Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lcGvcNDuCihx-bkEBJxjx0xnf-U.roa
File: lcGvcNDuCihx-bkEBJxjx0xnf-U.roa (raw, json)
Hash identifier: YcO9Qbl81/Qa67wEdUWa4dY44CTfZ4HfyeJk+pDzqJs=
Subject key identifier: 95:C1:AF:70:D0:EE:0A:28:71:F9:B9:04:04:9C:63:C7:4C:67:7F:E5
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 52
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lcGvcNDuCihx-bkEBJxjx0xnf-U.roa
Signing time: Tue 23 Feb 2021 08:57:38 +0000
ROA not before: Tue 23 Feb 2021 08:57:38 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 103.2.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:38 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=95C1AF70D0EE0A2871F9B904049C63C74C677FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:6b:25:c9:06:8b:99:86:ae:00:b3:fc:7c:
4f:34:d7:f1:52:2f:11:97:aa:cf:e6:09:94:24:3b:
f6:74:5d:99:e9:e6:d8:4c:fc:50:71:6d:6b:a2:cd:
c5:ed:37:34:9c:cc:7d:91:2a:2c:48:7a:25:85:e1:
ec:29:cf:ee:1b:dd:b3:d4:4c:ab:7b:34:1e:08:38:
fb:eb:f2:40:64:79:89:f3:db:86:84:fa:98:fb:1f:
0e:ff:c6:f0:7c:0c:59:64:bc:0a:1e:b0:ea:56:8a:
40:f1:e3:fa:a2:c4:61:83:98:c4:15:ca:da:2a:07:
85:6a:3e:d9:33:e7:ce:c1:3e:1e:56:d5:db:73:22:
cb:c1:71:2c:9a:a3:35:be:15:4f:7d:df:9e:ba:1a:
ec:3d:66:cd:3e:12:f4:c1:6a:5f:8d:f0:b2:71:01:
86:52:fb:2c:eb:c5:f2:ed:ac:02:48:80:d0:07:54:
e7:6a:d9:66:fc:7d:31:51:61:43:11:98:1c:be:78:
89:46:03:5f:b6:c8:8f:90:8a:72:84:6c:bb:40:13:
be:11:35:5a:8f:71:0f:99:f0:b8:c2:1d:1f:37:9a:
d9:5b:83:89:5b:df:1f:9e:70:dc:29:3e:49:36:e2:
14:98:34:e9:e4:3a:79:b6:ae:22:d8:99:08:92:09:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:AF:70:D0:EE:0A:28:71:F9:B9:04:04:9C:63:C7:4C:67:7F:E5
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lcGvcNDuCihx-bkEBJxjx0xnf-U.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.48.0/22
Signature Algorithm: sha256WithRSAEncryption
be:9f:6d:dd:67:5b:79:88:17:5d:03:16:c1:e2:b8:7c:2a:ab:
73:81:68:84:78:d7:f1:1d:24:19:d5:a7:21:de:fc:2f:55:07:
21:05:fd:b0:2e:24:fb:ed:25:42:41:b8:29:8d:01:63:10:33:
00:19:13:2f:01:14:62:b3:d1:d2:d3:0c:eb:7c:02:49:b7:09:
2d:44:1e:c1:5c:8f:d6:2c:9f:eb:55:7a:ce:0f:e5:ca:12:ac:
0b:a8:e6:b3:27:ee:ff:3f:b3:d1:16:cb:14:83:7c:a7:c3:8b:
6c:3f:93:6c:d8:fc:86:71:78:0d:de:07:09:3c:fa:8d:73:c6:
9b:2c:e0:9d:78:0a:d2:ed:7d:e4:ef:6d:78:c5:29:0a:e0:0b:
e4:78:30:cf:76:23:1a:d4:cc:9f:22:23:ac:c4:1f:ba:e9:74:
55:3f:b6:d1:4a:77:8f:50:f0:93:28:32:74:0c:b5:b1:38:19:
52:06:62:e7:a9:d7:49:dc:9b:b9:bb:7b:d9:cb:f8:f2:53:2e:
a4:77:a1:49:d4:17:7f:70:8f:a0:75:42:28:c4:90:e8:18:37:
7b:9f:4b:1e:d8:f8:4f:2a:17:0b:20:39:9b:f3:db:42:46:2d:
61:3d:8e:6a:81:07:5f:41:06:e4:fb:e9:38:4a:ae:5e:88:7d:
82:52:06:82
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTczOFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoOTVDMUFGNzBEMEVFMEEy
ODcxRjlCOTA0MDQ5QzYzQzc0QzY3N0ZFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAqayXJBouZhq4As/x8TzTX8VIvEZeqz+YJlCQ79nRdmenm2Ez8
UHFta6LNxe03NJzMfZEqLEh6JYXh7CnP7hvds9RMq3s0Hgg4++vyQGR5ifPbhoT6
mPsfDv/G8HwMWWS8Ch6w6laKQPHj+qLEYYOYxBXK2ioHhWo+2TPnzsE+HlbV23Mi
y8FxLJqjNb4VT33fnroa7D1mzT4S9MFqX43wsnEBhlL7LOvF8u2sAkiA0AdU52rZ
Zvx9MVFhQxGYHL54iUYDX7bIj5CKcoRsu0ATvhE1Wo9xD5nwuMIdHzea2VuDiVvf
H55w3Ck+STbiFJg06eQ6ebauItiZCJIJQXUCAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBSVwa9w0O4KKHH5uQQEnGPHTGd/5TAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL2xjR3ZjTkR1Q2loeC1ia0VCSnhqeDB4bmYtVS5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnAjAwDQYJKoZIhvcNAQELBQADggEBAL6f
bd1nW3mIF10DFsHiuHwqq3OBaIR41/EdJBnVpyHe/C9VByEF/bAuJPvtJUJBuCmN
AWMQMwAZEy8BFGKz0dLTDOt8Akm3CS1EHsFcj9Ysn+tVes4P5coSrAuo5rMn7v8/
s9EWyxSDfKfDi2w/k2zY/IZxeA3eBwk8+o1zxpss4J14CtLtfeTvbXjFKQrgC+R4
MM92IxrUzJ8iI6zEH7rpdFU/ttFKd49Q8JMoMnQMtbE4GVIGYuep10ncm7m7e9nL
+PJTLqR3oUnUF39wj6B1QijEkOgYN3ufSx7Y+E8qFwsgOZvz20JGLWE9jmqBB19B
BuT76ThKrl6IfYJSBoI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:45:58 2025 by rpki-client