Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/N722TKmxhWJxaqqrfKtHEJRvLVE.roa
File: N722TKmxhWJxaqqrfKtHEJRvLVE.roa (raw, json)
Hash identifier: Uo16iPuwbUYcjtzHhi6dHYRSUKtPDgZ6bAV2ioA+6YY=
Subject key identifier: 37:BD:B6:4C:A9:B1:85:62:71:6A:AA:AB:7C:AB:47:10:94:6F:2D:51
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: FA
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/N722TKmxhWJxaqqrfKtHEJRvLVE.roa
Signing time: Sat 01 Jan 2022 01:31:13 +0000
ROA not before: Sat 01 Jan 2022 01:31:13 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 10013
IP address blocks: 210.188.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:13 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=37BDB64CA9B18562716AAAAB7CAB4710946F2D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:a0:90:c4:da:9d:1f:da:ed:4b:5c:23:d3:
a1:1d:33:05:87:07:09:8f:61:13:dc:6c:7c:6b:d2:
d1:bf:0f:71:11:dc:81:7a:e0:d0:9e:01:cb:70:a4:
90:e7:b6:19:40:80:3b:62:05:5b:81:2d:07:dd:19:
bf:17:92:76:f5:8f:0f:fc:9e:c7:45:76:02:fe:a9:
c9:b2:e4:37:bc:06:b8:7d:81:a9:f2:89:79:16:57:
be:8a:fb:a0:05:80:da:b0:64:6c:24:3b:85:31:9b:
48:14:86:ee:1f:b7:5d:ac:6d:1f:0e:db:06:0d:c5:
a1:f8:d7:05:f5:0d:c5:aa:37:4e:9e:3b:41:3f:f3:
f1:02:d8:42:13:60:53:c7:f1:c4:f1:74:35:18:1c:
63:f6:22:a0:6d:bf:80:cb:58:25:f7:2c:56:66:8a:
09:bd:8a:51:8f:2b:37:1b:10:0f:5b:55:19:89:28:
b2:c8:95:83:58:fb:ed:00:07:bb:89:aa:71:57:12:
20:e9:e5:a2:e2:cf:dc:18:e6:9a:fd:50:9f:bc:a3:
58:82:de:83:d0:e1:4b:84:ae:0f:af:1c:b1:d7:de:
ae:6f:b8:51:76:e9:05:c5:1f:af:5a:d4:a4:27:59:
54:c3:9b:fe:3e:99:67:b7:0b:cf:88:58:b3:c2:53:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:B6:4C:A9:B1:85:62:71:6A:AA:AB:7C:AB:47:10:94:6F:2D:51
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/N722TKmxhWJxaqqrfKtHEJRvLVE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d1:3b:4b:cf:20:cb:9b:76:40:3f:ff:ab:7f:84:aa:a1:d1:
c5:5f:66:77:fc:d3:2c:53:bd:b3:91:48:d7:13:56:8f:4b:75:
33:36:32:0b:06:d1:75:42:2e:44:8a:92:5e:32:aa:b5:f4:e1:
cb:59:50:15:56:6b:f5:d5:b4:1f:fd:a5:40:b4:38:81:3f:e0:
95:f0:bc:11:f7:66:33:8b:b5:45:5d:eb:89:ec:9d:a2:da:05:
81:3f:4f:bc:dc:dd:a1:c7:7d:0a:5e:12:fe:9f:6f:76:47:d7:
23:d2:1d:1c:6b:c4:0c:33:84:0a:54:d9:36:4c:1b:48:98:bc:
32:4d:b1:5f:c1:87:69:9b:9e:58:cf:8f:cb:39:bd:f4:fe:58:
1a:85:ae:50:89:63:d8:04:d7:c1:7b:b0:cb:f0:41:dc:e4:41:
8e:98:2e:ad:f7:a6:57:e4:a1:be:da:bc:5a:28:76:b2:53:f3:
8e:2b:91:89:ea:0c:f8:86:d5:a1:76:cb:e5:48:c0:eb:2b:b3:
69:b1:a5:4e:1b:8b:6f:37:9c:ac:af:a1:06:7a:ef:7d:ac:67:
7f:aa:fc:76:59:76:f1:aa:d4:17:ff:f8:47:a5:20:59:6d:7a:
1a:c9:2e:b1:25:4c:f4:0f:f8:0b:ba:dc:6c:36:58:0a:a2:2f:
73:3f:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client