Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa
File: ii2RCXEVO6geL1YRxypnFzdh2CY.roa (raw, json)
Hash identifier: 0RUkWcQcN5AmK8TrFVfiZRnX5pCwn/4mahMrFmiLoQU=
Subject key identifier: 8A:2D:91:09:71:15:3B:A8:1E:2F:56:11:C7:2A:67:17:37:61:D8:26
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 2D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa
Signing time: Sat 01 Jan 2022 01:31:49 +0000
ROA not before: Sat 01 Jan 2022 01:31:49 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 24319
IP address blocks: 124.40.52.208/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Jan 1 01:31:49 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=8A2D910971153BA81E2F5611C72A67173761D826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2a:23:4b:fa:f8:aa:b3:19:e3:8b:d0:e7:18:
25:f2:55:dd:95:5d:6c:12:2a:3c:cb:7d:5c:de:b0:
9a:0f:9a:7b:6b:73:81:7b:d9:fb:0e:d1:a7:ea:ea:
7b:38:8b:a6:b7:fb:f7:1d:39:f4:49:4c:41:7d:23:
82:ff:be:73:f4:2a:aa:01:51:3f:2e:21:d9:3e:59:
fb:53:a2:d8:2b:76:16:e7:5e:d8:b3:43:d7:25:ee:
1c:2e:3a:5a:14:03:73:f4:86:84:f5:70:63:5d:24:
bc:6d:86:cb:b1:19:f8:25:c3:17:37:f7:eb:b7:58:
74:20:aa:dc:80:c8:6f:7d:6b:45:eb:34:b4:ba:cf:
b5:6d:be:75:29:8b:de:58:7b:39:b8:f7:bb:25:f3:
2b:ea:8d:ab:ec:b9:41:c8:98:78:4a:0c:95:d1:ef:
b8:45:70:ff:99:b7:79:06:db:e4:3c:5d:03:b1:75:
ef:08:32:9d:9c:b4:f9:19:bf:d9:39:68:2a:e5:ae:
56:e9:99:e8:1b:57:12:43:b8:3f:e1:a3:1d:0c:11:
0e:1c:8b:fc:2f:15:bf:76:ba:c3:e2:6a:96:6d:c3:
5a:7e:a8:29:ee:be:8b:63:85:32:21:82:69:bd:d8:
02:ba:73:f1:ea:c5:ab:25:8c:73:10:c7:36:61:87:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:91:09:71:15:3B:A8:1E:2F:56:11:C7:2A:67:17:37:61:D8:26
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.52.208/28
Signature Algorithm: sha256WithRSAEncryption
aa:25:ac:13:7f:d0:60:0d:75:a0:3c:9c:09:65:b1:74:c1:18:
fc:ef:34:35:6f:72:31:e7:f6:c2:21:87:2d:34:d6:58:fc:06:
ea:4b:63:d9:0d:c8:c1:6d:84:7b:72:1b:3c:ac:f2:83:ab:d0:
6b:4e:5a:99:3a:54:a9:bf:b3:af:d5:ef:56:9b:5b:9e:a6:ab:
d5:cb:fc:76:89:4d:f3:b7:e1:1a:72:2d:8e:7b:e1:65:f1:a8:
13:d6:50:24:eb:75:10:e6:37:74:cf:e5:46:86:26:d9:2c:37:
b6:7c:7e:59:0d:75:4d:0f:35:36:00:d7:cb:fc:69:c0:fa:cd:
32:84:9e:66:6e:57:9b:92:41:69:b1:af:23:c3:86:10:89:5f:
98:cd:00:f7:c4:d6:6e:24:2c:97:5f:ea:9d:96:fa:ba:ce:45:
ce:6b:e7:9b:da:87:7a:2a:ed:67:74:84:bb:7e:01:0e:4f:22:
96:fe:33:9b:10:72:c0:fb:f2:b3:5c:f5:ba:03:b3:5a:24:3c:
60:c7:11:e5:79:ad:c0:f7:74:5e:5b:f4:73:c0:20:f6:a8:28:
ac:b0:36:06:99:0a:ef:c8:88:9a:10:cd:17:40:ac:5b:33:ce:
95:63:e5:c3:8b:18:89:66:79:0d:da:d0:be:08:4e:0b:9c:1f:
b9:e2:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:51 2025 by rpki-client