Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/K1_WwnFbeZxH4ihybe6diEewEJE.roa
File: K1_WwnFbeZxH4ihybe6diEewEJE.roa (raw, json)
Hash identifier: oo7uiT3Eonp02g9gjvaqRXtcIWdMLLNlwldw4VVnf7Q=
Subject key identifier: 2B:5F:D6:C2:71:5B:79:9C:47:E2:28:72:6D:EE:9D:88:47:B0:10:91
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 4D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/K1_WwnFbeZxH4ihybe6diEewEJE.roa
Signing time: Tue 23 Feb 2021 08:57:36 +0000
ROA not before: Tue 23 Feb 2021 08:57:36 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 118.238.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:36 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=2B5FD6C2715B799C47E228726DEE9D8847B01091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:04:14:5d:e9:67:a2:0e:2e:eb:dc:0c:b3:
b4:d2:0d:1a:c0:7c:d6:2b:1c:e6:53:12:06:79:1f:
c1:92:60:c7:82:46:a2:0d:d6:7d:f1:bf:17:cc:ac:
35:ea:63:11:8f:59:37:f1:2a:05:a0:ac:5e:69:48:
04:fd:2f:f3:02:aa:69:88:dd:a2:4a:aa:ef:d2:19:
ce:4e:02:8d:34:06:a4:42:68:7d:5a:b2:25:6e:91:
a6:85:1a:17:97:6d:dd:82:06:57:13:45:91:3d:ed:
8a:f5:0d:5c:f7:26:b3:0e:77:83:96:86:43:ba:a3:
b0:b4:e3:6b:92:35:5c:84:84:fb:41:07:d1:ea:6c:
30:6a:f9:82:91:5a:29:06:72:cc:d5:e3:29:74:7f:
63:fd:13:c7:7c:5f:38:c7:0e:a1:cd:aa:74:4d:ac:
97:9a:c2:12:aa:57:b8:1e:51:b4:b6:77:3b:2d:6f:
81:81:f2:3e:41:1d:06:c4:66:37:68:f8:1e:e8:d0:
22:89:85:10:8d:5d:c8:8b:e5:3b:7d:c6:71:f1:15:
42:31:f3:cf:ed:e0:56:5b:cc:40:72:99:9b:cb:99:
ae:30:26:a2:db:1c:74:31:34:30:20:15:72:a9:64:
74:54:dc:16:6a:4c:8d:aa:db:0c:84:d2:26:9e:d2:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:D6:C2:71:5B:79:9C:47:E2:28:72:6D:EE:9D:88:47:B0:10:91
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/K1_WwnFbeZxH4ihybe6diEewEJE.roa
sbgp-ipAddrBlock: critical
IPv4:
118.238.0.0/17
Signature Algorithm: sha256WithRSAEncryption
bd:b4:d0:8e:78:bd:79:1c:a6:1e:0a:d2:54:21:6a:f5:59:d3:
2d:db:3e:d0:13:64:7e:33:40:f9:cd:b6:62:2a:5e:a3:bb:3a:
1a:7c:b0:d1:b2:47:f7:a2:b1:8f:a3:58:ca:14:0a:db:cf:1b:
89:fc:83:2a:9a:40:ac:a2:b1:a0:b1:61:9c:3b:c4:d6:72:0a:
30:ba:c3:d8:95:1f:6d:fe:29:7b:a9:80:0d:ac:69:28:88:75:
f4:71:1b:46:1a:75:c0:1a:e0:75:4c:bf:61:bb:de:d5:d9:4c:
27:7d:bf:bd:81:47:99:19:22:cc:2b:02:3b:3f:86:88:d6:2b:
c9:bf:53:df:49:68:f5:07:27:9e:01:58:3a:27:9f:c8:8d:e0:
14:98:fa:3c:9e:ab:e4:96:4c:f6:91:6a:a8:91:cf:20:65:3b:
31:c2:7f:59:8e:90:54:96:7c:c1:91:95:01:7d:04:2c:22:26:
28:b6:b2:ad:9c:51:bd:84:2c:c1:2b:dc:00:5a:82:37:d0:d4:
d4:3e:7f:ce:db:7c:63:f7:d9:fc:07:ad:f6:e4:46:48:e8:13:
66:f1:9e:a3:54:0f:79:a6:94:eb:c0:19:97:85:65:df:75:23:
59:fd:e9:77:5a:71:69:f0:9a:10:20:8c:7c:b2:3a:0e:1e:07:
93:ef:a5:ef
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTczNloXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMkI1RkQ2QzI3MTVCNzk5
QzQ3RTIyODcyNkRFRTlEODg0N0IwMTA5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALL7BBRd6WeiDi7r3AyztNINGsB81isc5lMSBnkfwZJgx4JGog3W
ffG/F8ysNepjEY9ZN/EqBaCsXmlIBP0v8wKqaYjdokqq79IZzk4CjTQGpEJofVqy
JW6RpoUaF5dt3YIGVxNFkT3tivUNXPcmsw53g5aGQ7qjsLTja5I1XISE+0EH0eps
MGr5gpFaKQZyzNXjKXR/Y/0Tx3xfOMcOoc2qdE2sl5rCEqpXuB5RtLZ3Oy1vgYHy
PkEdBsRmN2j4HujQIomFEI1dyIvlO33GcfEVQjHzz+3gVlvMQHKZm8uZrjAmotsc
dDE0MCAVcqlkdFTcFmpMjarbDITSJp7S5M8CAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBQrX9bCcVt5nEfiKHJt7p2IR7AQkTAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0sxX1d3bkZiZVp4SDRpaHliZTZkaUVld0VKRS5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAd27gAwDQYJKoZIhvcNAQELBQADggEBAL20
0I54vXkcph4K0lQhavVZ0y3bPtATZH4zQPnNtmIqXqO7Ohp8sNGyR/eisY+jWMoU
CtvPG4n8gyqaQKyisaCxYZw7xNZyCjC6w9iVH23+KXupgA2saSiIdfRxG0YadcAa
4HVMv2G73tXZTCd9v72BR5kZIswrAjs/hojWK8m/U99JaPUHJ54BWDonn8iN4BSY
+jyeq+SWTPaRaqiRzyBlOzHCf1mOkFSWfMGRlQF9BCwiJii2sq2cUb2ELMEr3ABa
gjfQ1NQ+f87bfGP32fwHrfbkRkjoE2bxnqNUD3mmlOvAGZeFZd91I1n96XdacWnw
mhAgjHyyOg4eB5Pvpe8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client