Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/eaOKiXYfrmxL_M6jh1X_GCnV4kE.roa
File: eaOKiXYfrmxL_M6jh1X_GCnV4kE.roa (raw, json)
Hash identifier: 6bgqEZD+iQ0g9T11JEuiLmUpI5z2wig8uZvgreOu344=
Subject key identifier: 79:A3:8A:89:76:1F:AE:6C:4B:FC:CE:A3:87:55:FF:18:29:D5:E2:41
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 47
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eaOKiXYfrmxL_M6jh1X_GCnV4kE.roa
Signing time: Tue 23 Feb 2021 08:57:34 +0000
ROA not before: Tue 23 Feb 2021 08:57:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 210.156.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=79A38A89761FAE6C4BFCCEA38755FF1829D5E241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:ae:4d:cb:58:e0:0a:92:9c:31:e1:74:83:
72:8d:3a:0e:54:f5:d4:ab:a5:f9:a0:9c:3a:4c:bb:
e2:e6:69:c5:ae:24:c8:71:8c:79:c5:ec:70:f5:e3:
a5:cd:6a:99:3d:11:ab:c4:e2:6c:59:99:06:04:38:
2a:a5:9c:e7:95:6e:65:7d:57:45:78:3b:7e:be:29:
eb:3b:97:ed:3e:55:bf:e4:d2:13:3a:f2:8d:6f:9d:
04:7f:a7:6d:25:e4:eb:6d:e0:9e:52:47:e0:c0:78:
fd:a9:38:ac:c9:e0:9c:6f:15:ac:8c:b1:72:44:20:
b2:ff:79:75:18:73:b4:8d:5a:34:21:32:a3:e8:60:
77:e6:49:8a:4d:3a:ff:62:12:77:fd:d9:fe:42:79:
36:39:6e:99:3f:cb:0e:8b:ea:dc:18:a3:c9:50:76:
ac:a3:cc:99:eb:a2:34:5d:96:ab:6b:41:e0:6a:85:
f1:ac:e0:ec:69:f8:c1:5e:6d:24:1b:ec:e6:b5:c5:
bd:cd:11:1e:2f:5a:85:ea:52:1c:aa:bb:e1:e8:60:
bd:10:f6:16:e4:95:fe:ba:4b:00:6e:aa:9c:02:e5:
ca:31:f3:87:b3:69:c5:3b:40:da:c0:ef:c3:98:6d:
ec:3d:bf:89:2e:40:09:9e:7c:91:b2:35:e0:b2:e6:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:8A:89:76:1F:AE:6C:4B:FC:CE:A3:87:55:FF:18:29:D5:E2:41
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eaOKiXYfrmxL_M6jh1X_GCnV4kE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.156.160.0/20
Signature Algorithm: sha256WithRSAEncryption
62:c0:e6:c1:c2:d9:3d:6f:73:a4:b3:6a:b4:08:97:52:c2:93:
05:43:09:05:a0:a0:06:1e:84:ff:19:e7:d8:59:1c:00:e2:7c:
f9:69:87:ee:0b:bf:f0:03:7b:b3:0e:13:40:a8:9b:f7:4e:83:
da:f7:f5:f5:40:2a:36:a0:80:05:65:e5:e8:69:99:cc:5f:34:
89:a8:68:39:ed:64:24:24:62:ae:24:86:66:a8:21:ec:cf:87:
a2:98:80:0e:37:52:c7:9e:ae:8e:73:4f:78:da:82:ef:5c:20:
4e:49:65:63:b8:d9:37:72:01:70:55:01:a5:cb:f0:f8:93:6b:
1f:7a:b8:12:c3:e3:00:51:6c:bc:4a:2f:f4:bd:b7:b2:16:5d:
dc:28:27:a0:1c:e6:81:f2:24:dc:37:c5:64:65:52:71:74:86:
1e:f3:07:6e:67:7c:92:d7:b0:8a:d7:c2:dd:48:d6:7c:0a:9e:
f5:a2:20:70:01:f2:fd:a8:74:b6:9a:a0:ef:72:0a:0b:7c:34:
77:4a:89:a4:a1:4a:55:29:e2:4e:5a:06:1e:c5:37:58:eb:bc:
f6:a6:f1:df:c5:86:a9:64:9a:31:8e:51:e8:e6:0f:85:65:64:
1b:e5:6d:bd:e7:84:b2:7b:82:0f:35:b4:87:8a:b8:1b:3b:3b:
e8:a0:df:da
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTczNFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzlBMzhBODk3NjFGQUU2
QzRCRkNDRUEzODc1NUZGMTgyOUQ1RTI0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOEnrk3LWOAKkpwx4XSDco06DlT11Kul+aCcOky74uZpxa4kyHGM
ecXscPXjpc1qmT0Rq8TibFmZBgQ4KqWc55VuZX1XRXg7fr4p6zuX7T5Vv+TSEzry
jW+dBH+nbSXk623gnlJH4MB4/ak4rMngnG8VrIyxckQgsv95dRhztI1aNCEyo+hg
d+ZJik06/2ISd/3Z/kJ5NjlumT/LDovq3BijyVB2rKPMmeuiNF2Wq2tB4GqF8azg
7Gn4wV5tJBvs5rXFvc0RHi9ahepSHKq74ehgvRD2FuSV/rpLAG6qnALlyjHzh7Np
xTtA2sDvw5ht7D2/iS5ACZ58kbI14LLmeq0CAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBR5o4qJdh+ubEv8zqOHVf8YKdXiQTAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL2VhT0tpWFlmcm14TF9NNmpoMVhfR0NuVjRrRS5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBATSnKAwDQYJKoZIhvcNAQELBQADggEBAGLA
5sHC2T1vc6SzarQIl1LCkwVDCQWgoAYehP8Z59hZHADifPlph+4Lv/ADe7MOE0Co
m/dOg9r39fVAKjaggAVl5ehpmcxfNImoaDntZCQkYq4khmaoIezPh6KYgA43Usee
ro5zT3jagu9cIE5JZWO42TdyAXBVAaXL8PiTax96uBLD4wBRbLxKL/S9t7IWXdwo
J6Ac5oHyJNw3xWRlUnF0hh7zB25nfJLXsIrXwt1I1nwKnvWiIHAB8v2odLaaoO9y
Cgt8NHdKiaShSlUp4k5aBh7FN1jrvPam8d/FhqlkmjGOUejmD4VlZBvlbb3nhLJ7
gg81tIeKuBs7O+ig39o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:25 2025 by rpki-client