Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/tznKnylaIOaT19pQX0hnL6LUUkE.roa
File: tznKnylaIOaT19pQX0hnL6LUUkE.roa (raw, json)
Hash identifier: 1ZXzM+QH+7ePux55ML97HDsAABlJpDE1EeLrWARY+eo=
Subject key identifier: B7:39:CA:9F:29:5A:20:E6:93:D7:DA:50:5F:48:67:2F:A2:D4:52:41
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 25
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tznKnylaIOaT19pQX0hnL6LUUkE.roa
Signing time: Tue 01 Mar 2022 08:33:55 +0000
ROA not before: Tue 01 Mar 2022 08:33:55 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 110.44.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:55 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=B739CA9F295A20E693D7DA505F48672FA2D45241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:eb:0b:c1:49:a6:71:82:11:7f:4e:f1:6d:
dc:76:b2:64:e2:42:d0:b1:6d:99:31:34:82:09:66:
cc:7b:e9:f7:29:fd:ab:13:66:fb:67:50:9c:ec:69:
07:5c:5b:48:f7:16:e7:de:3a:63:2e:c4:82:a3:d6:
3c:78:da:c0:e9:e5:e7:9c:a7:27:9c:fb:26:5e:3f:
38:2a:ca:a9:ce:31:be:db:22:a7:ea:05:0c:c2:39:
e1:93:15:c3:ff:99:34:d3:72:6b:05:2b:9b:5d:fb:
b1:fe:7a:15:91:0f:7b:50:b5:db:95:c5:78:47:8e:
bd:42:39:51:c9:f0:c4:92:16:39:dd:00:e0:c3:13:
50:06:4a:87:83:3b:c9:90:61:1e:d0:1b:be:45:6f:
57:59:85:b1:b0:a6:94:45:07:e5:0c:72:dc:90:8e:
a0:33:3b:77:88:82:16:45:46:a9:45:6c:57:57:a9:
7f:fc:32:b5:04:b8:fc:93:64:2b:88:9d:61:fa:67:
56:8c:5d:a7:71:0c:ff:87:96:a8:3e:52:b6:59:40:
ee:79:e1:16:2b:11:2c:57:10:71:8e:e8:7f:6b:b2:
c3:8a:f0:f9:44:7a:ba:91:f3:50:4a:65:58:b4:f9:
74:ff:b9:d2:dd:53:a1:14:6d:66:b7:91:ff:11:56:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:CA:9F:29:5A:20:E6:93:D7:DA:50:5F:48:67:2F:A2:D4:52:41
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tznKnylaIOaT19pQX0hnL6LUUkE.roa
sbgp-ipAddrBlock: critical
IPv4:
110.44.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:2b:e5:d3:ee:e6:40:2b:d4:25:44:ba:a9:7f:cb:cf:41:41:
5e:b7:9d:1d:06:23:11:42:85:21:22:f7:5e:b5:37:4e:24:a1:
13:e8:7f:2a:b8:0f:93:b3:f1:a0:48:9b:67:da:80:d8:fe:00:
27:b7:ac:57:3b:a4:b3:48:53:f2:1b:fc:b6:43:dd:0b:b6:1a:
af:0c:de:9e:fb:09:46:57:43:50:e3:0d:5f:7c:95:d4:fc:8d:
08:46:30:27:91:80:75:86:3f:e2:c7:5e:c7:75:bf:19:02:cc:
26:c3:4c:aa:dc:7c:ef:dc:4b:10:91:f6:1f:b1:0e:76:17:0d:
cd:54:a8:7e:4f:43:39:be:75:7f:0e:c5:60:01:bd:c7:6d:7d:
e9:e9:02:ad:b4:d9:c5:b9:f8:2c:4c:7a:7a:fa:c6:c3:26:51:
17:44:c9:17:f5:96:10:81:72:25:eb:d1:d8:dd:4b:cf:a2:ed:
48:b4:a0:97:3a:51:cc:3d:65:cd:ca:cb:dd:68:c3:40:bc:59:
bc:df:76:b9:a8:0b:d0:e0:68:7a:0e:b4:f0:06:6e:6e:c3:95:
3f:d8:c8:92:bf:80:7f:51:1a:fa:41:8f:b2:78:0a:37:8d:77:
03:76:37:4d:bf:24:2c:09:b4:c1:f4:1d:d4:a9:e5:98:16:78:
05:5e:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:10 2025 by rpki-client