Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/GbZYu97Z7n3SMqkXHppnPFEmewY.roa
File: GbZYu97Z7n3SMqkXHppnPFEmewY.roa (raw, json)
Hash identifier: 6R2J3Am2uGLceFIOtEpYya3T7CW0aboStzg8qbw6dfI=
Subject key identifier: 19:B6:58:BB:DE:D9:EE:7D:D2:32:A9:17:1E:9A:67:3C:51:26:7B:06
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 22
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/GbZYu97Z7n3SMqkXHppnPFEmewY.roa
Signing time: Tue 25 May 2021 02:37:15 +0000
ROA not before: Tue 25 May 2021 02:37:15 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9370
IP address blocks: 2406:ce00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: May 25 02:37:15 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=19B658BBDED9EE7DD232A9171E9A673C51267B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:b5:26:3f:bc:1a:ed:6f:97:7d:72:d3:c3:
e9:65:28:5c:a1:04:74:42:d3:50:85:84:0a:12:78:
8e:f8:d3:b1:31:93:e6:76:d2:86:b4:55:21:1e:3f:
70:e7:6d:aa:bd:46:cd:78:d5:54:5c:0c:27:3a:40:
79:7d:82:57:a8:6b:82:bd:4c:3b:a9:52:a2:79:04:
b4:fa:ae:0b:bb:eb:b5:b7:62:41:2e:5d:79:4a:45:
93:e3:03:39:da:ee:ee:ea:51:d9:bf:31:a1:43:0a:
a2:0b:86:76:b7:81:7d:46:6d:8e:bc:5f:3f:ba:10:
cd:e1:23:27:51:91:3b:cc:ef:fe:45:4b:c3:e9:b1:
e0:43:5b:c0:31:de:c2:d4:26:df:03:a0:c7:09:39:
53:6f:11:e6:b5:71:94:07:e7:48:8d:b4:34:cc:45:
f0:08:f5:5f:75:b0:29:a1:22:c7:8a:f2:6c:16:5c:
9e:76:78:e9:14:43:9d:0e:75:a6:56:b2:97:52:6d:
d7:da:48:29:68:3e:8e:af:29:66:5b:c8:0f:56:94:
8e:a5:61:51:67:11:ea:eb:9c:64:0a:c1:70:7f:e3:
70:db:4f:43:f9:5a:0b:3d:c6:6c:e0:3f:b8:a0:f7:
26:f3:80:1f:e0:2d:ca:86:11:ad:71:2e:a7:44:90:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:58:BB:DE:D9:EE:7D:D2:32:A9:17:1E:9A:67:3C:51:26:7B:06
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/GbZYu97Z7n3SMqkXHppnPFEmewY.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
1c:26:e0:f9:a0:a2:1f:2b:ef:30:1a:c1:62:b9:f9:91:2b:5e:
fc:57:aa:70:47:b5:63:58:16:0a:62:08:e0:e0:1d:f3:59:bd:
34:83:6d:d2:fd:7e:08:0c:07:fe:36:9a:79:d7:76:16:b8:43:
ab:c1:79:d2:48:a7:00:fe:01:90:97:2d:0e:7c:07:6b:d9:7d:
86:5c:05:4a:a2:f8:f1:c5:f6:93:53:ec:cb:d5:92:23:fd:87:
e6:d9:26:a6:61:f0:d7:9b:94:dd:04:6b:9d:50:23:16:de:b9:
91:af:aa:e7:3a:5b:7c:89:f7:d7:86:4c:60:af:83:32:75:42:
2c:58:56:ea:38:40:49:d6:35:da:95:c7:f1:87:b4:0e:31:ec:
f5:f5:e7:00:c5:c1:6c:a9:97:d6:f2:a8:5e:8a:b7:12:fa:5f:
e7:eb:9d:6e:67:ea:14:65:2d:73:0c:f5:a3:15:16:8b:09:6f:
3a:da:dc:e2:eb:ab:7e:d8:5a:60:4f:d7:b6:74:ff:09:09:ac:
b4:68:05:41:04:5e:86:fe:d1:73:cf:73:c5:02:0c:7f:0d:0f:
46:15:7c:3e:2e:f5:62:b6:1a:68:50:4b:f0:23:71:45:25:1d:
4d:e2:0c:2b:59:c2:4f:eb:47:1f:86:46:22:af:0a:09:3b:25:
0f:ec:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:40 2025 by rpki-client