Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30215/IhOOT4ccIiv7eBqmDc-sos9fCk4.roa
File: IhOOT4ccIiv7eBqmDc-sos9fCk4.roa (raw, json)
Hash identifier: 34oftAsae3x8YflhvTQkAXdMy2Jrt74d1V7Tc2XBzpA=
Subject key identifier: 22:13:8E:4F:87:1C:22:2B:FB:78:1A:A6:0D:CF:AC:A2:CF:5F:0A:4E
Certificate issuer: /CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Certificate serial: 1C
Authority key identifier: 0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/IhOOT4ccIiv7eBqmDc-sos9fCk4.roa
Signing time: Tue 25 May 2021 02:42:20 +0000
ROA not before: Tue 25 May 2021 02:42:20 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 2402:6b00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Validity
Not Before: May 25 02:42:20 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=22138E4F871C222BFB781AA60DCFACA2CF5F0A4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:67:96:cb:c8:6f:6e:a7:ab:1e:32:a0:45:
38:c8:d4:2c:bf:3b:c8:b7:98:cb:c3:49:03:f0:c8:
89:77:87:f9:fe:cf:20:11:7c:80:08:fc:07:59:8c:
77:f0:1e:10:75:95:c6:c3:0d:25:04:9f:13:69:17:
d0:63:df:1a:0e:52:5c:0f:b2:b8:a2:8f:9f:84:b4:
7d:5d:80:2c:3e:cd:6b:3e:eb:5f:0c:6d:68:a4:67:
e5:34:07:2c:0c:93:7e:2a:f1:2e:19:5a:5d:ad:98:
cc:86:0d:7c:0f:b1:7d:fe:72:03:d4:66:eb:3b:00:
d6:32:f4:bd:68:6e:46:1a:58:8d:8b:f7:26:e2:fe:
45:ce:bd:92:b5:f5:12:9d:fc:65:57:97:21:97:c3:
6f:26:f7:5f:a3:f7:0c:67:17:e1:2d:9d:9e:de:ec:
91:b9:cd:bb:11:f0:5e:89:39:ed:8f:95:6d:4c:87:
f8:cd:ef:2e:68:37:10:af:53:69:34:3c:a8:49:bb:
bc:18:a0:3e:11:72:2b:bc:00:0c:72:2b:7e:f5:ae:
ce:9a:20:c5:8b:f3:85:ac:46:dc:93:3e:d5:3c:14:
52:55:69:90:27:9f:83:f8:27:d7:c4:1f:eb:00:4b:
e4:32:46:e4:b7:ed:0d:79:01:37:5a:d4:44:e3:46:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:8E:4F:87:1C:22:2B:FB:78:1A:A6:0D:CF:AC:A2:CF:5F:0A:4E
X509v3 Authority Key Identifier:
keyid:0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/IhOOT4ccIiv7eBqmDc-sos9fCk4.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
58:d2:f2:52:5b:31:65:de:57:be:72:85:ba:df:d8:7b:15:0f:
b8:43:a1:56:b3:3c:f2:26:c6:12:6f:bf:25:9e:f7:07:87:31:
f2:56:63:00:cb:7d:e8:19:86:57:4b:9c:4c:92:53:af:c8:25:
5a:15:e0:ec:18:bf:8e:5c:24:29:f5:c3:70:1c:fc:cc:60:03:
f1:d8:bc:98:8d:4c:c2:bb:fd:1b:53:77:b8:4d:2f:e8:91:00:
ce:ba:5f:05:eb:9b:c0:2a:53:f7:8d:7d:31:bf:b5:e9:fd:e9:
d5:98:03:36:da:45:01:e4:37:5b:72:c4:c9:28:0d:a6:8c:6b:
6a:44:38:1a:95:00:a9:1c:ef:f9:83:96:e3:1a:ce:03:a5:35:
23:bb:4d:18:3c:c2:ac:9b:19:7f:10:d7:d7:66:81:d6:19:c2:
f6:2c:07:bf:6d:85:90:04:e4:db:95:1f:d4:4f:42:e0:71:e7:
62:98:12:da:d9:85:25:b4:25:0b:78:dd:93:bb:7e:05:2b:6b:
93:bb:66:88:3c:73:43:f6:3c:48:4b:f3:ac:0f:05:e9:92:ed:
c3:47:79:5b:3b:3a:67:64:46:73:5e:b6:ac:c3:9e:65:f1:80:
91:20:0c:a8:98:7d:db:62:4f:60:a6:33:21:88:51:d7:05:8e:
2d:04:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:15 2025 by rpki-client