 85
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZLMLfrii_lUjZQgh117YJUXZUco.roa
Signing time: Sat 08 May 2021 04:05:45 +0000
ROA not before: Sat 08 May 2021 04:05:45 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 218.43.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:45 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=64B30B7EB8A2FE5523650821D75ED82545D951CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:58:2f:d5:8c:00:c9:2a:e8:17:e3:be:6d:
07:64:1d:61:cd:8b:31:9b:61:4a:14:c1:56:a8:95:
5f:67:ef:be:dc:fe:4a:78:f7:b4:17:28:d0:11:50:
47:9a:92:66:a2:e2:a5:db:e6:48:5c:05:ed:a3:ac:
a8:4f:30:83:c6:8b:a3:fe:b1:e5:6a:2e:fb:3f:b2:
92:30:33:f1:7f:fb:b5:8c:cd:1c:0c:68:2d:da:9d:
cd:ec:2c:6c:57:a0:7d:92:aa:8e:86:9b:4f:e2:7d:
d9:39:28:93:c1:84:3e:10:96:c2:72:26:62:95:82:
94:19:96:0f:a8:1f:3a:7c:d3:cc:8d:1e:9a:ae:80:
1a:b2:3d:97:76:ed:cd:2e:c4:65:56:8c:62:27:08:
73:16:e3:a7:e7:c8:7b:e6:4c:fa:f2:0a:d8:4c:bf:
cc:d6:b3:8c:24:06:49:67:36:f8:32:91:95:c0:b0:
15:02:fb:34:b8:4b:24:46:0a:6f:b6:fe:8e:eb:3a:
67:23:d2:a2:21:cf:c9:f6:48:6c:24:84:2e:5c:1c:
c5:d2:c6:c5:d8:1a:15:b3:78:4a:3c:5c:42:69:92:
16:78:21:09:0f:a6:e2:8a:ef:d2:d3:4e:36:0c:14:
0e:8b:f9:6f:80:3b:d7:cb:73:23:e4:b4:ab:7c:72:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:0B:7E:B8:A2:FE:55:23:65:08:21:D7:5E:D8:25:45:D9:51:CA
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZLMLfrii_lUjZQgh117YJUXZUco.roa
sbgp-ipAddrBlock: critical
IPv4:
218.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:8c:41:10:eb:1e:f5:4b:66:04:8f:10:d8:6d:ad:d3:42:f2:
12:5e:a9:69:f8:14:f2:b2:26:ba:da:27:64:e8:1a:8e:b6:20:
62:14:6d:bf:74:57:58:97:aa:8b:f7:59:8d:38:46:bd:b9:78:
9c:a8:3d:4c:19:02:b8:73:d2:02:3d:1f:d8:3b:b0:d1:83:f2:
f3:e2:3f:3b:71:fc:18:2b:69:49:2b:40:b1:68:24:26:da:3d:
1e:55:51:1f:4c:5e:14:4e:39:06:ef:c3:7c:57:bb:94:2e:7f:
5f:46:9f:5d:5d:bc:0d:dc:8d:dc:72:f2:b7:49:68:07:40:5f:
31:93:61:1e:4a:31:fa:61:2f:31:7d:b6:97:d4:22:d2:de:79:
3c:cb:f5:19:37:8e:a0:b6:ff:75:6f:89:19:3e:d7:d7:54:e9:
ea:6f:20:99:e3:50:82:c3:03:18:5a:c1:7e:7d:e1:62:71:41:
d6:91:6d:fb:8a:81:b5:ab:9b:10:ab:ad:0f:bb:35:71:28:ed:
5a:1e:3a:20:44:14:22:d1:a0:16:0e:a0:b2:08:aa:3e:ca:71:
e0:f3:bf:aa:7c:82:72:3c:31:44:ba:f4:91:cd:75:69:e1:26:
84:42:7b:c0:bb:69:b0:ea:3e:eb:01:82:74:3c:3e:e1:03:5c:
15:08:bc:67
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMTA1MDgw
NDA1NDVaFw0yMjA0MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDY0QjMwQjdFQjhBMkZF
NTUyMzY1MDgyMUQ3NUVEODI1NDVEOTUxQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1E1gv1YwAySroF+O+bQdkHWHNizGbYUoUwVaolV9n777c/kp4
97QXKNARUEeakmai4qXb5khcBe2jrKhPMIPGi6P+seVqLvs/spIwM/F/+7WMzRwM
aC3anc3sLGxXoH2Sqo6Gm0/ifdk5KJPBhD4QlsJyJmKVgpQZlg+oHzp808yNHpqu
gBqyPZd27c0uxGVWjGInCHMW46fnyHvmTPryCthMv8zWs4wkBklnNvgykZXAsBUC
+zS4SyRGCm+2/o7rOmcj0qIhz8n2SGwkhC5cHMXSxsXYGhWzeEo8XEJpkhZ4IQkP
puKK79LTTjYMFA6L+W+AO9fLcyPktKt8cjAdAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUZLMLfrii/lUjZQgh117YJUXZUcowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL1pMTUxmcmlpX2xValpRZ2gxMTdZSlVYWlVjby5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaKzANBgkqhkiG9w0BAQsFAAOCAQEA
uYxBEOse9UtmBI8Q2G2t00LyEl6pafgU8rImutonZOgajrYgYhRtv3RXWJeqi/dZ
jThGvbl4nKg9TBkCuHPSAj0f2Duw0YPy8+I/O3H8GCtpSStAsWgkJto9HlVRH0xe
FE45Bu/DfFe7lC5/X0afXV28DdyN3HLyt0loB0BfMZNhHkox+mEvMX22l9Qi0t55
PMv1GTeOoLb/dW+JGT7X11Tp6m8gmeNQgsMDGFrBfn3hYnFB1pFt+4qBtaubEKut
D7s1cSjtWh46IEQUItGgFg6gsgiqPspx4PO/qnyCcjwxRLr0kc11aeEmhEJ7wLtp
sOo+6wGCdDw+4QNcFQi8Zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org