Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30379/kGNo26mZoYJVzpTXrtNVhnJm9L8.roa
File: kGNo26mZoYJVzpTXrtNVhnJm9L8.roa (raw, json)
Hash identifier: C9Au6N3sFuU5nYc5wCQdqNwglD52XmKuFkYi6UAe0Dw=
Subject key identifier: 90:63:68:DB:A9:99:A1:82:55:CE:94:D7:AE:D3:55:86:72:66:F4:BF
Certificate issuer: /CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417
Certificate serial: 02
Authority key identifier: 96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/kGNo26mZoYJVzpTXrtNVhnJm9L8.roa
Signing time: Sat 31 Jul 2021 07:39:58 +0000
ROA not before: Sat 31 Jul 2021 07:39:58 +0000
ROA not after: Fri 29 Jul 2022 09:38:56 +0000
asID: 63791
IP address blocks: 2407:a2c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417
Validity
Not Before: Jul 31 07:39:58 2021 GMT
Not After : Jul 29 09:38:56 2022 GMT
Subject: CN=906368DBA999A18255CE94D7AED355867266F4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:61:51:58:22:b5:5e:7c:17:54:51:e5:f1:
b8:a8:3e:e3:6b:4b:f6:af:ac:e3:be:b5:0d:b2:28:
8e:fe:dd:5e:25:6d:91:a2:14:ae:79:41:99:0c:a8:
22:d2:47:96:c2:b2:aa:5f:3a:f5:5b:32:07:08:23:
9c:9d:51:90:90:55:e8:c0:70:69:56:e4:91:78:57:
f2:53:67:da:06:3b:48:51:45:4a:65:e8:2b:21:37:
11:84:dd:33:df:2a:27:7f:dd:b3:0f:13:59:f9:a3:
4a:20:4a:15:dc:e7:81:1e:2d:b3:cf:40:68:9c:21:
a3:d3:10:1f:66:9e:1c:22:97:7e:ea:b9:cc:ac:9f:
f9:c6:3d:15:58:6d:3c:6d:53:c1:b5:b5:b6:3d:d5:
f3:a8:a0:67:50:55:81:b9:38:cd:22:6a:e2:10:73:
8c:4f:87:61:03:7c:88:33:c7:9b:95:e2:7a:f5:ae:
34:8c:d7:33:34:37:2a:20:63:53:2e:31:1d:4d:c7:
71:2f:53:42:68:a5:11:05:67:bc:84:e1:20:6b:74:
fa:35:57:a0:ad:21:40:b6:03:e5:ad:d7:08:cc:c6:
ec:75:08:79:22:91:ef:c7:0a:96:f6:df:1b:a9:95:
a9:4e:5e:11:e2:d5:d3:60:46:98:e8:ae:27:25:bd:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:63:68:DB:A9:99:A1:82:55:CE:94:D7:AE:D3:55:86:72:66:F4:BF
X509v3 Authority Key Identifier:
keyid:96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/lnCg9IWviKLfnYrmLgHvT1DHFBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/kGNo26mZoYJVzpTXrtNVhnJm9L8.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:05:e7:8a:1a:1b:4e:1f:d1:a7:81:8d:55:74:0a:ae:d2:98:
94:ad:5c:6c:2b:c0:63:0d:4f:53:06:3f:8c:92:4a:59:0e:60:
c5:be:4e:a1:38:72:bb:e1:db:40:e4:b0:64:fe:34:a6:1c:ef:
44:58:8a:ea:b1:ef:d3:e5:85:d3:76:56:d6:20:4b:e9:d3:82:
86:9e:a9:c6:3f:ac:17:41:34:b3:81:d0:fb:19:75:31:68:a3:
1a:e4:94:82:7a:b5:2c:ae:8b:f2:1d:7d:5a:4a:4e:80:c1:ed:
4b:2a:a9:ce:0b:e7:ab:5d:ae:10:1f:f1:ea:7c:68:44:82:ff:
f6:a2:11:a2:88:a0:98:a3:6a:74:a7:6b:a4:85:53:66:05:fd:
0a:91:54:e7:70:e1:88:13:b5:1c:f3:ae:db:99:e8:c6:28:7b:
6a:1a:70:3e:23:9f:e4:af:92:22:07:ef:4d:2f:0a:57:db:34:
eb:19:f8:dd:71:a3:50:9a:22:4e:cb:4e:84:cf:4a:0a:c1:2b:
14:fe:17:bd:e4:e5:18:b0:c9:56:53:b9:16:7b:6f:cb:25:9f:
6e:70:d1:99:b6:3d:68:de:2e:69:a6:b6:e0:d4:38:43:c8:37:
d7:d8:f7:e6:69:6d:27:69:99:b9:56:1e:ec:e3:96:58:67:6d:
5d:20:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:46 2025 by rpki-client