Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa
File: zak0DKFFEDpd7x8I8LA_5DZSp_E.roa (raw, json)
Hash identifier: 6J3kNYhEljfBn0Oj1Won526uWC/zVXIqzzSNOP26wjs=
Subject key identifier: CD:A9:34:0C:A1:45:10:3A:5D:EF:1F:08:F0:B0:3F:E4:36:52:A7:F1
Certificate issuer: /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial: 1B
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa
Signing time: Fri 01 Apr 2022 01:28:33 +0000
ROA not before: Fri 01 Apr 2022 01:28:33 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 63786
IP address blocks: 103.123.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Validity
Not Before: Apr 1 01:28:33 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=CDA9340CA145103A5DEF1F08F0B03FE43652A7F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:74:28:86:8c:53:fc:32:72:d8:a2:d1:be:b1:
d5:c3:43:8e:49:1a:91:54:76:ed:70:7b:53:ef:12:
8c:7f:26:27:f6:52:37:a9:17:87:b5:1a:d9:a4:53:
fd:e3:d5:f5:c4:5f:2f:23:f4:45:75:ef:cb:ce:c9:
b0:62:11:e4:7e:28:53:b4:31:86:90:70:6b:61:dd:
9a:68:55:b1:d1:25:56:54:d3:ec:da:e2:7c:35:a8:
6a:c7:a5:24:e8:3d:06:32:be:a4:20:b0:1e:45:1d:
4d:27:e7:f2:db:65:fc:90:8c:71:cd:9e:21:7a:00:
df:d4:15:4b:01:9d:11:61:25:fb:b1:04:94:96:0b:
4a:12:70:12:60:b7:35:fb:9b:4f:07:e4:05:2c:41:
94:ca:fc:f5:08:99:07:6d:7b:1a:c4:0c:f2:f5:ee:
f6:a9:79:33:c0:63:14:b5:48:2d:70:07:13:64:d5:
87:90:e4:57:1b:ce:96:27:15:49:cb:25:ec:65:9b:
cd:6d:a1:2b:65:80:52:1f:ec:74:60:72:5e:d6:90:
5c:ff:a5:df:29:dd:45:f6:33:44:8a:4c:37:69:9c:
3f:63:d6:ac:a1:ad:81:c1:f7:ba:58:5b:e6:bc:5e:
48:bc:ce:b1:e2:3f:a9:c4:87:e6:89:ee:cd:2a:77:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:34:0C:A1:45:10:3A:5D:EF:1F:08:F0:B0:3F:E4:36:52:A7:F1
X509v3 Authority Key Identifier:
keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.123.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:59:d9:fb:6a:dd:97:d2:89:0b:6d:e3:cb:be:a8:0c:84:51:
a3:5a:ae:18:50:e8:b1:39:04:8d:a4:3b:7f:68:bb:8b:81:26:
b1:59:b2:b3:e8:5c:1d:e8:0d:08:97:5a:84:7a:d1:6d:80:d8:
04:19:da:9a:26:21:6c:c9:9a:12:38:13:95:6d:3c:38:87:74:
f0:fb:84:1c:da:d3:72:de:04:e8:6b:c2:b7:e6:54:75:7a:4f:
b0:59:d9:f9:ab:ba:b1:8c:04:aa:b1:c8:7a:14:33:e7:44:7a:
58:36:69:f1:70:c8:5a:ba:c2:19:5f:47:a3:77:c2:fc:6e:a5:
91:4f:c6:96:66:86:a5:d6:f8:dd:7b:dd:ec:79:0a:df:19:30:
4e:19:2d:a7:a3:35:ba:13:1d:12:6b:56:6b:7d:ab:39:fa:0f:
df:3f:62:6e:34:31:29:80:04:61:d6:e2:d7:3f:5b:f4:17:33:
76:86:24:4f:a3:b0:67:22:23:eb:97:e6:07:d6:86:ab:80:14:
7b:07:a3:52:85:d2:30:2f:c5:9a:1b:98:ac:81:5b:26:cf:19:
42:b2:bf:e4:2e:58:fb:30:92:61:ee:b3:7a:5c:12:fe:3b:e9:
bf:12:36:9c:7f:9f:06:c6:ae:42:95:34:9c:5d:84:05:b8:2a:
ad:3e:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:57 2025 by rpki-client