Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dryZClklmoT1RXz-SDWbaYwZ1sA.roa
File: dryZClklmoT1RXz-SDWbaYwZ1sA.roa (raw, json)
Hash identifier: 2bPTj0l6ALMxFM60ZjMv3fTSOFWEPlEtYq5chA1kM5s=
Subject key identifier: 76:BC:99:0A:59:25:9A:84:F5:45:7C:FE:48:35:9B:69:8C:19:D6:C0
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 7D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dryZClklmoT1RXz-SDWbaYwZ1sA.roa
Signing time: Sat 08 May 2021 04:05:43 +0000
ROA not before: Sat 08 May 2021 04:05:43 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 153.192.0.0/11 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:43 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=76BC990A59259A84F5457CFE48359B698C19D6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:59:74:2f:0a:f7:38:e2:71:31:a5:74:ab:
67:fc:20:42:df:be:b7:09:4b:55:39:53:76:f2:96:
8b:17:6f:18:75:1a:b7:9c:ae:ed:52:bd:c4:09:61:
74:2c:88:e4:b9:75:d5:bf:67:b8:8a:31:0d:6f:8b:
ac:da:92:90:c2:56:48:d1:a0:43:3d:79:84:46:40:
d1:18:8a:18:d8:3b:af:12:0d:db:e5:f5:d3:68:d4:
b5:1f:1c:3f:8c:0d:03:3d:51:c4:c4:43:d0:2a:93:
63:47:b8:db:2c:b3:fc:02:1b:d6:91:fb:d0:14:ff:
d4:b5:a0:6d:92:e7:28:36:a1:07:32:a5:c8:b5:4b:
7d:38:2f:8e:78:76:88:7d:05:72:6b:6a:b2:5b:e2:
90:bf:de:fb:90:c6:8c:ff:f2:97:48:31:f3:2e:55:
ec:e9:f9:65:11:9c:6f:51:fa:c1:93:4a:d9:69:47:
7a:84:16:ca:86:31:b4:1d:c8:de:08:63:0c:0d:e6:
f4:fc:53:27:04:b3:90:11:b6:4a:75:49:b2:b6:81:
5c:f8:29:21:92:ab:e2:cf:46:bd:f3:72:c1:28:e2:
ab:0d:28:83:85:8b:1a:95:cd:a2:0f:e7:b1:fd:4e:
c8:a5:4f:de:c1:78:07:4b:77:b2:6f:33:ed:eb:66:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:99:0A:59:25:9A:84:F5:45:7C:FE:48:35:9B:69:8C:19:D6:C0
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dryZClklmoT1RXz-SDWbaYwZ1sA.roa
sbgp-ipAddrBlock: critical
IPv4:
153.192.0.0/11
Signature Algorithm: sha256WithRSAEncryption
98:74:18:fa:a8:1c:41:81:f3:24:90:f3:5c:ad:33:9b:33:f1:
30:ca:ba:80:9d:73:7d:a8:ec:ea:73:cc:d1:20:a2:78:99:81:
a3:4b:44:94:e3:d6:31:60:56:a8:2f:84:5e:6d:c2:01:6a:51:
9d:b0:74:d4:59:dc:b4:ed:dd:72:aa:0f:cf:12:b6:e6:3a:4f:
a3:7b:80:bd:dd:77:24:20:fd:4a:33:d0:31:3b:33:99:3f:0f:
6d:7b:57:b2:39:38:36:76:c0:3c:51:17:11:c0:c6:83:8c:c2:
41:d7:0a:1e:9d:de:1d:be:10:4f:1c:e0:ad:ca:ce:a1:00:8a:
04:d2:90:dd:75:68:c6:4e:2a:cd:1e:cf:39:14:4d:f7:55:f8:
3f:cf:83:33:fa:dc:13:51:45:13:e9:da:d0:55:9b:44:75:49:
df:65:bf:19:8d:02:1a:07:b3:c8:f5:64:0a:55:44:eb:15:c5:
b2:37:06:9a:5d:af:be:18:cf:f2:77:80:d4:0f:8d:90:0a:aa:
fa:04:c6:2e:d9:68:02:e9:24:bd:79:04:d0:06:1a:e6:31:4d:
69:80:b4:37:f9:76:4f:6e:75:18:f5:fc:78:1a:a4:fe:8c:9f:
5a:51:78:1e:6a:b9:2d:8b:7a:fd:d7:cc:f8:25:14:9e:c2:7c:
40:83:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:39 2025 by rpki-client