Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/oS0cjxu5jN34TpHLtnnGfSAls28.roa
File: oS0cjxu5jN34TpHLtnnGfSAls28.roa (raw, json)
Hash identifier: DVJA0qn+2dGjrigS0BKQmz9er3FbVklwKGa2whUDtUY=
Subject key identifier: A1:2D:1C:8F:1B:B9:8C:DD:F8:4E:91:CB:B6:79:C6:7D:20:25:B3:6F
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 83
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/oS0cjxu5jN34TpHLtnnGfSAls28.roa
Signing time: Tue 01 Feb 2022 01:31:14 +0000
ROA not before: Tue 01 Feb 2022 01:31:14 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 210.156.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:14 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=A12D1C8F1BB98CDDF84E91CBB679C67D2025B36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:b4:d2:40:36:a3:d8:52:ff:85:a8:99:17:
7f:67:68:e5:48:16:90:3a:41:c7:af:4e:66:31:a8:
bb:c3:f1:c5:1e:9e:65:63:58:6d:77:3d:2a:55:c0:
90:c8:0a:00:3e:60:b0:e4:97:5b:dd:44:6f:7c:bc:
74:b0:f9:bd:fe:84:93:f6:ef:91:bc:17:84:79:15:
87:b2:a1:e8:4f:16:b0:14:5a:dc:69:0b:63:52:ac:
7d:50:1d:f8:1d:1d:41:3e:c1:6b:6a:64:ab:e1:04:
3e:1d:83:96:df:7f:5f:fa:0e:e2:ad:1b:ee:67:11:
32:7e:b0:e6:8d:fc:9b:c7:03:04:fd:55:59:3a:41:
16:09:16:8a:41:93:14:84:c5:e8:b3:31:6a:4b:9b:
a5:e3:45:b7:cd:c3:43:6f:39:d0:d0:e0:8e:dc:ab:
ab:5c:5b:3f:37:d9:31:8e:21:69:48:3e:c3:1d:2e:
94:8f:a1:83:e5:8b:37:75:40:40:2b:aa:47:11:b6:
5e:ee:ba:4c:29:c4:4a:ba:97:4d:0f:0f:2e:2e:f2:
2f:4d:d9:07:a9:91:89:e6:6c:be:6c:93:fd:11:6a:
96:42:f3:35:96:fb:79:af:57:1d:7b:c2:90:ab:c3:
94:70:94:7a:67:fb:f2:58:70:c7:13:30:01:ba:48:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:1C:8F:1B:B9:8C:DD:F8:4E:91:CB:B6:79:C6:7D:20:25:B3:6F
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/oS0cjxu5jN34TpHLtnnGfSAls28.roa
sbgp-ipAddrBlock: critical
IPv4:
210.156.160.0/20
Signature Algorithm: sha256WithRSAEncryption
53:03:6d:35:a1:7d:b0:95:40:48:ce:7b:18:b6:ca:19:a2:a2:
23:99:fa:e3:0c:29:3a:6c:c5:fe:3d:0a:7e:1d:ba:9e:3b:07:
db:b4:a6:6a:e4:50:ee:89:cb:7d:49:2c:92:3b:41:49:98:21:
1e:ff:fb:54:16:4e:ae:9d:f7:fe:9f:db:71:cc:35:98:54:9b:
46:bf:85:e4:13:9f:6a:d2:f1:46:dd:53:76:72:10:9b:a0:85:
6e:ac:56:b1:48:ef:eb:7f:74:46:c6:0b:55:38:aa:c0:3b:e0:
e0:64:e7:18:50:bb:51:94:67:b4:77:34:43:3f:22:c3:d2:3e:
23:6b:c1:06:8b:d7:c1:54:f7:5b:d7:3f:ff:03:d5:6a:02:66:
55:67:44:8a:f2:5c:b1:08:32:62:e1:d9:e5:36:f6:0d:f7:37:
b4:5a:50:02:f7:df:7b:69:21:f4:9b:0e:bb:c5:a4:ba:fa:26:
9b:69:40:1d:bb:e1:b3:11:73:77:ab:8b:4b:c3:41:7b:20:6f:
c7:e9:e7:2a:f7:2a:e4:1d:bb:38:cf:0a:2d:03:26:11:bc:35:
d0:ef:0f:8b:fd:48:cf:1b:b2:5e:13:75:c7:41:a7:a1:e8:33:
81:33:da:74:a1:85:5e:64:db:ec:a4:e2:15:99:6d:2f:eb:4e:
ed:82:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:41 2025 by rpki-client