Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/WYoiTef034yqFhrLyffjBE9ESFE.roa
File: WYoiTef034yqFhrLyffjBE9ESFE.roa (raw, json)
Hash identifier: qjzQ/5iPhqiuZxRhPbUIDkbyarXU2jYi7X2A5l6lKR4=
Subject key identifier: 59:8A:22:4D:E7:F4:DF:8C:AA:16:1A:CB:C9:F7:E3:04:4F:44:48:51
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 65
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WYoiTef034yqFhrLyffjBE9ESFE.roa
Signing time: Sat 08 May 2021 04:05:37 +0000
ROA not before: Sat 08 May 2021 04:05:37 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 211.129.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:37 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=598A224DE7F4DF8CAA161ACBC9F7E3044F444851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:76:e2:e7:97:4c:a3:9c:9b:80:e8:05:bb:
4c:26:c4:9b:1e:77:2a:c2:7a:3a:b6:32:f9:26:e0:
fa:ad:2f:8b:d8:b3:5a:07:c8:a2:c1:46:75:85:b2:
89:12:db:80:63:fb:21:98:94:e8:3f:23:88:b7:2c:
b5:b4:5a:84:9d:07:9b:fe:8b:0d:26:19:04:05:20:
34:a4:ad:50:ab:e2:78:0f:d5:43:39:28:80:e0:ce:
05:0f:58:f4:5f:f4:3c:d6:1d:5b:9d:32:e7:d3:9e:
ae:ff:c9:3e:bd:9b:aa:28:5e:8a:f4:b5:52:8f:1a:
47:86:53:2b:d6:e4:d2:52:d0:ac:5c:9e:8f:5b:a2:
f5:e8:9f:13:c9:53:4c:34:36:f2:70:db:e4:cb:31:
40:35:a5:5e:a2:07:55:f7:37:d0:ec:50:52:82:a7:
a2:a5:0e:d0:c3:3a:1c:68:21:15:18:68:b3:f9:85:
62:0c:fd:4f:92:98:5c:1d:37:cc:0b:05:25:81:7a:
14:be:36:2e:e6:1c:1c:2d:b9:d8:bc:c3:89:d1:c4:
ca:22:ea:c0:84:b6:72:83:e7:4e:15:46:28:7c:2e:
ce:cc:6d:1e:2e:c1:8f:be:e7:c9:3f:1b:60:e4:ee:
5d:18:7b:ad:49:54:62:40:55:50:8e:74:79:1f:e5:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:22:4D:E7:F4:DF:8C:AA:16:1A:CB:C9:F7:E3:04:4F:44:48:51
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WYoiTef034yqFhrLyffjBE9ESFE.roa
sbgp-ipAddrBlock: critical
IPv4:
211.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:5a:3c:89:33:d1:ec:0b:09:76:56:05:d0:d6:67:7c:74:5a:
d4:a9:3c:fc:1d:ed:d4:01:e5:d5:f6:cd:91:d7:a8:d5:5c:df:
d8:3f:95:ce:b6:c3:fe:ea:ca:60:10:0a:36:00:6e:37:d0:07:
ae:ee:d3:e8:b8:8c:6f:2f:9b:d2:22:f7:0d:81:18:f7:6f:73:
fd:c4:c8:05:55:14:3d:da:ae:f9:2b:a9:d7:e1:51:28:b0:df:
c3:30:7b:a9:86:f5:33:28:fc:b3:d4:21:63:26:b0:bb:ed:13:
e9:83:0a:6e:1d:92:7c:71:f7:63:f5:3d:d6:88:35:e6:ad:cf:
2a:b5:8d:cb:9a:76:75:2c:78:82:af:84:17:7f:7b:dc:65:84:
16:31:89:41:eb:fc:c8:5e:21:25:32:8b:30:b8:30:78:b4:93:
bf:58:71:f6:9e:e5:5a:a9:4d:8b:02:67:01:90:55:c4:6c:2b:
16:c5:e9:d9:c5:12:e1:85:b1:de:5f:dd:41:a3:fc:04:ac:85:
06:6f:30:ea:4d:3a:48:20:39:4d:f9:62:8d:34:55:20:27:23:
87:5a:9b:af:f1:55:c2:78:9f:67:a9:88:01:16:a9:56:42:4c:
66:4a:3b:6f:2e:eb:1a:20:84:89:0a:65:b9:e4:d8:61:9d:2a:
e8:ca:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:01 2025 by rpki-client