Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/Hm9H3OaqRKa1leOA0FYQjws5fkU.roa
File: Hm9H3OaqRKa1leOA0FYQjws5fkU.roa (raw, json)
Hash identifier: zV+KWHEK1tGpdOH+sNWgdqUw5wXLHsG2hGDT46WRbBk=
Subject key identifier: 1E:6F:47:DC:E6:AA:44:A6:B5:95:E3:80:D0:56:10:8F:0B:39:7E:45
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 20
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Hm9H3OaqRKa1leOA0FYQjws5fkU.roa
Signing time: Sat 01 Jan 2022 01:31:54 +0000
ROA not before: Sat 01 Jan 2022 01:31:54 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 131896
IP address blocks: 103.198.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Jan 1 01:31:54 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=1E6F47DCE6AA44A6B595E380D056108F0B397E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:e7:e7:5e:b3:0b:9d:fc:a2:f9:ea:3f:fc:
61:93:ca:35:50:5b:01:21:2c:a5:72:2c:74:30:3d:
4e:15:8a:b4:78:c5:c5:db:43:25:87:24:36:51:fa:
06:c8:f0:6e:fc:e2:05:ed:99:b9:e0:aa:8f:2d:41:
9a:d8:dd:20:85:08:52:35:ac:70:25:12:70:48:5c:
a0:ee:45:30:d9:1f:e7:95:3a:86:f6:0e:f1:75:4f:
bd:ba:89:21:05:92:c9:af:d7:57:26:61:de:1f:1a:
c1:3c:13:e8:13:6f:48:fc:2f:06:87:7f:99:87:b6:
69:bc:a3:2f:a5:29:a8:bc:ba:be:ab:7a:8c:ec:c3:
2b:62:f1:ca:a4:4b:0a:8f:5a:22:07:a2:9d:cc:2b:
48:0c:23:f7:9c:eb:4b:6e:03:40:33:0d:f8:45:b3:
34:aa:0a:45:bd:1d:b3:79:5a:1e:ae:8c:dd:43:d0:
57:c8:cf:ba:24:81:33:24:98:a9:8a:ba:1b:c5:ad:
d5:89:54:ab:7a:39:29:0b:73:42:3f:64:c0:01:ea:
c4:5b:b4:91:b4:4e:fd:d7:3e:e4:b7:32:e9:8a:ef:
12:fd:d3:98:79:e0:76:f6:69:0e:cd:1a:fd:30:d5:
ff:84:b2:9d:64:f8:8c:55:de:59:b1:85:b7:a8:db:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:47:DC:E6:AA:44:A6:B5:95:E3:80:D0:56:10:8F:0B:39:7E:45
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/Hm9H3OaqRKa1leOA0FYQjws5fkU.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5a:07:f0:ab:ef:a5:e5:a4:46:c2:0b:1d:df:9e:28:4c:dc:
ce:d9:11:73:b1:d3:1b:ef:ec:ea:3f:73:8e:8c:49:96:e1:3e:
cc:91:50:07:d6:da:e0:8f:54:16:6e:67:96:aa:e9:3f:47:2b:
ba:5e:72:38:86:dc:87:a9:c0:79:57:33:ef:f4:ea:73:d6:80:
e9:06:df:8e:bf:c7:17:64:86:15:77:a5:36:fd:05:c9:71:28:
a4:58:38:2f:6a:ea:e8:ef:27:b1:f1:e3:ce:68:ff:71:a5:e9:
3a:c5:76:03:2e:3f:d7:ad:e0:d3:04:0d:0f:52:30:41:13:7b:
f7:77:62:95:7e:d2:a1:9c:15:b8:2f:68:10:eb:bf:3e:63:4a:
ab:91:55:50:31:0b:d0:be:a8:81:60:df:7b:16:14:18:79:18:
bb:14:d4:92:55:f0:90:48:b4:a8:8c:07:95:68:88:62:86:59:
d3:c1:35:3e:11:94:fb:2f:3f:4e:be:e3:70:d4:21:7b:f1:8c:
79:b9:c9:35:73:a9:ad:b1:a0:a1:3e:3e:57:c5:45:61:5e:13:
b1:05:d5:d8:75:0d:54:a5:90:21:13:d5:c5:9f:ca:78:b4:d9:
b9:3a:7f:5a:fb:93:5b:b3:38:bb:c0:ed:49:ff:76:70:92:37:
95:fa:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:03 2025 by rpki-client