Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/NNI1hMa9_oC26S6bK5t1WgmF-yw.roa
File: NNI1hMa9_oC26S6bK5t1WgmF-yw.roa (raw, json)
Hash identifier: Xr7+9m3xp6Ig/1JDg4yNCwrEoNIhbLn98k84uycZnnc=
Subject key identifier: 34:D2:35:84:C6:BD:FE:80:B6:E9:2E:9B:2B:9B:75:5A:09:85:FB:2C
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: A0
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/NNI1hMa9_oC26S6bK5t1WgmF-yw.roa
Signing time: Tue 01 Feb 2022 01:31:51 +0000
ROA not before: Tue 01 Feb 2022 01:31:51 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 121.103.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:51 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=34D23584C6BDFE80B6E92E9B2B9B755A0985FB2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:68:5c:68:ce:c2:eb:b4:17:c1:61:05:de:
a7:74:34:22:c5:a0:1c:a2:34:da:d1:12:16:32:0a:
81:4e:b3:ea:3a:1e:33:cd:6e:14:22:ba:e4:f8:89:
e2:8b:84:50:8b:c9:5c:72:28:c6:47:af:15:76:17:
b8:fa:0c:ec:35:05:fc:a8:1c:d9:3f:8f:50:5c:ab:
59:00:3c:26:fb:bb:36:6e:e4:a1:26:b6:d3:71:6e:
11:b1:09:9d:94:78:9e:b8:a0:41:e1:30:6e:13:3e:
99:68:26:90:80:50:e8:0a:db:6e:ab:ef:aa:a4:70:
d0:fa:fb:47:60:30:2f:d4:f1:61:ec:69:37:9c:d4:
12:03:92:92:15:c0:da:49:ab:6c:e6:e5:4a:0f:21:
f1:ed:ee:44:0a:96:e7:0f:2c:52:d5:53:e0:0d:95:
91:f5:d0:0d:44:65:f2:78:ce:23:2a:fc:ae:16:a5:
e9:45:82:57:9b:2c:a8:34:26:d7:2a:3e:9e:1b:1f:
e8:a0:90:e5:b8:1c:a2:78:3c:38:71:2c:56:e2:14:
51:c4:de:fc:93:9a:7a:f0:fc:82:93:78:2e:68:58:
56:eb:3b:8f:84:14:b2:95:06:0d:d5:37:32:ac:fd:
7c:63:66:87:5d:06:cc:af:a2:81:38:82:d4:52:4a:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:35:84:C6:BD:FE:80:B6:E9:2E:9B:2B:9B:75:5A:09:85:FB:2C
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/NNI1hMa9_oC26S6bK5t1WgmF-yw.roa
sbgp-ipAddrBlock: critical
IPv4:
121.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:cf:28:86:38:d7:39:e5:9a:76:64:50:87:4b:9f:41:04:03:
b9:4f:0e:b1:29:6b:cd:0d:5c:fa:00:c9:0a:95:05:b8:e8:6d:
08:12:ea:28:32:2e:21:b0:1b:4e:db:40:a0:cb:9b:6e:3e:16:
8a:38:55:07:1a:9e:8c:64:ee:bc:9d:8d:58:66:2c:42:26:25:
ef:2d:b2:46:e5:13:cb:32:d8:98:ac:85:6b:0a:8c:6f:3a:7c:
1f:9b:8d:d3:ba:e2:31:0c:8d:05:d9:b0:c1:1d:e5:cf:63:7d:
47:be:07:04:ed:28:8c:f6:09:af:a4:4f:df:4b:55:30:62:99:
ab:f0:aa:1a:b8:de:75:c4:cb:ef:54:f7:f4:5b:85:93:f8:97:
3b:d7:52:cd:3d:b5:ed:41:1b:1f:96:0a:12:11:2b:f3:68:e4:
27:fd:4b:b7:54:98:f9:dd:a2:ce:98:e3:f5:04:87:dd:2d:75:
b0:c7:e2:9b:4d:ca:6f:bb:48:4a:b2:24:74:ca:32:90:56:ed:
10:9f:9e:43:4b:65:90:60:20:43:08:04:d7:a1:b5:e6:dd:52:
11:79:fd:b3:d9:73:59:78:12:9d:8d:22:eb:f5:a9:05:71:e6:
59:bc:d2:67:2f:0f:16:b2:27:5f:67:e6:d3:63:34:6c:e1:e5:
27:ae:4f:98
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMjAyMDEw
MTMxNTFaFw0yMzAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM0RDIzNTg0QzZCREZF
ODBCNkU5MkU5QjJCOUI3NTVBMDk4NUZCMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN0GhcaM7C67QXwWEF3qd0NCLFoByiNNrREhYyCoFOs+o6HjPN
bhQiuuT4ieKLhFCLyVxyKMZHrxV2F7j6DOw1BfyoHNk/j1Bcq1kAPCb7uzZu5KEm
ttNxbhGxCZ2UeJ64oEHhMG4TPploJpCAUOgK226r76qkcND6+0dgMC/U8WHsaTec
1BIDkpIVwNpJq2zm5UoPIfHt7kQKlucPLFLVU+ANlZH10A1EZfJ4ziMq/K4WpelF
glebLKg0JtcqPp4bH+igkOW4HKJ4PDhxLFbiFFHE3vyTmnrw/IKTeC5oWFbrO4+E
FLKVBg3VNzKs/XxjZoddBsyvooE4gtRSSuJlAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUNNI1hMa9/oC26S6bK5t1WgmF+ywwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9OTkkxaE1hOV9vQzI2UzZiSzV0MVdnbUYteXcucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeWcwDQYJKoZIhvcNAQELBQADggEBAKDP
KIY41znlmnZkUIdLn0EEA7lPDrEpa80NXPoAyQqVBbjobQgS6igyLiGwG07bQKDL
m24+Foo4VQcanoxk7rydjVhmLEImJe8tskblE8sy2JishWsKjG86fB+bjdO64jEM
jQXZsMEd5c9jfUe+BwTtKIz2Ca+kT99LVTBimavwqhq43nXEy+9U9/RbhZP4lzvX
Us09te1BGx+WChIRK/No5Cf9S7dUmPndos6Y4/UEh90tdbDH4ptNym+7SEqyJHTK
MpBW7RCfnkNLZZBgIEMIBNehtebdUhF5/bPZc1l4Ep2NIuv1qQVx5lm80mcvDxay
J19n5tNjNGzh5SeuT5g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:46 2025 by rpki-client