Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/yRjdBTPcIqTizNkaS4fAuwkFRZI.roa
File: yRjdBTPcIqTizNkaS4fAuwkFRZI.roa (raw, json)
Hash identifier: 6EXqdVzXswTByMrt0FuN07rC0XXdEJm89E7xOsBhBIQ=
Subject key identifier: C9:18:DD:05:33:DC:22:A4:E2:CC:D9:1A:4B:87:C0:BB:09:05:45:92
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 65
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/yRjdBTPcIqTizNkaS4fAuwkFRZI.roa
Signing time: Wed 01 Dec 2021 05:29:17 +0000
ROA not before: Wed 01 Dec 2021 05:29:17 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 27.110.56.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:29:17 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=C918DD0533DC22A4E2CCD91A4B87C0BB09054592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:b2:fc:03:28:b3:b1:60:55:8d:dc:42:97:
f2:b4:bb:cd:b6:02:a3:86:27:1b:84:b2:43:54:7f:
d9:2e:2b:19:81:6d:95:58:91:4c:7a:a2:ab:6d:55:
93:6a:ac:de:30:7b:f8:60:d7:94:7d:10:cb:65:d6:
b7:2e:27:3c:14:1a:41:83:38:0f:29:5e:a5:53:32:
36:90:ca:6c:8d:0f:6a:0f:73:fa:30:c6:58:b7:d2:
6b:ad:96:00:b7:88:b6:ba:49:05:2b:5d:04:f9:93:
9c:45:74:5a:3f:02:7a:3d:a5:68:90:e2:eb:9f:17:
e7:e8:c7:45:5f:85:1c:1a:9c:68:8b:58:a3:24:44:
45:22:28:f1:b8:64:4e:ac:26:00:5a:4c:75:67:91:
da:c0:98:01:3c:5e:db:13:a1:ed:d4:59:61:40:82:
c9:4b:69:85:37:51:86:94:49:dd:79:7b:43:54:87:
c8:4d:f7:ec:cc:fb:6f:0e:6e:59:db:2d:ad:b3:68:
63:e1:d8:a3:ae:0d:f0:88:2c:90:0d:c9:f5:de:51:
33:30:bd:8e:26:40:e3:5b:c0:16:46:bc:5d:4c:a0:
da:96:09:49:ff:59:3c:0a:ed:fc:9d:6e:e4:4f:b6:
7f:a8:79:77:5d:c4:1a:42:5a:10:9a:b4:1a:cd:45:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:DD:05:33:DC:22:A4:E2:CC:D9:1A:4B:87:C0:BB:09:05:45:92
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/yRjdBTPcIqTizNkaS4fAuwkFRZI.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:ef:2c:86:14:5f:6b:35:dc:35:18:cc:48:0a:2a:02:5f:4d:
eb:df:11:c6:bb:94:1a:ea:67:0f:9f:94:eb:d2:66:3b:3d:11:
26:1f:b5:7f:c9:97:ba:04:70:ef:22:20:08:b8:75:c8:98:62:
76:3b:17:02:4d:a9:dc:75:8b:51:7c:6a:8b:5c:07:b3:7a:1b:
0e:9b:36:53:2f:d8:0c:82:de:14:06:be:b1:ee:7c:19:ec:6f:
fb:0c:5e:f2:0f:f6:5b:12:97:97:50:bb:54:97:ae:08:57:d4:
af:db:a0:d8:b5:2c:77:82:44:34:b6:33:31:76:0e:71:66:2b:
b9:7e:ab:51:24:f4:50:5d:e7:7c:46:43:cb:cd:5a:80:d9:d3:
c6:80:46:d0:30:c8:f7:ff:f8:b2:28:6b:14:2e:a2:0a:38:91:
4a:e6:e9:e3:df:08:e4:9e:be:c6:b2:ce:a8:2b:03:30:2a:1c:
81:af:ee:e1:83:7f:86:dc:3d:61:ed:84:c7:48:6e:e6:95:ac:
b5:c3:98:6b:93:c1:62:43:15:ab:a6:94:cc:fe:71:54:b8:2b:
4e:0d:b0:3a:75:86:dd:a3:87:4d:65:c3:f5:26:15:0f:6c:6b:
fb:78:cd:0c:1d:64:02:39:81:67:ab:fd:8f:85:03:b5:2e:2c:
ec:f8:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:17 2025 by rpki-client