Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/uJ476BqFd-z589_ugXr28c-WY0E.roa
File: uJ476BqFd-z589_ugXr28c-WY0E.roa (raw, json)
Hash identifier: AI8GT/jqAmxuD3H2xz2tOfyFBCw9Bg53IXaXHU7UpN4=
Subject key identifier: B8:9E:3B:E8:1A:85:77:EC:F9:F3:DF:EE:81:7A:F6:F1:CF:96:63:41
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 2D
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/uJ476BqFd-z589_ugXr28c-WY0E.roa
Signing time: Wed 18 Aug 2021 07:54:25 +0000
ROA not before: Wed 18 Aug 2021 07:54:25 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 220.144.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Aug 18 07:54:25 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=B89E3BE81A8577ECF9F3DFEE817AF6F1CF966341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:5b:8f:f8:ff:9f:28:31:58:10:c2:fc:b1:
b2:50:3b:0d:59:1f:12:1a:68:f1:15:36:f8:ac:73:
80:aa:49:17:55:bd:01:c2:2a:02:e6:7d:55:d1:1f:
2e:f5:53:03:41:a7:33:44:14:fb:87:92:3d:76:a9:
40:9f:eb:b5:1c:e1:97:5d:51:ea:6b:76:04:81:ec:
fd:52:cd:0f:23:df:25:a8:71:4e:50:d1:2f:64:90:
fa:e6:ec:c1:1f:9d:50:1f:88:d2:e0:9f:98:cc:84:
a2:89:76:dd:23:b2:db:55:b9:26:ec:1f:f2:bb:55:
27:c5:aa:2d:92:f2:49:e9:26:f5:01:7d:7c:03:ce:
3d:77:0f:5a:51:4a:e9:b5:3f:0f:83:ef:be:c6:0f:
c8:2d:16:ab:77:c9:9f:a1:99:b6:9b:9c:a7:54:42:
05:00:2f:3d:36:77:af:59:6b:8b:f9:ce:8c:27:3b:
d3:c3:4a:41:91:12:5b:a9:65:9b:88:cb:5a:ff:39:
28:ec:60:18:a1:3d:95:d5:ab:d6:38:8b:df:29:04:
5e:c0:f4:75:21:a4:e8:e0:33:ca:86:48:6a:3a:38:
ed:07:3d:37:1b:b0:8e:23:21:ed:6d:f9:b4:45:ed:
3b:e5:ff:62:9b:7f:44:1d:25:ec:96:86:9d:65:f8:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:3B:E8:1A:85:77:EC:F9:F3:DF:EE:81:7A:F6:F1:CF:96:63:41
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/uJ476BqFd-z589_ugXr28c-WY0E.roa
sbgp-ipAddrBlock: critical
IPv4:
220.144.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:c2:b2:37:29:55:81:04:f2:c3:49:bb:71:ca:a6:39:17:e7:
5f:cb:29:d0:fa:eb:4f:db:19:9a:6c:0b:db:64:62:ff:39:2e:
0e:c2:90:09:b8:ef:18:04:9c:34:75:f6:22:59:52:0e:53:ed:
3a:a2:25:a8:5b:fd:cc:55:bc:ca:cb:d2:88:99:ba:dc:05:c7:
16:87:af:86:ab:fa:c7:e5:d0:57:2e:1c:1a:ed:15:19:e2:15:
32:8c:5f:47:7d:a3:5f:4d:8d:b8:53:8f:27:cc:d5:cd:d9:18:
9c:99:7f:bf:4c:28:73:25:27:4a:5d:b9:d0:87:f8:43:1a:fe:
bf:8b:5c:1e:e2:98:d4:1c:67:cd:a7:d5:f3:b9:f2:6e:51:de:
a5:93:e3:2a:55:f3:57:bc:07:71:55:ae:4b:0e:9f:3c:3a:48:
9f:6d:be:6a:57:1d:04:ab:8c:f9:e5:18:d8:6a:97:32:de:b3:
8c:d6:6e:6c:78:6e:5d:9c:47:99:07:d6:d6:29:fc:68:25:3f:
45:09:78:e0:21:39:4d:df:99:61:2e:6d:03:4b:a2:ad:9a:f5:
25:3e:5d:a0:b4:bb:22:79:1c:d8:f4:b4:08:53:25:fd:fc:e9:
d5:7a:42:4b:98:1e:78:eb:44:ac:ac:82:b7:6d:c6:55:8f:a7:
38:5b:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:32 2025 by rpki-client