Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEO26X2sRhKk92iBW96rbiZHM64.roa
File: YEO26X2sRhKk92iBW96rbiZHM64.roa (raw, json)
Hash identifier: a3jkZiVkUILWfvbGMYBPZm8FkbLZpAhWzBuznV+lj2A=
Subject key identifier: 60:43:B6:E9:7D:AC:46:12:A4:F7:68:81:5B:DE:AB:6E:26:47:33:AE
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 7A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEO26X2sRhKk92iBW96rbiZHM64.roa
Signing time: Tue 01 Feb 2022 01:31:10 +0000
ROA not before: Tue 01 Feb 2022 01:31:10 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 110.232.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:10 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=6043B6E97DAC4612A4F768815BDEAB6E264733AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:c3:4b:01:26:c1:55:8b:8e:f8:93:95:97:
15:a8:27:56:cd:b0:7a:56:70:05:6f:75:08:58:a2:
6f:2c:91:d5:e4:e0:31:a8:7a:93:28:7f:1b:5c:e1:
71:19:d9:31:ac:8c:10:71:dd:d6:d4:2d:95:9d:ba:
a8:44:d1:59:ac:06:f6:60:83:8f:7e:f8:76:9c:a6:
59:60:f6:b0:29:55:c7:7d:bd:c3:cc:7c:4e:17:ef:
9b:bc:76:10:d8:4c:29:28:33:87:9f:4f:45:b8:32:
7a:2e:8f:15:e8:3f:d1:db:4f:49:54:c5:d5:ed:73:
ed:a0:a8:dd:4a:2f:96:cc:d2:96:53:e8:ef:3b:14:
20:ca:d6:db:11:40:e7:04:5e:5f:a6:b3:54:47:84:
cd:14:5a:ac:46:68:e2:d7:7d:91:e2:1e:37:a5:38:
2b:6a:99:4e:3f:71:44:27:d3:97:e2:f8:6d:3c:dc:
c2:bb:4f:21:80:a2:7f:ca:d4:8e:49:6a:e5:e0:35:
84:d5:6b:d4:31:de:f0:1a:56:b6:27:11:88:bd:8d:
32:ac:f8:c9:9b:30:bd:f2:90:fb:e1:40:3e:27:c3:
25:b6:57:5f:d4:89:28:de:33:04:0d:07:2f:e0:62:
b8:ec:27:20:a2:c2:59:2e:3a:a8:12:90:b3:b2:3d:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:B6:E9:7D:AC:46:12:A4:F7:68:81:5B:DE:AB:6E:26:47:33:AE
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEO26X2sRhKk92iBW96rbiZHM64.roa
sbgp-ipAddrBlock: critical
IPv4:
110.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
92:f1:a9:9e:e0:0b:40:aa:78:33:d6:d8:39:88:ff:7a:b6:d3:
f3:c3:cc:a4:95:2d:08:68:3d:8a:ef:16:8d:4a:2e:c3:6b:fc:
13:67:df:e5:ae:f1:dd:11:8d:20:1b:8f:4e:60:16:3b:06:ff:
17:53:77:c0:9c:1f:34:42:d1:d5:2c:7d:4d:94:1a:3c:ae:61:
da:06:81:b1:78:f0:e8:76:93:1a:d1:4e:b2:67:46:12:ab:00:
a9:a9:f5:20:52:e1:36:99:e5:1a:69:e4:8c:b1:40:4a:0b:0b:
d6:c7:9f:56:8f:f1:43:8f:b3:4f:51:ed:02:2b:be:1e:47:94:
0f:f3:d9:98:87:a7:1f:47:4d:e6:0d:5a:8e:69:74:5f:dc:9b:
20:aa:8b:59:10:62:5b:94:d3:b9:81:54:1b:7c:2f:36:11:e6:
4c:d5:46:6b:5d:84:eb:dc:77:89:f7:fe:79:17:46:07:df:bb:
df:09:ec:99:82:28:a8:4a:9a:ac:39:f9:59:d3:d9:dc:79:86:
56:f6:ef:d1:8f:c1:75:dc:06:ba:ba:db:61:a3:02:45:16:32:
d0:0d:86:f1:ba:e9:e4:3f:9c:ef:ff:20:f1:1d:fe:3f:d7:8a:
b1:30:ff:2e:e1:c3:3c:c5:24:de:64:34:37:78:91:e9:b9:5a:
0c:fb:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:41 2025 by rpki-client