Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/RTOwB_itjCYFk6Df4qdSCBittYc.roa
File: RTOwB_itjCYFk6Df4qdSCBittYc.roa (raw, json)
Hash identifier: cRFiy11Pfz4FCp///SjOxymkFEZqArKAyd78SAoddxI=
Subject key identifier: 45:33:B0:07:F8:AD:8C:26:05:93:A0:DF:E2:A7:52:08:18:AD:B5:87
Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial: 17
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/RTOwB_itjCYFk6Df4qdSCBittYc.roa
Signing time: Thu 04 Nov 2021 03:12:20 +0000
ROA not before: Thu 04 Nov 2021 03:12:20 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 17707
IP address blocks: 218.223.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
Validity
Not Before: Nov 4 03:12:20 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=4533B007F8AD8C260593A0DFE2A7520818ADB587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:90:4b:45:7d:8f:36:34:ee:f9:b6:98:e5:
89:10:f5:f7:57:aa:ad:04:0b:fe:65:eb:03:17:41:
91:a2:d9:ab:ae:5d:de:95:72:e7:60:dc:b6:d6:11:
8a:14:07:70:6b:45:ea:2a:d9:9f:44:a3:49:67:21:
10:80:57:6d:57:8e:c7:43:aa:73:bb:e7:6b:f8:38:
2f:fa:f9:cf:e2:4c:f0:f5:4f:c6:18:53:9c:5a:bd:
73:71:7d:16:e5:d6:35:8a:97:37:ff:3f:0c:d8:c8:
52:d4:f5:76:03:fd:ce:8b:06:df:0a:c1:f6:dc:0f:
40:f1:71:cf:47:f5:75:c6:e4:ed:a1:c3:ba:03:74:
ec:93:be:fb:61:8f:b2:30:db:72:e5:1b:83:1f:f2:
52:e5:8d:56:bf:5a:b3:1a:b4:b8:74:7a:12:11:e1:
e5:d3:33:32:36:46:90:b6:69:41:ba:8b:97:b1:3b:
4e:cf:17:21:7a:2d:c1:e7:49:28:31:b6:0e:97:0e:
1d:dd:af:44:6f:84:89:23:3f:3e:d0:4e:ea:a4:e6:
35:c8:cb:38:b2:05:47:b7:04:75:40:4c:f2:e6:41:
e3:6e:79:26:23:36:e7:0f:bf:26:d6:e6:42:ff:e8:
5c:3c:70:5e:72:90:e4:09:61:bb:54:90:6c:43:42:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:B0:07:F8:AD:8C:26:05:93:A0:DF:E2:A7:52:08:18:AD:B5:87
X509v3 Authority Key Identifier:
keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/RTOwB_itjCYFk6Df4qdSCBittYc.roa
sbgp-ipAddrBlock: critical
IPv4:
218.223.16.0/20
Signature Algorithm: sha256WithRSAEncryption
55:0c:9e:94:63:8d:b8:28:33:a3:74:cb:df:a6:dc:45:6e:3c:
4e:3b:e4:43:32:08:4b:6c:a1:7c:a8:e8:36:fa:73:25:10:a0:
d5:4f:05:f0:8d:36:cb:1a:3e:92:ae:3e:2d:3a:f3:65:ff:05:
ab:f5:8d:6c:64:c6:6f:21:59:19:01:a8:e0:e0:8e:65:9d:a0:
22:90:35:3b:d4:14:ac:7b:67:47:c5:42:24:3b:a7:fe:aa:a3:
b1:91:8c:bf:31:bc:1f:2f:46:d2:70:f0:df:18:66:58:42:31:
6a:47:93:ae:14:4e:e2:a9:c6:9d:92:16:e2:61:5c:40:11:3c:
89:18:6d:2b:da:d1:7a:2e:d4:d9:21:6c:05:64:63:77:c9:28:
1a:be:9b:ac:9e:6e:10:f3:63:3e:35:ad:fe:4c:90:40:c2:db:
99:a5:59:a6:b6:d5:65:5c:71:68:e6:88:72:51:a5:f3:09:76:
2d:67:bf:f8:1b:0f:0c:26:44:54:f1:a5:8d:c8:47:1a:7f:a3:
a5:bb:c1:5c:07:b0:43:3a:c9:ba:cc:fc:0c:20:d7:86:c0:20:
b6:84:8a:92:36:8b:60:8c:3d:e7:95:be:a7:c8:2f:15:36:d0:
04:67:73:c7:67:88:84:df:56:08:86:19:c5:8a:9c:79:48:fa:
32:07:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:50:38 2025 by rpki-client