Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/i0x89xBEsnkmkqx8rYRGtl1ApFs.roa
File: i0x89xBEsnkmkqx8rYRGtl1ApFs.roa (raw, json)
Hash identifier: 9z4DiXH1meGFVPbIfCUdTp5iTZt6qnJxC1JOYhNzc7s=
Subject key identifier: 8B:4C:7C:F7:10:44:B2:79:26:92:AC:7C:AD:84:46:B6:5D:40:A4:5B
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 64
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/i0x89xBEsnkmkqx8rYRGtl1ApFs.roa
Signing time: Wed 01 Sep 2021 01:30:21 +0000
ROA not before: Wed 01 Sep 2021 01:30:21 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 27.133.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:21 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=8B4C7CF71044B2792692AC7CAD8446B65D40A45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:43:f1:ab:ea:c5:da:70:89:9e:26:49:10:
e6:4d:2c:d2:e6:ea:7d:e0:87:de:59:cd:5c:9f:4d:
db:ed:62:08:e0:77:8c:e5:ae:0b:e6:7f:a8:d4:1b:
50:21:ec:3a:d6:42:20:10:43:53:ef:3b:24:4b:53:
89:19:15:9b:c7:c3:a4:c7:2f:4c:0f:8c:9c:4d:7e:
43:85:70:39:9d:c0:06:66:b0:e8:6d:a2:d9:66:bc:
4f:e4:e1:38:f3:54:87:74:39:22:3c:8c:05:2d:b0:
e2:41:c1:56:1b:fb:3b:12:15:2c:55:1b:bc:f2:31:
57:cf:69:7a:f5:c7:c1:6b:97:c0:7d:0f:a5:1e:53:
4e:a6:1e:ab:8e:94:35:6d:cb:2a:bb:be:49:40:4d:
f5:56:b4:5e:14:c7:8b:45:0f:9d:d8:72:fb:39:f8:
49:f3:65:1d:89:44:eb:02:7a:76:e3:a8:7f:4f:a5:
ab:d5:e8:43:16:f7:9d:5e:c6:e1:91:b3:36:42:7d:
54:4a:7a:89:29:1d:0a:d0:57:96:89:29:ec:d6:96:
63:e7:3a:4e:4a:ce:3a:15:b0:78:16:68:4b:90:33:
e9:39:f7:82:d1:42:9c:15:41:17:c7:8f:2b:5c:b6:
e3:3c:74:41:1e:13:ce:a1:e8:c4:33:ea:c9:20:b9:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:7C:F7:10:44:B2:79:26:92:AC:7C:AD:84:46:B6:5D:40:A4:5B
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/i0x89xBEsnkmkqx8rYRGtl1ApFs.roa
sbgp-ipAddrBlock: critical
IPv4:
27.133.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:26:c5:58:60:b7:99:c0:2d:63:5e:37:d6:10:95:1a:ee:a3:
3a:cb:4e:51:7d:c5:15:29:bf:9e:24:b3:29:17:7a:90:93:3e:
f9:65:3a:46:d1:66:2c:92:ee:4c:6d:d2:79:f8:b9:0a:f0:5e:
30:1e:f9:27:b9:bf:39:12:5b:e4:34:6c:a6:16:ce:90:31:60:
c9:b2:d4:23:31:93:66:a7:d1:12:ef:16:04:68:6a:7e:af:c5:
05:d6:8c:ed:db:bd:68:e1:bc:ae:14:7b:fa:10:5d:a9:99:43:
b0:5d:a6:a0:56:42:2d:a2:ca:e4:ea:ed:c3:c7:14:91:05:4a:
09:3c:30:98:33:54:c3:68:24:bb:2a:6f:e8:0b:38:4b:db:f0:
70:0b:b8:5f:44:a2:11:95:4b:81:9d:84:f0:53:6e:15:70:00:
24:dc:74:eb:1d:d5:ef:db:a4:5c:20:4d:d6:32:e8:40:96:06:
42:2c:ae:62:1c:67:64:83:e8:ad:ae:e9:91:54:0b:a9:7c:51:
08:b0:c5:b9:30:9e:e8:bc:3c:b3:7b:b7:03:fc:0a:89:ab:cb:
ca:cc:a8:e4:3a:91:7e:78:40:5a:90:35:71:5d:b7:4e:4d:fd:
50:77:9a:64:1d:ec:be:41:de:33:e0:b2:77:33:5a:97:0d:f5:
29:35:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:42 2025 by rpki-client