Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/JTjszyLFxPk13-keot0SsDBUriw.roa
File: JTjszyLFxPk13-keot0SsDBUriw.roa (raw, json)
Hash identifier: 6I6xRY85JwK25+4Qayak32GpWZRJp6GKXezVEKkG/+c=
Subject key identifier: 25:38:EC:CF:22:C5:C4:F9:35:DF:E9:1E:A2:DD:12:B0:30:54:AE:2C
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: A2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JTjszyLFxPk13-keot0SsDBUriw.roa
Signing time: Tue 01 Feb 2022 01:31:52 +0000
ROA not before: Tue 01 Feb 2022 01:31:52 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 218.110.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:52 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=2538ECCF22C5C4F935DFE91EA2DD12B03054AE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:23:70:09:63:4f:8a:70:32:a9:36:09:11:
d2:5c:82:45:cb:74:43:2e:59:6d:79:52:99:1a:57:
0a:12:d9:18:5a:a1:2c:e2:a2:1d:4b:1b:61:fa:c7:
61:c5:e7:3a:dd:5b:de:ba:8b:fc:49:4f:87:f4:98:
07:eb:27:a4:32:08:7b:a6:73:a5:e0:31:ab:49:c7:
53:11:ff:48:62:b3:9f:7d:e7:2e:01:6d:23:fe:54:
85:af:89:75:d1:c2:df:ab:85:3b:30:0e:22:da:51:
81:9f:a5:63:f6:1e:d7:83:80:e3:ec:83:38:8e:55:
ee:34:2b:21:16:d8:3a:de:4a:42:d4:fc:a8:7d:22:
7e:ee:0d:44:37:d5:bf:52:e9:a6:f5:42:7a:81:01:
d3:7c:e8:8f:59:46:0d:2b:38:74:a0:23:2b:8b:a9:
0a:fe:08:b8:fa:cd:b0:fb:6c:7d:d2:97:ce:f3:c8:
8d:99:30:12:c9:35:ef:69:d0:66:18:06:ae:9f:e6:
fd:df:a0:88:36:6c:ba:6e:27:2f:5b:12:17:44:33:
52:bb:7c:73:c1:8b:86:9c:ec:af:0b:08:bf:b3:92:
a6:1e:6a:48:6d:db:b3:8a:fc:49:70:29:64:f1:43:
53:a6:bc:db:d4:5f:ee:dc:d4:90:27:74:9c:61:9d:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:EC:CF:22:C5:C4:F9:35:DF:E9:1E:A2:DD:12:B0:30:54:AE:2C
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JTjszyLFxPk13-keot0SsDBUriw.roa
sbgp-ipAddrBlock: critical
IPv4:
218.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:bc:9a:ac:f8:00:05:79:d7:4e:f7:5e:cb:9f:10:bc:c2:ec:
b8:fd:0a:d4:75:12:58:19:9b:e6:c8:61:2f:00:17:63:6d:a1:
7c:b5:33:c9:e7:4b:b6:18:d7:d3:d7:7c:a8:61:10:76:71:5c:
a9:04:61:a5:df:45:40:d1:a4:ed:23:71:ba:8f:f4:dc:93:3a:
d6:04:09:4f:5a:11:47:69:20:d2:b6:88:70:35:12:de:75:0c:
96:5d:09:75:31:75:52:29:a1:e2:1d:bb:ff:4b:8f:00:8c:af:
46:21:0f:2b:70:c6:71:19:4c:38:9b:ce:0e:71:43:6f:38:f0:
fc:31:4a:59:a4:e9:ac:ca:2c:7a:4d:6c:40:39:92:d6:33:cd:
f6:ae:64:19:1c:f7:3a:14:b3:80:ad:d3:5a:51:bd:eb:81:8e:
b3:88:36:66:d3:82:3a:0a:90:33:1b:b4:9e:13:a5:fa:ef:4f:
e7:cc:d3:f3:2c:5d:19:6b:93:da:e3:25:55:c6:fb:d4:f3:69:
1b:0f:e7:d5:23:33:da:f7:68:dd:c7:24:98:9e:b1:a8:b5:ad:
dc:10:d1:1c:97:9a:01:3e:5a:41:02:b0:a4:f3:80:26:c7:b3:
d1:93:e5:56:75:8b:db:95:80:5b:12:5a:82:c2:6e:63:5f:5d:
9e:04:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:20:20 2025 by rpki-client