Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/RO4G25ceXYewQ2zkarx9V410gaU.roa
File: RO4G25ceXYewQ2zkarx9V410gaU.roa (raw, json)
Hash identifier: vYttds7nTU2pMdz+1cHIvizSx31JzQqb7Xzvx7kt0Xo=
Subject key identifier: 44:EE:06:DB:97:1E:5D:87:B0:43:6C:E4:6A:BC:7D:57:8D:74:81:A5
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 54
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RO4G25ceXYewQ2zkarx9V410gaU.roa
Signing time: Sun 01 Jan 2023 01:29:30 +0000
ROA not before: Sun 01 Jan 2023 01:29:30 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 160.86.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Jan 1 01:29:30 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=44EE06DB971E5D87B0436CE46ABC7D578D7481A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:b7:a9:c7:4b:ca:9a:16:1a:df:e2:88:c3:
23:6d:09:2d:2a:45:20:df:b7:76:cf:4f:03:4c:32:
d6:c9:b6:51:25:12:3e:5c:3f:87:10:03:fc:19:34:
6e:de:36:b0:ca:90:ae:fe:2b:74:ea:48:17:b0:e9:
8a:de:5b:81:09:74:10:74:aa:ea:87:54:aa:fa:fe:
91:e9:d9:e4:97:11:46:80:e9:49:d1:28:78:fc:a3:
bb:4b:c3:8a:87:e3:3c:82:b8:a5:54:e7:7e:d6:8f:
28:92:b1:96:39:fd:e2:17:f4:56:81:33:78:00:4a:
95:b6:60:42:34:5a:ab:12:e1:b4:30:8a:68:b5:54:
ac:6c:a5:78:b2:86:7f:f4:d8:2d:fd:53:32:ae:82:
90:90:a1:c2:a8:ef:bf:67:b7:f4:79:d1:73:68:26:
cc:0b:49:e7:c3:3a:ac:47:78:e2:39:f6:7e:76:88:
af:c4:e5:66:6e:0a:27:21:0d:68:09:d5:69:a4:de:
4b:04:c6:8a:c1:23:bb:68:be:c0:f1:4b:0d:ff:79:
fd:88:d7:8d:9e:7a:3f:2e:26:07:1f:d8:92:43:8b:
1e:6d:db:75:27:96:4b:3f:b6:47:22:57:74:d1:f5:
56:bc:b4:3a:37:60:65:06:fc:df:1b:80:23:a8:e2:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:06:DB:97:1E:5D:87:B0:43:6C:E4:6A:BC:7D:57:8D:74:81:A5
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RO4G25ceXYewQ2zkarx9V410gaU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:c6:48:1b:e5:cf:ea:be:54:64:a5:97:61:3f:f0:de:20:32:
2c:39:38:d6:c4:f4:04:95:81:cd:b1:63:32:6b:1a:80:2d:86:
85:16:7c:60:13:79:87:af:1e:12:e7:6e:fb:12:62:84:0d:6c:
aa:aa:13:81:86:0f:0d:c8:bd:e9:f2:51:f7:9f:ea:ed:be:aa:
84:03:ee:de:14:fc:0b:b8:d2:e0:57:83:65:41:79:ad:19:49:
ba:71:a9:4d:78:59:2e:db:de:2d:cb:78:4c:25:7b:17:59:d4:
ed:d6:f4:6e:f2:bd:08:97:b9:a2:cd:5f:46:f4:9e:d0:5d:63:
2b:7c:87:7e:24:ab:a9:0f:37:a4:35:fd:e3:ae:8e:fb:92:8f:
4d:58:58:cb:a9:f6:14:5b:12:0f:dd:4a:c8:a5:09:2e:7f:29:
e6:6a:44:50:f5:ac:65:bd:96:5c:81:50:a4:0d:03:35:05:8d:
64:2f:51:50:28:39:48:ee:a3:a7:61:4a:05:fd:7d:3b:ee:5f:
d0:95:2d:31:48:e1:10:49:85:a3:ed:e8:7a:fc:48:d5:7a:0a:
e5:ec:fa:9d:11:a2:39:d5:ff:6b:98:3b:44:45:b4:91:95:a6:
44:fd:f6:09:0b:7c:fe:a2:1c:9e:ee:8a:7f:1b:8d:91:ef:72:
04:44:92:92
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIzMDEwMTAx
MjkzMFoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNDRFRTA2REI5NzFFNUQ4
N0IwNDM2Q0U0NkFCQzdENTc4RDc0ODFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBGt6nHS8qaFhrf4ojDI20JLSpFIN+3ds9PA0wy1sm2USUSPlw/
hxAD/Bk0bt42sMqQrv4rdOpIF7Dpit5bgQl0EHSq6odUqvr+kenZ5JcRRoDpSdEo
ePyju0vDiofjPIK4pVTnftaPKJKxljn94hf0VoEzeABKlbZgQjRaqxLhtDCKaLVU
rGyleLKGf/TYLf1TMq6CkJChwqjvv2e39HnRc2gmzAtJ58M6rEd44jn2fnaIr8Tl
Zm4KJyENaAnVaaTeSwTGisEju2i+wPFLDf95/YjXjZ56Py4mBx/YkkOLHm3bdSeW
Sz+2RyJXdNH1Vry0OjdgZQb83xuAI6jiuYMCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBRE7gbblx5dh7BDbORqvH1XjXSBpTAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzQzL1JPNEcyNWNlWFlld1Eyemthcng5VjQxMGdhVS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCgVjANBgkqhkiG9w0BAQsFAAOCAQEAzsZIG+XP6r5UZKWXYT/w3iAyLDk41sT0
BJWBzbFjMmsagC2GhRZ8YBN5h68eEudu+xJihA1sqqoTgYYPDci96fJR95/q7b6q
hAPu3hT8C7jS4FeDZUF5rRlJunGpTXhZLtveLct4TCV7F1nU7db0bvK9CJe5os1f
RvSe0F1jK3yHfiSrqQ83pDX9466O+5KPTVhYy6n2FFsSD91KyKUJLn8p5mpEUPWs
Zb2WXIFQpA0DNQWNZC9RUCg5SO6jp2FKBf19O+5f0JUtMUjhEEmFo+3oevxI1XoK
5ez6nRGiOdX/a5g7REW0kZWmRP32CQt8/qIcnu6KfxuNke9yBESSkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org