Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Yzev0dc4lo_FfNHsPMC80Jhcvj8.roa
File: Yzev0dc4lo_FfNHsPMC80Jhcvj8.roa (raw, json)
Hash identifier: KKl7SPcaFYafUgqNSRkmPIbTwnaYNpBrlwk2HUslEks=
Subject key identifier: 63:37:AF:D1:D7:38:96:8F:C5:7C:D1:EC:3C:C0:BC:D0:98:5C:BE:3F
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 80
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Yzev0dc4lo_FfNHsPMC80Jhcvj8.roa
Signing time: Tue 01 Feb 2022 01:31:14 +0000
ROA not before: Tue 01 Feb 2022 01:31:14 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 219.111.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:14 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=6337AFD1D738968FC57CD1EC3CC0BCD0985CBE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3e:39:30:82:79:3b:3b:9d:aa:fa:0e:a5:2d:
db:a8:e5:f9:53:ea:6e:cc:0f:64:79:b6:ab:56:4b:
dc:fb:97:e0:67:0f:4a:77:44:86:00:a1:05:45:b1:
1c:31:38:85:3d:3e:2c:28:41:05:da:7c:a5:07:0d:
23:3c:f3:c0:37:f2:24:41:46:9c:7f:92:56:61:54:
b6:93:6c:77:78:1a:36:52:98:bc:87:f9:3f:bb:5b:
09:b6:06:1b:33:c3:7c:a1:69:12:c4:42:4c:5c:9c:
2c:30:53:45:2e:3b:c2:6c:62:9f:aa:13:29:d2:84:
15:15:c0:a9:64:22:1a:ff:74:e3:9c:56:29:31:1c:
e4:80:40:0d:3b:5c:96:25:37:91:e5:68:22:ed:ad:
9d:ff:b9:a6:3d:94:b6:5b:25:ac:0e:ee:46:6a:29:
8f:6f:a2:3a:3a:07:90:d4:e0:39:93:6f:a1:00:48:
c3:6e:f4:7e:bc:7b:bb:9b:3b:ae:86:bd:c9:22:5e:
12:03:dc:71:82:4d:c1:31:11:e3:2d:fc:b2:c7:ee:
7e:b6:45:95:88:c1:a0:2b:4b:af:45:be:62:d1:81:
6e:dd:92:a6:e6:f6:ed:2f:8e:a1:f0:26:1e:4e:a4:
bf:91:d3:88:96:49:d7:98:ff:f9:ab:f5:ea:db:5c:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:AF:D1:D7:38:96:8F:C5:7C:D1:EC:3C:C0:BC:D0:98:5C:BE:3F
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Yzev0dc4lo_FfNHsPMC80Jhcvj8.roa
sbgp-ipAddrBlock: critical
IPv4:
219.111.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:ed:6b:79:5b:5b:d7:69:eb:de:85:62:5d:92:48:23:f9:f1:
5e:32:2a:91:e1:12:d5:60:77:98:75:9b:12:05:64:34:51:f9:
e5:8b:7b:dc:08:2a:84:a0:5c:79:55:b7:fc:93:f6:42:19:87:
55:eb:e9:3c:98:04:e1:c7:14:9c:2e:c6:7d:eb:8d:11:26:55:
1b:7e:88:1f:6c:62:d4:7e:27:db:25:9d:aa:55:07:d5:ab:15:
5f:45:eb:8b:5b:ef:96:6b:83:44:c4:db:e0:8f:f4:81:4e:47:
e7:dd:ca:07:0c:42:f5:dd:ce:f9:b3:f8:e5:8b:55:83:ae:bf:
8b:52:13:08:f6:2c:95:fe:dc:a0:1b:e1:c1:b3:60:8b:ba:98:
0b:dd:4f:59:dd:95:a0:0e:87:35:93:3e:39:8b:b4:6d:af:bc:
22:f8:7f:1b:cb:fb:9d:5f:9a:39:15:11:25:6d:63:98:6a:3f:
d9:99:3a:bc:61:8f:d4:c3:0a:4d:cd:5a:0f:15:46:a5:4f:ff:
20:f5:48:8b:4d:27:3a:f8:24:fb:8b:8c:6a:22:66:e6:2e:3b:
56:e0:54:5b:8b:c9:11:86:23:0d:63:1d:dc:86:a0:73:fb:56:
43:8d:14:6e:84:79:76:38:5d:37:aa:8a:1e:a1:8f:fc:37:b0:
75:9f:ff:98
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMjAyMDEw
MTMxMTRaFw0yMzAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYzMzdBRkQxRDczODk2
OEZDNTdDRDFFQzNDQzBCQ0QwOTg1Q0JFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4Pjkwgnk7O52q+g6lLduo5flT6m7MD2R5tqtWS9z7l+BnD0p3
RIYAoQVFsRwxOIU9PiwoQQXafKUHDSM888A38iRBRpx/klZhVLaTbHd4GjZSmLyH
+T+7Wwm2Bhszw3yhaRLEQkxcnCwwU0UuO8JsYp+qEynShBUVwKlkIhr/dOOcVikx
HOSAQA07XJYlN5HlaCLtrZ3/uaY9lLZbJawO7kZqKY9vojo6B5DU4DmTb6EASMNu
9H68e7ubO66GvckiXhID3HGCTcExEeMt/LLH7n62RZWIwaArS69FvmLRgW7dkqbm
9u0vjqHwJh5OpL+R04iWSdeY//mr9erbXLBFAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUYzev0dc4lo/FfNHsPMC80Jhcvj8wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9ZemV2MGRjNGxvX0ZmTkhzUE1DODBKaGN2ajgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG22+AMA0GCSqGSIb3DQEBCwUAA4IBAQBd
7Wt5W1vXaevehWJdkkgj+fFeMiqR4RLVYHeYdZsSBWQ0Ufnli3vcCCqEoFx5Vbf8
k/ZCGYdV6+k8mAThxxScLsZ9640RJlUbfogfbGLUfifbJZ2qVQfVqxVfReuLW++W
a4NExNvgj/SBTkfn3coHDEL13c75s/jli1WDrr+LUhMI9iyV/tygG+HBs2CLupgL
3U9Z3ZWgDoc1kz45i7Rtr7wi+H8by/udX5o5FRElbWOYaj/ZmTq8YY/UwwpNzVoP
FUalT/8g9UiLTSc6+CT7i4xqImbmLjtW4FRbi8kRhiMNYx3chqBz+1ZDjRRuhHl2
OF03qooeoY/8N7B1n/+Y
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:21:15 2025 by rpki-client