Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa
File: slS6PptbnfryV9x9eLyS_a03--s.roa (raw, json)
Hash identifier: /Y0uSPFbOgC/PM80CamqKsnROUeIOotlGTo9V2aIqXc=
Subject key identifier: B2:54:BA:3E:9B:5B:9D:FA:F2:57:DC:7D:78:BC:92:FD:AD:37:FB:EB
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 13
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa
Signing time: Tue 16 Mar 2021 04:50:33 +0000
ROA not before: Tue 16 Mar 2021 04:50:33 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 218.228.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:50:33 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=B254BA3E9B5B9DFAF257DC7D78BC92FDAD37FBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:cf:03:fb:d5:84:6c:f1:82:f1:69:94:88:
ee:bb:77:4c:4c:8c:b7:c4:b8:df:dc:24:3b:c5:7b:
29:73:bc:94:b6:c3:75:03:28:0b:9c:eb:76:80:68:
01:19:72:49:89:50:83:4e:0e:bb:39:f9:aa:7f:a4:
86:c1:f7:25:3d:40:f6:8e:0d:ff:18:25:7b:35:58:
3b:7d:d1:97:81:d7:23:ec:23:8b:ee:da:e7:1b:57:
32:70:89:01:04:9b:be:8a:fe:ab:75:21:c8:a2:02:
c9:d6:46:47:cb:3c:0b:b1:9f:79:05:9c:24:12:4e:
01:6c:96:48:f1:da:d7:04:5f:da:7c:c6:f4:4e:11:
35:2e:f7:83:6d:d9:ef:55:39:18:d8:f1:10:2e:42:
fa:13:b1:7e:b0:45:d6:0b:b9:50:b8:4d:f2:06:0e:
87:25:dc:ad:91:d8:51:6f:3e:77:f7:26:83:0e:87:
11:7c:7d:06:30:05:83:54:66:67:1a:6e:3c:d9:77:
b8:f0:92:ac:03:bf:55:29:3e:ad:80:07:dc:01:d3:
45:5b:8c:af:55:8c:c2:b0:38:32:2e:4f:39:7b:42:
92:d9:7e:34:38:45:25:a6:9f:45:6d:94:ca:5f:b7:
97:34:43:5e:a3:3e:e3:5b:94:72:eb:9f:c9:c0:ff:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:BA:3E:9B:5B:9D:FA:F2:57:DC:7D:78:BC:92:FD:AD:37:FB:EB
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa
sbgp-ipAddrBlock: critical
IPv4:
218.228.0.0/20
Signature Algorithm: sha256WithRSAEncryption
37:e9:de:fb:0d:bc:c6:a3:4f:a8:72:db:ae:54:36:78:2c:d2:
65:a4:58:4d:0b:a8:78:73:d1:cd:f7:fc:18:f7:34:6a:ec:26:
c9:f3:5c:61:91:53:2b:5c:2e:e7:06:bd:ab:81:31:72:23:a2:
e7:0d:ff:d7:13:4f:9d:5e:91:54:ef:e1:52:d1:25:37:e6:f2:
8e:82:cb:fd:0b:15:0c:39:0e:f5:b8:1d:5b:75:6d:76:4b:ab:
54:bb:73:52:8e:d7:9d:d1:67:22:ac:6b:02:e2:92:12:19:b9:
fe:fb:ac:4f:64:19:ca:b1:64:60:2d:69:2f:27:1b:3f:25:9b:
5d:40:fc:e7:89:aa:fb:f7:83:5e:a1:e2:ac:11:c5:b2:20:c1:
d1:55:89:36:81:7f:b3:4d:cc:49:d4:9c:ee:f8:f8:9e:02:b7:
83:91:51:ba:d9:05:e5:e8:80:66:d0:0e:fe:7d:09:0c:d6:a8:
bc:c5:fe:c1:a3:21:9a:b1:e9:6e:40:87:a4:00:f8:23:b4:3c:
f8:96:05:20:77:5e:78:2c:9d:34:38:56:3c:ef:8c:85:88:40:
a8:82:86:d4:64:bf:fa:e1:c3:dc:7a:68:b0:9d:3f:50:5f:a7:
d8:c2:73:e9:2d:d3:05:be:18:8a:ed:f4:52:de:6b:00:75:6d:
ae:7a:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:48 2025 by rpki-client