Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lFsdW1QJsKevtZ9h3mNIctzWA1k.roa
File: lFsdW1QJsKevtZ9h3mNIctzWA1k.roa (raw, json)
Hash identifier: cG0i6eDRV0ahWmAeQ1OOxlu8wvaGHWjEVsO6H0sZi+I=
Subject key identifier: 94:5B:1D:5B:54:09:B0:A7:AF:B5:9F:61:DE:63:48:72:DC:D6:03:59
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 41
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lFsdW1QJsKevtZ9h3mNIctzWA1k.roa
Signing time: Tue 23 Feb 2021 08:57:31 +0000
ROA not before: Tue 23 Feb 2021 08:57:31 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 150.147.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:31 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=945B1D5B5409B0A7AFB59F61DE634872DCD60359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:87:73:11:6a:1d:8e:2a:07:3a:80:9e:0d:
2d:61:02:8a:71:e9:ae:46:ba:9e:ce:b7:96:30:04:
01:99:54:7a:2f:04:b5:87:1b:88:bd:2d:56:dc:60:
67:41:29:93:39:79:49:9d:7a:33:03:ac:06:12:a8:
7c:35:0d:35:ae:98:e7:2f:9d:54:57:70:a6:bb:53:
9d:80:43:3b:3b:86:ec:c9:a7:5c:33:04:35:0c:6e:
c0:5f:1b:5b:10:e6:5a:67:5a:64:3c:82:19:ba:67:
c6:7d:76:13:c2:5f:bd:e4:e4:17:c0:21:11:fe:cb:
8a:89:29:5a:5a:62:47:9a:57:d5:33:03:08:f4:30:
21:ca:61:59:04:39:a0:a1:b9:ac:05:bb:9e:a1:43:
c2:65:49:31:94:7f:d1:00:db:5e:9c:46:12:4b:9a:
2d:89:f6:e8:8b:a2:a2:c9:cd:c6:9f:9e:27:73:d1:
e2:69:25:f0:54:f5:d2:55:62:15:0b:bb:fe:4f:fb:
7f:35:9f:a4:bc:58:81:79:6e:34:23:96:fd:75:d0:
f8:5d:9c:c2:9c:f3:3e:4a:a5:a0:44:4f:74:3d:8e:
3a:72:91:9a:b1:db:60:a4:6a:61:75:81:10:45:8c:
53:81:2b:00:32:43:b1:98:9e:d2:85:f2:40:8a:ae:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:1D:5B:54:09:B0:A7:AF:B5:9F:61:DE:63:48:72:DC:D6:03:59
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lFsdW1QJsKevtZ9h3mNIctzWA1k.roa
sbgp-ipAddrBlock: critical
IPv4:
150.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:75:90:6f:87:4c:5d:f5:f8:ea:84:ba:d3:3b:73:96:e8:d7:
f7:cf:ea:fa:3b:1a:0c:c3:73:b3:80:b6:2a:5e:5e:8a:be:d6:
93:92:96:c4:41:55:d4:40:60:92:02:4b:f3:16:45:66:1a:56:
76:7d:25:e8:5f:d5:10:f3:d6:b8:12:6d:9d:48:a3:10:75:72:
29:52:38:cb:37:83:d6:76:f4:c8:22:5f:8d:54:0c:c0:69:fc:
19:93:c4:c9:8f:9b:b1:2f:0d:c9:f8:08:70:e3:b6:73:e4:b3:
a6:76:e2:43:de:86:72:4b:08:7e:bb:ff:06:8c:71:4c:2f:14:
94:0f:ff:c0:9c:ac:67:55:13:01:78:89:d2:93:ce:5f:c5:2f:
9d:b4:14:f1:0f:bf:48:02:9d:ac:2b:89:aa:b6:b0:8e:7f:4c:
87:ab:e4:f3:f6:2f:ff:38:3f:99:5a:41:65:00:8c:92:bc:50:
c5:50:72:3d:70:06:14:3f:3c:46:bc:ae:ff:81:27:65:21:b5:
1a:bc:8c:88:53:d2:fe:37:a9:bd:0d:c1:7c:12:3c:98:50:80:
bf:b5:3d:8e:6a:24:da:01:fe:a6:19:8b:f1:b1:ec:29:d6:4c:
6f:99:74:9b:fe:ce:c3:56:22:18:27:85:07:cb:cd:cd:c5:39:
bb:d0:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:01 2025 by rpki-client