Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/0QMr0tkFabQdjl3lTmDLUFhAbUg.roa
File: 0QMr0tkFabQdjl3lTmDLUFhAbUg.roa (raw, json)
Hash identifier: Av8CzrZQMnlHvHYBSA5kZzGtLpYOReCMT+Uv/9pA3Sk=
Subject key identifier: D1:03:2B:D2:D9:05:69:B4:1D:8E:5D:E5:4E:60:CB:50:58:40:6D:48
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 3C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0QMr0tkFabQdjl3lTmDLUFhAbUg.roa
Signing time: Tue 02 Mar 2021 08:11:33 +0000
ROA not before: Tue 02 Mar 2021 08:11:33 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 27.110.24.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:11:33 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=D1032BD2D90569B41D8E5DE54E60CB5058406D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:3a:ba:da:0b:24:41:6d:a5:06:ae:05:3f:
4f:fc:bc:31:6c:94:75:e2:e2:79:a1:4a:60:d7:50:
3d:f0:94:fa:d4:63:30:76:e1:6d:7d:ce:75:f4:a0:
dd:e6:37:a2:aa:20:98:1f:93:15:cf:df:f3:38:8a:
07:9a:4c:7f:7f:80:f5:4b:bc:a8:f4:43:ab:43:55:
6d:3a:b2:56:ff:6d:8e:c6:23:d5:25:3c:4c:a4:43:
8c:8e:dd:8e:a1:2b:e0:b9:0e:14:2e:ae:f7:e0:fc:
84:81:4f:a3:19:15:62:e7:55:28:fb:75:05:2a:00:
fb:0e:3c:8a:4c:c9:5e:fc:40:03:2c:32:9d:c1:af:
9e:b4:2a:3c:66:a4:30:5c:33:45:d3:42:57:02:4d:
ed:69:2a:52:f8:cf:6e:fa:2e:f1:f1:7d:ff:f1:2a:
1b:bc:ec:0c:3d:fb:0a:d1:39:d5:64:2c:6c:f5:c4:
36:80:1d:87:f0:4d:fe:1d:b9:46:8d:5e:2a:7c:95:
c3:e3:a0:f6:32:43:ae:d6:e0:f0:f7:23:9b:8b:b2:
11:02:69:a8:5f:3a:ef:71:df:bf:5e:4a:97:9c:8b:
61:8e:6d:18:23:1b:43:f0:fe:34:5b:fe:10:3a:97:
f5:dd:b2:c1:91:b6:28:2e:2e:19:d0:19:cc:de:e7:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:2B:D2:D9:05:69:B4:1D:8E:5D:E5:4E:60:CB:50:58:40:6D:48
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0QMr0tkFabQdjl3lTmDLUFhAbUg.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:9c:06:64:b9:6e:ac:ae:ad:52:c7:13:9f:99:13:3e:9d:f8:
e3:b2:82:56:e6:b4:5c:25:21:f9:39:77:ce:60:67:6b:07:a9:
9d:b6:4c:a0:43:dc:26:1e:b0:c0:9f:ee:ae:3a:0e:f7:a5:35:
82:f8:58:93:2e:ad:37:1f:3e:dc:fc:08:db:9b:7a:77:f1:67:
24:91:5a:87:f9:54:06:b3:d2:53:23:74:f8:0b:f5:ef:b7:da:
47:bc:01:8f:82:ae:0e:05:16:ba:0a:10:33:1f:93:b9:32:b7:
58:c6:09:d2:0d:82:ae:72:5e:91:5b:bd:86:de:46:31:b2:a2:
5d:a6:65:76:6a:95:f3:f2:82:62:5f:9a:75:10:50:b1:1f:9e:
eb:f9:bc:3d:d1:1f:8d:0f:d3:e6:3d:66:5d:b6:f8:ee:44:d9:
a9:c9:04:b5:e4:05:a4:0c:9e:cf:5f:0f:e9:0e:0a:41:6a:6d:
24:f8:f3:c2:18:59:89:86:e0:75:b0:d9:81:cc:49:da:96:f0:
a4:d0:60:8f:83:9a:1b:57:86:d9:c6:78:98:bd:d8:05:49:5d:
31:e5:fb:13:ee:c2:20:a7:71:00:6a:d9:31:b0:3f:5f:0f:b5:
c8:48:7c:c9:61:bf:13:d4:9d:61:46:8b:fe:10:19:a6:58:63:
19:9e:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:29 2025 by rpki-client