Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/pofa9LrnQVuRwH8-OKSv7Mll5Xs.roa
File: pofa9LrnQVuRwH8-OKSv7Mll5Xs.roa (raw, json)
Hash identifier: 336qg6iLkmMlWklplW5cZYfTxOAF6yYROUKs+QEJh60=
Subject key identifier: A6:87:DA:F4:BA:E7:41:5B:91:C0:7F:3E:38:A4:AF:EC:C9:65:E5:7B
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 08
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/pofa9LrnQVuRwH8-OKSv7Mll5Xs.roa
Signing time: Fri 25 Feb 2022 07:12:39 +0000
ROA not before: Fri 25 Feb 2022 07:12:39 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 17676
IP address blocks: 61.203.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 25 07:12:39 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=A687DAF4BAE7415B91C07F3E38A4AFECC965E57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:26:35:7c:35:6a:0c:bb:34:65:8e:80:a6:
38:45:c0:12:11:5f:7d:3c:a5:22:56:3b:22:3e:24:
b2:e2:c1:5e:a8:2e:8e:04:fe:ad:a6:7d:ce:8a:45:
fb:54:3e:b1:b6:e4:2a:fb:d6:d6:ea:b2:f0:0c:c5:
24:7d:6c:4d:e8:ee:13:b3:ee:6c:2e:32:90:ce:c3:
b1:03:b4:ef:3e:7e:e9:fd:4f:38:4e:01:c6:27:a8:
ff:99:25:9f:b1:26:69:0d:f7:1e:0a:33:6f:03:c9:
c7:75:e4:49:ba:f8:3c:5f:50:14:da:74:12:5d:c4:
20:22:b0:0d:04:64:57:f6:03:e3:7d:71:34:ae:15:
6b:c1:ff:f1:d0:66:58:db:ed:bc:98:64:bf:aa:1c:
8d:36:4b:f6:be:35:e5:b4:5c:d6:7d:37:50:ac:6f:
7f:28:c3:64:e8:59:d5:b5:37:b1:5e:52:14:62:f4:
58:03:42:5b:29:d9:73:90:8c:9e:15:b0:32:d8:62:
f1:ae:a6:ab:85:69:3a:92:af:b3:13:6f:ca:7c:e2:
ee:a2:e8:36:52:e0:09:a5:03:57:de:74:92:a9:72:
3b:d7:ff:98:50:43:95:a2:cf:eb:85:c5:f0:26:72:
e5:2d:fe:39:58:f9:e5:d6:8f:d5:7a:01:d9:c7:09:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:87:DA:F4:BA:E7:41:5B:91:C0:7F:3E:38:A4:AF:EC:C9:65:E5:7B
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/pofa9LrnQVuRwH8-OKSv7Mll5Xs.roa
sbgp-ipAddrBlock: critical
IPv4:
61.203.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:0e:32:a3:89:1f:3f:30:60:55:c0:60:cf:33:db:7f:95:13:
c4:20:5e:ec:52:27:90:da:c7:0c:f4:8e:7b:d0:51:0e:0c:b3:
d0:9c:75:56:1f:93:95:b5:46:7c:05:cd:fe:13:f3:1b:a2:01:
18:10:a8:7b:0c:a7:04:11:79:bf:f2:92:ac:01:8b:3e:89:9b:
5f:da:a8:a1:51:40:36:e4:aa:1d:47:60:d3:c5:d5:51:38:c1:
c2:bf:4c:e0:36:27:ac:17:4d:7d:90:57:12:ca:27:c6:5f:32:
e3:21:01:27:3c:90:b9:10:7f:88:60:46:1d:01:0d:14:03:a9:
01:e5:d7:7d:fd:c1:b3:dd:68:3c:0d:0d:9e:20:50:bc:ba:37:
80:99:72:20:39:10:b8:a2:63:54:6d:d5:55:78:a9:0b:f1:4f:
75:ab:01:63:37:1c:e4:e7:42:db:d1:19:7f:56:c9:b5:5d:9e:
60:5c:55:04:c2:c2:34:e2:c7:1f:f8:6d:a6:63:07:9b:f8:95:
80:fe:42:68:94:ce:6a:17:36:f7:90:9c:4c:1b:dd:86:fc:60:
17:09:6d:8e:ba:35:e5:c5:4c:92:a6:d4:0b:8a:94:90:d1:5b:
25:0f:96:2b:56:7a:9c:d5:eb:29:67:e5:34:2d:d5:ca:fd:a5:
47:22:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:46 2025 by rpki-client