Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wHf9o8a8lBcT2n-0bKgc8EH7-zs.roa
File: wHf9o8a8lBcT2n-0bKgc8EH7-zs.roa (raw, json)
Hash identifier: OYtq9MjV14RKvCFqTfa/v0FwORVuDXdc6go4ZwqIut8=
Subject key identifier: C0:77:FD:A3:C6:BC:94:17:13:DA:7F:B4:6C:A8:1C:F0:41:FB:FB:3B
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 67
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wHf9o8a8lBcT2n-0bKgc8EH7-zs.roa
Signing time: Tue 23 Feb 2021 08:57:44 +0000
ROA not before: Tue 23 Feb 2021 08:57:44 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 116.82.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:44 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=C077FDA3C6BC941713DA7FB46CA81CF041FBFB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:d4:93:2c:5d:a9:ca:51:76:f4:40:0e:b7:
f6:14:a4:5f:eb:a0:dc:4b:20:91:c3:d1:6c:f2:33:
f1:f0:6a:97:b1:b0:e0:22:aa:9a:9e:38:c4:2f:8f:
87:a7:62:f1:0d:82:80:15:bd:16:9e:31:26:6f:b2:
51:d8:30:68:99:f7:78:89:5d:10:a9:35:c8:46:5d:
c7:af:b9:bc:1f:df:e0:2f:5b:94:2d:60:de:c8:dd:
d0:3b:5f:f5:64:25:fd:0c:34:32:cf:f6:8e:ad:e2:
ab:0e:e7:bf:94:8a:15:c4:12:95:6c:6c:32:a7:ee:
86:75:43:2d:a1:67:3f:ae:de:74:44:60:0b:aa:57:
98:74:ef:b2:25:1f:b4:c1:cc:af:9b:fa:8c:8f:d6:
d1:38:44:47:2f:c7:8a:bc:08:58:2d:84:a6:31:ea:
87:de:55:08:da:15:6d:a1:43:27:0c:55:7a:e9:5e:
36:0e:52:99:db:92:b7:59:7d:b7:6c:e0:57:f2:3b:
a3:2b:80:4e:63:c0:55:2d:e7:51:0b:3c:9c:ef:ac:
66:88:e6:e7:24:d5:76:4a:59:2f:e3:5e:43:f7:34:
de:8a:1e:68:8e:2d:71:d2:84:0f:97:8f:38:e1:b1:
d0:f8:6e:09:77:c3:46:97:35:7d:b1:34:b4:b6:97:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:77:FD:A3:C6:BC:94:17:13:DA:7F:B4:6C:A8:1C:F0:41:FB:FB:3B
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wHf9o8a8lBcT2n-0bKgc8EH7-zs.roa
sbgp-ipAddrBlock: critical
IPv4:
116.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:e6:b3:43:d5:08:7f:3a:f3:66:71:ad:6c:02:04:cb:96:9c:
0e:55:e0:6c:15:07:b3:5f:c9:cb:be:3c:fb:3a:ff:1d:53:cf:
8e:34:e1:c2:da:2e:20:8f:70:97:5a:23:c9:2d:86:98:bf:32:
df:62:49:d3:24:59:b3:13:46:8d:a4:44:51:8d:2b:8a:de:11:
40:b3:44:77:53:63:f3:dd:aa:04:f6:7c:35:44:ee:da:8b:13:
f9:81:c2:88:77:9a:8e:27:b4:75:f1:1a:f7:43:47:66:67:ca:
93:f4:af:fb:46:e0:de:6f:bc:53:cd:82:6f:b4:e3:3c:6f:e0:
a6:ec:c2:3e:99:3b:2a:78:5c:64:9c:8e:47:c6:14:28:0e:f1:
af:16:8e:95:ac:7b:22:dd:95:09:af:91:3d:a0:bd:d0:64:3f:
51:11:a3:85:11:8d:4d:31:52:60:84:40:48:10:ec:4d:20:d9:
80:98:e6:0f:43:23:7c:82:6e:d8:54:42:29:e2:4b:b5:d4:4d:
66:dd:7f:a6:d8:1f:30:8f:e7:4a:6b:fc:43:cc:90:f0:ca:da:
9f:ba:b2:d8:81:32:4d:fd:d2:a8:0f:41:18:f1:65:a2:ef:84:
8f:d1:61:da:93:a0:52:17:34:41:39:40:56:06:52:2b:18:b0:
13:ae:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:05 2025 by rpki-client