Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ko6FZc0ahW0skcp2yU9ZSpTvkc.roa
File: 5ko6FZc0ahW0skcp2yU9ZSpTvkc.roa (raw, json)
Hash identifier: 7iFlqqVqg3CSchbIMTnTKcaUA23gcX8AdOi8Wyp4ixM=
Subject key identifier: E6:4A:3A:15:97:34:6A:15:B4:B2:47:29:DB:25:3D:65:2A:53:BE:47
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 65
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ko6FZc0ahW0skcp2yU9ZSpTvkc.roa
Signing time: Fri 22 Jul 2022 04:25:25 +0000
ROA not before: Fri 22 Jul 2022 04:25:25 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 59.156.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 22 04:25:25 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=E64A3A1597346A15B4B24729DB253D652A53BE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:1a:08:84:95:65:28:bf:70:79:c1:66:54:
aa:f2:dd:39:6f:6c:90:da:cd:1f:a6:51:97:91:1a:
28:03:16:cf:a1:4f:0a:f4:f7:ba:9f:b9:e8:42:49:
b2:4c:e6:91:a0:9e:da:35:ee:79:af:6b:73:5e:bf:
c8:84:12:a9:58:d9:5f:ad:c2:23:0b:aa:9d:55:de:
a1:06:bf:10:d7:88:3c:de:51:a9:b8:fb:a3:df:9e:
85:d4:f1:ee:a8:48:85:46:a0:21:48:4f:42:44:eb:
64:e3:60:25:39:95:1c:fd:96:1d:6e:97:f0:74:0c:
14:e3:48:0e:d3:20:63:e8:42:94:5c:fb:c5:d7:a8:
53:0a:12:33:85:70:e0:d7:ac:9e:03:0c:49:3a:30:
c6:00:1d:04:7a:5c:46:58:48:bf:db:61:9a:9a:88:
2c:3a:33:b5:cd:29:67:e7:25:06:6a:f4:f5:11:20:
84:88:59:f0:79:ec:69:bd:23:17:9b:23:67:7d:6c:
05:6c:1c:8e:c6:6e:d2:60:27:2e:20:c5:f4:97:7f:
23:0c:02:2a:ea:dc:41:e5:de:7b:c1:af:69:fa:30:
c1:be:73:7e:e0:97:b1:48:79:da:91:a8:21:73:5d:
76:4f:97:34:52:f3:65:c0:c4:14:eb:d7:c7:9d:00:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:3A:15:97:34:6A:15:B4:B2:47:29:DB:25:3D:65:2A:53:BE:47
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ko6FZc0ahW0skcp2yU9ZSpTvkc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.156.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:39:b4:49:c0:6d:fc:33:3b:5a:b0:3c:0a:70:fc:f0:40:ff:
0d:d7:c4:96:8a:e0:dc:90:3e:a7:5f:02:7b:62:fc:85:80:bc:
7b:92:33:25:bb:75:57:cb:a6:50:89:22:33:19:19:ae:64:9b:
06:e0:7e:d3:24:bc:c3:28:cb:ba:cc:68:2d:46:44:23:e3:11:
89:76:6d:41:cb:1b:99:ad:0b:da:b6:1f:6b:36:e1:1e:a9:49:
9c:df:08:83:8c:5e:7f:8d:81:02:27:8f:07:9b:63:84:6c:a2:
5c:22:55:04:cc:e2:fb:1b:e6:f6:c9:3f:62:2e:67:ed:6d:7c:
c6:94:c9:3e:a5:89:a6:9b:c0:49:c3:dc:23:bf:42:1b:8b:95:
82:0f:3b:3a:c8:c9:24:89:ed:6c:5f:0b:37:be:cd:15:66:8c:
e9:c6:a1:50:ad:a4:e9:0b:79:af:fe:f5:c6:9a:37:42:74:9d:
d3:92:35:4a:b5:fc:39:63:ad:63:17:16:f4:33:56:a8:9a:06:
1e:cf:40:5b:76:7b:44:f9:20:d6:9e:4a:6a:5e:d7:08:e9:e3:
83:3f:a8:a9:51:0b:18:48:6a:40:9a:ae:24:d1:ce:98:90:08:
5f:04:48:a5:4a:a5:01:d3:2d:2c:90:b1:8f:8a:de:69:38:33:
bf:00:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:52 2025 by rpki-client