Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sUBXFmTy0VfpZyCIWfvpHzPB9lE.roa
File: sUBXFmTy0VfpZyCIWfvpHzPB9lE.roa (raw, json)
Hash identifier: nJhd8fjXwmgzhfTVqnFXzkhYmkrl2WxJXWiVYACA384=
Subject key identifier: B1:40:57:16:64:F2:D1:57:E9:67:20:88:59:FB:E9:1F:33:C1:F6:51
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0111
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sUBXFmTy0VfpZyCIWfvpHzPB9lE.roa
Signing time: Sat 01 Jan 2022 01:31:20 +0000
ROA not before: Sat 01 Jan 2022 01:31:20 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:20 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=B140571664F2D157E967208859FBE91F33C1F651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:1b:11:a0:62:69:39:1e:cb:8d:cf:b7:6f:
44:7d:d8:d0:e7:cc:85:e7:b6:7b:46:f8:45:d9:44:
c0:9c:d0:97:a7:06:16:96:03:a3:f4:5d:4f:94:be:
28:ee:ad:50:16:66:f4:0f:3a:f6:c2:f5:a0:da:95:
8e:bc:8a:05:8b:b8:cb:f3:7d:4a:49:8f:cd:47:a0:
e8:4c:29:36:05:1a:6d:11:a7:0a:99:45:13:28:ee:
71:25:7b:10:30:0d:c5:90:ff:25:a5:cf:9c:d1:99:
44:f4:43:f8:de:91:23:f5:1c:d3:1c:29:0f:49:e6:
2d:64:4b:0e:d3:50:97:8b:ad:80:f1:75:ba:fe:fb:
00:59:6b:0b:72:07:07:34:60:aa:9b:86:0c:60:f0:
f1:e0:03:cd:c3:38:42:4b:be:41:7a:b7:f1:73:98:
d4:5d:b6:c0:12:bd:90:0e:8f:32:85:01:dc:36:82:
a8:63:66:71:2f:39:71:ec:3b:bd:25:15:85:3e:7f:
38:73:0a:d6:2d:22:28:09:4d:11:46:3b:63:f6:b4:
d8:63:c5:79:96:a9:33:62:1c:a1:c9:d2:1f:0c:e0:
c4:b3:ef:9c:76:12:b0:a3:47:f3:6f:91:29:35:d1:
a1:00:60:82:5c:56:3d:fd:9d:4e:ac:a8:2a:a5:44:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:57:16:64:F2:D1:57:E9:67:20:88:59:FB:E9:1F:33:C1:F6:51
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sUBXFmTy0VfpZyCIWfvpHzPB9lE.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fd:6e:7a:d5:72:af:ff:81:e2:0f:ed:46:d5:95:a5:15:01:
63:52:6c:27:40:93:08:84:50:49:e3:e0:dc:d7:74:c6:19:1b:
ff:6a:c7:d3:9e:db:17:a0:f2:1e:9c:56:be:33:4c:08:b5:51:
45:d8:c7:2f:0b:e7:9c:b3:7e:12:16:db:69:6f:8f:b3:31:ea:
8c:f3:e5:ca:37:c6:e3:2d:62:b6:df:e4:45:af:e4:e2:30:9c:
17:5c:7b:5c:df:56:e6:c4:e0:4d:ea:eb:0c:77:a8:27:dd:ce:
0f:51:d9:bc:64:a3:68:63:a0:86:54:25:3e:05:af:33:9d:0a:
af:24:bd:a2:4f:78:50:72:53:66:0a:5e:3d:52:67:31:e3:2f:
f9:5f:b1:fe:59:80:93:61:9b:36:ce:68:0a:d6:d7:22:10:8e:
92:bb:a1:82:01:13:2c:ca:c8:7e:05:ee:e7:d4:06:06:aa:7e:
55:e0:79:ea:7d:73:87:a5:21:1d:0d:eb:c7:f3:04:27:a2:59:
3d:2b:38:8e:20:17:4e:e2:e0:cd:d3:2e:60:fb:0e:6a:6b:ed:
93:b7:4a:8f:53:2e:a9:09:80:8c:01:8a:29:ef:d9:e2:78:de:
5b:e4:f1:14:13:4b:0e:67:64:cc:ab:aa:c0:6e:88:da:4f:e3:
9e:5d:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:17 2025 by rpki-client