Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/twGldDQ7NkDUps7BebzduTavVLc.roa
File: twGldDQ7NkDUps7BebzduTavVLc.roa (raw, json)
Hash identifier: iP+AQcqeGpWBCfT7jsnvdtO3EJY7wrYKOb5eipRiYEE=
Subject key identifier: B7:01:A5:74:34:3B:36:40:D4:A6:CE:C1:79:BC:DD:B9:36:AF:54:B7
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 06
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/twGldDQ7NkDUps7BebzduTavVLc.roa
Signing time: Tue 01 Feb 2022 10:11:49 +0000
ROA not before: Tue 01 Feb 2022 10:11:49 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 9351
IP address blocks: 157.70.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Feb 1 10:11:49 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=B701A574343B3640D4A6CEC179BCDDB936AF54B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:16:16:6a:ad:c7:44:7e:8d:80:e5:44:ea:
97:4f:44:66:25:00:31:d2:c6:5d:e6:48:8b:bf:a2:
40:5a:c4:83:a3:86:a4:c1:e9:3b:6b:e9:78:30:97:
00:c5:14:69:5c:d9:50:75:11:75:f7:b7:f6:58:ca:
3e:a4:fb:6e:49:11:7c:cf:c3:b2:e8:5c:31:d4:87:
3d:86:cf:fd:29:02:8c:5d:ef:ea:dd:68:05:2d:b9:
26:5f:c4:29:86:26:49:bb:09:05:9e:e2:97:60:43:
05:d7:1f:a8:88:2a:88:fd:68:49:7c:91:f1:08:77:
50:f1:5f:85:e5:ba:14:a7:fe:c5:e9:f7:0e:c3:e5:
4b:92:59:eb:46:b6:4f:7f:a3:39:c3:ef:02:15:22:
9f:8b:ec:7a:5f:b8:01:a5:8f:82:e0:f2:6b:f0:6e:
f4:8b:bc:14:6c:68:63:95:5c:fd:0a:a1:3e:c5:e4:
6d:52:d8:ff:fe:15:11:53:9d:30:08:33:e6:09:03:
51:18:31:0a:21:02:69:5b:e4:9d:67:d3:d8:0f:5f:
3d:15:77:50:c8:df:6e:08:75:84:04:18:e0:ec:db:
98:49:7d:7b:eb:98:d7:31:26:e5:b4:fd:c0:3e:62:
8c:3a:12:94:0a:11:31:e6:8b:1b:78:a8:e3:ff:b8:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:A5:74:34:3B:36:40:D4:A6:CE:C1:79:BC:DD:B9:36:AF:54:B7
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/twGldDQ7NkDUps7BebzduTavVLc.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.160.0/19
Signature Algorithm: sha256WithRSAEncryption
28:ae:28:6d:14:fb:71:d6:d8:5a:1a:fe:64:1d:10:cc:d7:d0:
30:0b:22:04:ae:4f:14:a8:7b:be:98:ff:22:6a:75:0a:8f:41:
6e:fe:cc:06:90:6e:8e:59:bd:1c:2a:45:fe:75:1f:41:0c:90:
65:10:61:9c:02:5b:4f:66:71:d2:df:a7:1e:b6:8f:12:f8:3f:
21:32:20:30:a5:d7:e5:4a:f9:79:6c:e5:7e:e7:ce:f3:bd:c7:
6f:7d:45:d9:bc:a0:da:a7:59:15:ed:82:6a:8d:35:d5:e7:8f:
b2:a1:cb:d3:f8:1c:61:98:1d:78:a7:58:f8:78:31:96:47:f9:
53:64:0f:a1:c3:46:cc:b9:94:6b:be:af:b3:69:90:ac:5f:8d:
60:ed:9d:c5:cb:1e:02:63:66:cf:8f:d5:c0:d3:5e:c9:19:1a:
99:f3:94:7f:33:e0:e0:1c:ec:95:8b:17:15:b9:c1:6d:6b:91:
9c:fa:01:9c:03:65:4d:3c:d0:b6:8f:f1:d4:27:b1:13:62:f2:
c2:a2:67:dd:55:64:5a:f5:07:39:4e:d3:29:62:68:81:bb:ff:
61:8d:ac:43:99:3b:da:c0:2f:ff:69:3c:40:b2:c6:f8:b8:c0:
3e:c1:cf:b5:f1:c7:dd:29:9c:71:6e:8b:f8:53:30:4f:5c:0a:
40:e4:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:09:02 2025 by rpki-client