Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/S4gm2oOA2ddeb8pzDTfti2sIrW8.roa
File: S4gm2oOA2ddeb8pzDTfti2sIrW8.roa (raw, json)
Hash identifier: 0RAzMvPY4LRWsZrHr1SngX9vivS8UjSyRInEPQIzYfM=
Subject key identifier: 4B:88:26:DA:83:80:D9:D7:5E:6F:CA:73:0D:37:ED:8B:6B:08:AD:6F
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 7B
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/S4gm2oOA2ddeb8pzDTfti2sIrW8.roa
Signing time: Tue 01 Feb 2022 01:31:11 +0000
ROA not before: Tue 01 Feb 2022 01:31:11 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 39.110.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:11 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=4B8826DA8380D9D75E6FCA730D37ED8B6B08AD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:2f:a0:0f:fa:8e:94:df:4f:f1:53:a3:d0:
3a:af:42:d5:c6:b7:a8:3b:c0:0a:a3:f6:66:8a:68:
81:62:40:fd:71:cb:2f:a0:21:2f:5b:8e:45:55:e4:
b9:88:2e:fe:2c:ac:15:fd:df:78:56:0d:b7:a1:3e:
4b:04:9a:b7:d7:3b:32:dd:80:4d:7f:31:94:1c:83:
6b:d6:31:4f:8f:69:57:10:08:64:f5:1a:14:d9:56:
17:9e:c3:19:d4:9f:bf:1e:e4:1d:0d:9c:66:0d:49:
8e:95:7c:45:27:75:08:d2:aa:a4:be:b6:5a:a6:52:
42:a4:5e:31:2b:38:31:90:ec:a8:e5:02:4a:11:99:
b0:80:7f:48:af:95:54:e5:98:6a:38:6b:ba:ed:ed:
b8:f6:4b:8b:a7:0d:27:56:e5:af:c0:01:01:02:2f:
b4:50:33:b9:2a:20:c5:b8:8e:84:c0:8e:e6:f0:fd:
59:f4:33:8f:2a:da:43:20:82:c5:4b:1d:5e:7b:c2:
78:34:7f:67:49:90:ed:fb:5f:4b:1c:23:f7:03:2d:
e2:75:8b:37:5e:6e:d2:dc:f9:59:a3:6c:bf:58:01:
3f:10:be:9d:b7:81:e4:03:cf:ec:e4:fa:af:47:2d:
dd:70:3e:e9:44:da:d5:e5:e8:5c:10:b9:77:1a:8d:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:26:DA:83:80:D9:D7:5E:6F:CA:73:0D:37:ED:8B:6B:08:AD:6F
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/S4gm2oOA2ddeb8pzDTfti2sIrW8.roa
sbgp-ipAddrBlock: critical
IPv4:
39.110.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a5:03:30:03:d0:b8:53:47:5b:94:56:1f:50:91:66:b5:9c:94:
b2:86:17:30:f2:21:64:c8:ce:50:b5:32:f1:0d:a0:58:fb:0e:
94:bd:f4:c9:5c:11:b9:89:51:4e:31:5a:09:05:2d:4d:42:ee:
34:68:89:2f:3d:9e:43:05:8e:85:68:39:b1:5d:77:c3:4a:01:
8a:c4:9b:94:0f:a9:bd:46:cf:ea:a7:01:a1:2f:87:a1:19:f5:
3a:85:f3:8c:d1:f2:fb:4c:26:33:82:6f:68:65:c4:4f:59:3a:
a0:78:3d:a0:57:e4:8a:ce:33:92:a4:26:6d:74:e1:c6:a0:cb:
a4:17:97:45:00:71:b4:db:de:99:35:7d:66:55:ab:86:69:24:
d2:2c:d8:40:c8:f5:a0:0b:13:ad:3f:8f:86:13:60:8e:3b:4a:
45:24:8d:a9:99:9f:95:4b:6a:c6:2d:70:ff:fc:76:45:f5:49:
a9:fc:10:3f:89:f4:f1:a6:f9:cf:d3:a8:8b:e8:62:f2:3e:7b:
78:2d:d9:f4:6b:27:02:ec:f8:ce:3b:99:51:47:ce:b2:0f:b4:
f7:6e:33:3d:eb:0c:e8:44:09:56:e0:89:8d:c1:2b:f2:a7:d5:
88:e2:5f:2d:de:6e:30:8e:6a:65:bd:50:24:cd:1c:92:50:19:
8a:af:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:30 2025 by rpki-client