Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sPRh3j4UKV8Pm5040zqjlgdACw0.roa
File: sPRh3j4UKV8Pm5040zqjlgdACw0.roa (raw, json)
Hash identifier: wUfVFEAL18EZHny0/598Eq4EJGlhF7v8dC16tyGd8v8=
Subject key identifier: B0:F4:61:DE:3E:14:29:5F:0F:9B:9D:38:D3:3A:A3:96:07:40:0B:0D
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0125
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sPRh3j4UKV8Pm5040zqjlgdACw0.roa
Signing time: Sat 01 Jan 2022 01:32:09 +0000
ROA not before: Sat 01 Jan 2022 01:32:09 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.224.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:32:09 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=B0F461DE3E14295F0F9B9D38D33AA39607400B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:d6:da:b2:44:e5:15:81:f7:ec:de:69:7c:
db:a3:3c:a5:e1:64:6f:c1:d6:6a:b3:fc:10:9d:57:
80:bc:31:93:88:20:78:5d:ce:7c:d0:ea:f9:b1:37:
92:04:5e:95:68:11:8d:23:83:69:ea:4f:37:b1:7c:
06:a3:0e:6e:72:5c:84:0f:90:f0:84:27:dc:00:5d:
cd:97:4d:de:43:1d:a8:d6:57:e7:b4:13:9c:3e:df:
da:7a:0f:7a:1f:52:49:a0:66:ae:c2:19:7a:47:7b:
f1:77:15:8e:78:d9:86:ce:f3:58:50:78:c2:69:0a:
3e:ba:ab:18:cb:3d:8d:b9:97:a1:ad:f6:71:d9:97:
20:5e:d4:b4:83:69:14:fc:7a:c1:72:71:80:ec:84:
f5:bd:66:0c:50:26:b9:7b:87:05:03:93:96:f9:c4:
d4:f1:24:ba:bc:92:4d:77:cc:f2:9e:af:ee:95:b9:
41:00:de:61:b8:a8:8a:98:45:78:ab:bb:8a:fe:59:
1a:03:2a:61:39:d3:fb:90:1e:50:e1:23:86:db:86:
37:bb:5d:45:d1:42:93:5c:34:0c:a4:b6:41:e7:c0:
d5:23:8e:66:11:ea:3c:22:de:97:d7:5f:a9:ea:5b:
10:cb:e1:3c:68:13:9a:4d:ee:74:75:a9:14:f3:fd:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F4:61:DE:3E:14:29:5F:0F:9B:9D:38:D3:3A:A3:96:07:40:0B:0D
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sPRh3j4UKV8Pm5040zqjlgdACw0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.224.182.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ca:d3:10:bb:1b:1d:dc:48:32:02:b6:77:bb:66:71:f9:61:
46:89:37:a6:5e:bc:3e:97:80:b4:ec:c1:d9:ea:d0:5a:af:45:
27:f6:4e:bc:fa:7a:97:73:05:44:d8:c0:66:b8:53:2d:4f:00:
a6:92:4e:69:ee:c8:81:01:8f:1f:51:68:fc:6e:47:45:a5:53:
0e:00:3c:69:be:a8:ee:da:10:2e:ca:39:41:f5:b9:b8:33:c8:
74:c2:7f:ae:0e:6b:ec:07:a0:8f:ad:8a:2c:cb:10:62:66:86:
9a:e9:45:0c:5e:4a:e2:1a:af:ab:9e:cb:05:f7:4e:1b:1c:b4:
b6:b2:73:09:d4:02:8b:5d:64:8b:36:bc:be:24:b3:1a:40:41:
93:e3:3d:44:db:33:aa:85:29:e8:c1:ae:03:aa:ac:b5:d0:97:
c6:d3:c1:2b:51:0b:6d:21:f9:94:08:4f:39:7c:f4:b4:1a:fa:
82:db:30:b8:7f:73:28:cf:f2:d1:c7:4f:69:ae:3c:90:0a:f9:
71:5f:d3:d9:08:2b:15:2f:b4:7d:11:45:4d:73:b8:63:e3:87:
be:87:ff:a0:e8:f1:82:b3:2e:12:82:73:97:c6:e2:c5:c4:26:
f5:19:2a:90:12:5e:31:7f:fc:64:7c:d1:16:45:c4:93:6c:73:
81:99:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:12 2025 by rpki-client