Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/ml8jLUSMsXsngZLN7oKUl6xniRg.roa
File: ml8jLUSMsXsngZLN7oKUl6xniRg.roa (raw, json)
Hash identifier: JidtulWd1n6Hz4tPe0m6K9Ct0AnZ+IlOf65mw6m9IcA=
Subject key identifier: 9A:5F:23:2D:44:8C:B1:7B:27:81:92:CD:EE:82:94:97:AC:67:89:18
Certificate issuer: /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial: 46
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/ml8jLUSMsXsngZLN7oKUl6xniRg.roa
Signing time: Thu 13 Apr 2023 09:52:54 +0000
ROA not before: Thu 13 Apr 2023 09:52:54 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 7671
IP address blocks: 122.100.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Validity
Not Before: Apr 13 09:52:54 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=9A5F232D448CB17B278192CDEE829497AC678918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:78:83:ef:68:26:9f:12:aa:bf:95:0a:29:
f5:cd:be:3a:c1:a5:9f:f6:17:fc:99:d4:e7:12:ad:
b2:a9:cb:12:08:38:9d:6a:83:0a:80:0e:c7:30:07:
cc:6c:f7:5d:da:0e:6b:d0:af:3f:f3:29:33:e5:05:
87:5a:dc:a5:15:93:3b:8b:91:c8:5e:fa:47:6f:75:
70:b5:8e:ee:13:01:24:2b:ca:01:bb:74:47:80:e3:
07:d7:eb:74:ad:43:5a:e9:4b:78:71:a8:d7:d0:1f:
c6:3c:6f:cd:10:a1:88:46:97:40:e8:fa:bd:78:10:
77:9e:d0:0f:96:95:0e:06:5c:e8:00:07:ac:b4:f5:
35:30:a8:0b:a6:49:47:27:3a:84:ca:17:23:d4:b4:
4b:9d:86:ba:6c:c1:0d:81:10:74:84:98:85:cc:55:
0f:e2:a6:a6:2c:87:6e:7a:75:3d:fb:f6:65:24:bc:
40:c3:28:4f:69:0f:bb:9c:f7:b8:c9:74:d2:81:9e:
f9:8f:95:46:96:c3:ad:9f:61:12:62:60:6b:da:c4:
8e:04:00:73:98:16:d2:0a:c9:d3:9b:50:a1:d8:f5:
9c:a6:44:52:81:f3:4d:ec:4e:aa:ea:bb:eb:db:89:
4c:a8:07:38:a2:07:e5:6d:d7:ff:10:3c:c6:09:7f:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:23:2D:44:8C:B1:7B:27:81:92:CD:EE:82:94:97:AC:67:89:18
X509v3 Authority Key Identifier:
keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/ml8jLUSMsXsngZLN7oKUl6xniRg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.16.0/21
Signature Algorithm: sha256WithRSAEncryption
02:0d:59:75:fb:d0:13:f1:c5:61:49:b7:9a:01:26:92:26:26:
71:55:8e:65:3f:a1:71:63:64:1d:a4:41:df:81:07:c3:34:df:
e8:c3:b3:07:18:c6:3a:71:a1:2b:41:de:a7:cd:5f:a3:c8:50:
e5:6f:fd:ea:0d:70:0f:28:47:4c:4c:c9:0d:78:5c:bd:fc:78:
58:6f:c8:12:9d:8a:9b:53:61:56:86:53:2e:cd:ae:42:ed:ab:
84:a0:cc:7a:3f:80:b9:70:85:27:0b:b3:a9:90:f6:da:4b:f7:
af:f3:7c:e7:c4:0b:95:6a:f3:bc:04:b8:14:a4:dd:fd:03:d7:
31:62:d3:37:88:5f:6f:b7:20:b7:09:a2:ae:d9:2a:27:a0:7a:
42:ff:5a:19:9f:84:43:cf:eb:2d:bb:f7:a1:02:7d:9b:e5:4c:
28:f5:87:6d:0b:8a:61:9f:14:49:86:b5:c3:93:7d:09:b4:62:
09:67:c5:36:1c:1a:93:95:48:d7:60:b1:1b:ff:c3:96:e8:5d:
56:7f:88:64:a7:99:e1:27:e9:3e:c1:83:37:bd:91:34:19:67:
e0:80:0d:bb:e9:e3:f9:d9:dc:46:60:00:23:67:c3:15:cf:77:
ae:cd:1a:b7:5c:b7:22:01:8f:24:16:27:1b:3a:06:fb:22:36:
5a:06:97:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:48 2025 by rpki-client