Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/n0Ibw4myipKMT0Q1aiD6kxzDFvA.roa
File: n0Ibw4myipKMT0Q1aiD6kxzDFvA.roa (raw, json)
Hash identifier: 0zqMvfcM4Tlep5rlApSnCJvUETElLhWwRcIeVHNm5Fk=
Subject key identifier: 9F:42:1B:C3:89:B2:8A:92:8C:4F:44:35:6A:20:FA:93:1C:C3:16:F0
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 88
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/n0Ibw4myipKMT0Q1aiD6kxzDFvA.roa
Signing time: Tue 01 Feb 2022 01:31:17 +0000
ROA not before: Tue 01 Feb 2022 01:31:17 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 58.87.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:17 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=9F421BC389B28A928C4F44356A20FA931CC316F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:ca:05:cb:7a:e0:8f:47:6a:1d:a0:60:00:
5e:23:70:4b:bc:d0:85:34:87:be:e9:d6:d7:52:b0:
cf:a0:14:ce:49:a0:df:ad:4a:2c:7f:69:e1:1f:ae:
1d:4a:fb:15:45:3b:70:f8:43:12:c7:c8:1d:68:38:
e8:82:72:fa:e7:7e:d6:14:b8:54:5c:07:83:3c:31:
76:25:e8:fa:7c:39:02:16:d9:6c:83:a3:d0:e0:e9:
f0:c6:ce:a6:ec:24:67:78:e0:10:76:24:42:4d:42:
c2:90:33:34:e1:ec:f0:f4:dc:94:4e:d9:cc:0d:ed:
2d:a2:55:9a:ee:05:73:75:7b:29:5c:a7:75:48:84:
15:d5:ed:2c:30:9f:0b:cf:65:3b:9a:79:a7:db:e8:
f4:a2:c5:b4:b3:07:d9:5a:fa:e3:38:d7:d4:d7:71:
a7:44:01:f9:9b:46:01:b0:e2:1d:ba:ca:fe:3b:f4:
fa:5b:15:96:ea:f4:8d:e2:bc:77:fd:df:66:b3:93:
80:41:c2:4c:5e:1a:45:d6:a6:8d:98:a7:09:da:e6:
c4:98:89:68:d3:6f:fd:0a:ac:f3:9c:73:94:38:59:
ae:53:bb:51:59:fb:f0:9c:36:18:f2:73:28:47:ef:
b4:bb:78:09:35:5f:d5:c9:8a:34:7f:ee:78:38:d8:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:1B:C3:89:B2:8A:92:8C:4F:44:35:6A:20:FA:93:1C:C3:16:F0
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/n0Ibw4myipKMT0Q1aiD6kxzDFvA.roa
sbgp-ipAddrBlock: critical
IPv4:
58.87.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a5:76:31:83:72:91:f7:f4:ab:e2:d2:57:42:86:7d:c1:56:b0:
22:9b:33:29:09:d8:78:77:47:1b:92:dd:6f:b2:2f:d0:09:73:
10:7a:0d:1a:c9:1d:a5:5e:4f:79:28:23:85:13:a0:50:60:a8:
f0:1c:c8:ea:dd:4f:e6:f3:2e:1e:d7:8a:1a:da:88:95:da:61:
47:2a:80:eb:b0:16:3d:aa:22:47:35:f0:fa:b3:5b:aa:82:96:
2f:0d:9c:51:53:d3:9d:a9:2e:21:34:aa:11:ac:40:47:a7:74:
fe:92:4c:2b:2a:b5:9a:e4:47:d7:9e:e3:aa:5e:90:a4:11:8e:
b4:f1:30:23:7a:ec:41:f6:d6:d9:4e:cf:75:03:5c:18:3a:a7:
9f:49:3e:5b:78:c6:2f:f4:8a:09:a8:bc:06:56:16:af:7d:2c:
b3:35:b1:1d:85:46:c4:bc:44:c5:52:d5:55:a2:76:74:7a:42:
17:14:4c:6b:10:49:fe:29:34:98:7f:1f:ac:08:40:2f:6e:8b:
e1:e0:59:be:5b:d0:31:30:09:b2:61:6f:50:5e:c3:b9:ca:69:
66:3c:b4:81:04:ac:eb:bd:6e:17:ff:28:c6:bd:f9:cb:31:e4:
f2:92:15:c2:b1:38:3c:e4:c7:43:99:c3:d1:45:b3:65:b1:23:
91:3b:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:25 2025 by rpki-client