Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/WpIVKchjSMCB47BhL7frcE8NCWM.roa
File: WpIVKchjSMCB47BhL7frcE8NCWM.roa (raw, json)
Hash identifier: PRBI9zWZzoVo9f7+NjdEzKHAJws1oWO2Z3hTLyAd65g=
Subject key identifier: 5A:92:15:29:C8:63:48:C0:81:E3:B0:61:2F:B7:EB:70:4F:0D:09:63
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 2D
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/WpIVKchjSMCB47BhL7frcE8NCWM.roa
Signing time: Mon 01 Nov 2021 01:28:45 +0000
ROA not before: Mon 01 Nov 2021 01:28:45 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 55900
IP address blocks: 103.250.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Nov 1 01:28:45 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=5A921529C86348C081E3B0612FB7EB704F0D0963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:73:a2:b3:a1:fe:3a:14:ba:4c:2c:c3:be:
9c:31:7e:60:0c:9c:16:73:76:8c:04:27:dd:7b:23:
68:1e:04:a6:24:aa:2c:b6:7a:66:2c:33:38:30:58:
e7:07:f5:8e:65:65:3f:43:41:6d:ae:26:04:4b:31:
e8:5b:5e:e6:0f:7f:28:3a:ff:d3:3b:17:4e:cd:fb:
35:23:da:df:24:36:83:26:35:20:79:89:6d:46:a1:
e2:42:20:f4:c8:a0:fb:50:35:e2:a8:5e:9c:6b:34:
19:e1:15:41:3b:27:b3:12:59:d2:22:08:c0:ff:17:
5d:2d:62:6c:1c:03:ad:70:7b:d2:cd:b6:3c:1a:12:
8a:a2:1c:24:50:03:a4:82:60:3b:97:be:57:86:3d:
d6:b3:0e:95:3e:bb:2f:c7:79:52:e5:44:f6:f2:01:
06:cc:c4:47:52:7a:0d:cf:cf:93:dd:ec:e4:5e:ab:
3a:66:ea:c8:36:2d:63:3a:df:d1:88:4d:7b:9b:db:
76:0a:e1:07:54:11:19:09:6e:ea:0e:ba:e6:54:79:
dc:71:8d:f8:77:f4:69:74:df:83:65:63:cd:7f:64:
68:5a:f5:fe:e7:54:83:a8:48:00:ad:3f:0e:0b:c1:
6d:08:d2:30:a0:4c:ae:1e:b6:9a:ab:0e:7c:3b:55:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:15:29:C8:63:48:C0:81:E3:B0:61:2F:B7:EB:70:4F:0D:09:63
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/WpIVKchjSMCB47BhL7frcE8NCWM.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.92.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:c1:bb:41:20:43:53:e1:25:ed:b2:04:2f:48:6b:2d:16:39:
ce:35:dc:62:a6:da:30:cd:ec:02:89:e2:1c:d5:8b:9f:bc:79:
9b:57:27:98:17:67:36:5f:3d:46:1b:10:ed:6f:9b:4e:3f:bc:
26:a6:fc:8b:b0:0c:c5:63:ac:26:be:1f:37:57:f0:fc:12:2b:
fc:be:9e:ad:51:28:85:8c:7c:37:bc:80:63:91:16:ae:90:82:
b8:d6:b2:a8:05:65:21:00:09:9a:1a:da:8c:8d:4b:23:a3:03:
05:f0:48:fc:02:dd:ec:ed:05:a8:20:77:36:15:76:86:ee:3a:
03:d7:86:36:93:6f:bb:72:d6:0b:21:c5:e3:9a:ce:ed:4d:b5:
cc:d7:35:d7:54:17:9d:83:1a:1d:54:93:9c:06:96:89:d9:44:
8f:48:84:38:9b:fd:46:28:50:37:57:8d:73:42:0d:ca:78:90:
0e:d3:37:5c:e4:89:c3:06:8d:0a:7e:2f:0b:0a:3b:ab:88:31:
fa:23:32:4a:34:7d:df:f5:77:aa:24:7f:68:80:12:20:49:12:
65:db:9e:f3:76:b5:3f:da:e3:ed:ed:fd:ce:4e:3f:d2:d2:ba:
3f:89:cf:49:91:92:d4:b2:52:e0:cf:14:61:ce:b6:8c:c4:d3:
5d:98:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:53 2025 by rpki-client