Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/LZuVYJWxMQlw3wG6CDSI4la60wQ.roa
File: LZuVYJWxMQlw3wG6CDSI4la60wQ.roa (raw, json)
Hash identifier: jFGKolwtyU+CqWmbinmsEBcSbPO8s7G0lqmjcV2jTvI=
Subject key identifier: 2D:9B:95:60:95:B1:31:09:70:DF:01:BA:08:34:88:E2:56:BA:D3:04
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6E
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/LZuVYJWxMQlw3wG6CDSI4la60wQ.roa
Signing time: Wed 01 Dec 2021 05:39:21 +0000
ROA not before: Wed 01 Dec 2021 05:39:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 202.95.216.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:39:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=2D9B956095B1310970DF01BA083488E256BAD304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:e3:a7:8a:b6:16:9f:bd:91:bd:d5:43:ed:
5a:b8:c1:b2:71:47:9c:6d:ef:fa:b9:93:1c:ee:a3:
40:6a:41:97:29:29:da:85:5c:cc:91:af:86:bb:48:
31:16:83:08:71:8d:57:e7:89:4b:a6:ca:7a:52:9d:
52:8b:99:d1:35:06:03:48:23:49:76:93:51:51:6b:
ed:46:d4:7b:0d:d6:9c:f4:91:28:e6:d6:74:e2:fc:
0b:d1:a5:17:72:35:7d:38:12:e4:fb:21:25:9b:3d:
34:dc:0c:9c:04:c6:b5:92:25:67:e7:4c:1e:82:14:
5d:7a:b3:44:fc:a7:34:ca:93:02:0a:fb:d6:81:5a:
d4:e9:06:59:43:47:8d:56:fb:d3:29:04:94:aa:a6:
94:dc:18:0d:6e:6b:cb:9a:7f:8c:3b:df:36:5c:92:
55:90:5a:40:e5:4a:90:41:c0:10:f9:67:4c:aa:3c:
ae:5b:bd:14:41:f6:a1:67:83:31:20:b2:87:45:cf:
f9:4c:12:3c:c6:1f:89:54:0a:44:78:12:5a:3d:bd:
c7:ed:c5:01:40:d7:46:b6:0f:9a:27:88:01:39:17:
75:c9:ef:87:ea:45:81:17:1e:56:7d:2d:58:64:1c:
62:1b:c3:ff:77:85:97:97:b7:ad:fb:13:02:b7:51:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:95:60:95:B1:31:09:70:DF:01:BA:08:34:88:E2:56:BA:D3:04
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/LZuVYJWxMQlw3wG6CDSI4la60wQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.216.0/23
Signature Algorithm: sha256WithRSAEncryption
09:59:aa:99:29:6c:90:be:ae:68:f8:17:92:67:ba:b6:1f:e5:
4e:7e:12:77:28:fb:53:ba:08:49:18:ea:f5:03:f9:3c:22:9f:
a9:a8:3c:9d:71:4f:0d:91:40:40:4d:d0:bf:2e:b1:29:d4:54:
d5:68:7a:29:0b:92:07:ee:80:0b:08:a4:bf:50:72:90:ce:67:
b4:81:28:ac:30:5c:49:42:2f:f6:cb:14:51:c7:d7:5c:54:e8:
29:4b:09:c9:83:ed:df:d5:90:87:7a:c9:f4:13:9d:46:ca:d5:
4f:1b:41:31:8f:cf:47:5b:cf:93:1b:8b:34:ab:1f:f4:64:aa:
15:e9:c3:29:f3:b4:02:76:70:59:09:19:10:36:92:b2:2e:3a:
ea:c3:9e:74:ee:c8:9f:88:bb:c6:1c:58:0c:7b:36:70:c2:6f:
1d:56:6e:34:52:85:68:4a:d9:0e:15:28:4d:ee:72:b7:1e:53:
5a:2b:d1:e1:3a:46:de:fb:b2:4a:3c:cb:de:27:0b:8d:a7:36:
42:6a:61:28:da:17:99:ad:92:b1:32:60:63:08:8d:cc:6c:f9:
a8:40:b3:d1:ac:2a:90:e4:08:bb:66:6f:75:95:d3:e5:c0:dd:
bb:44:21:16:b1:6e:fc:b6:84:6f:85:65:e4:e5:83:45:33:cd:
c8:9c:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:20 2025 by rpki-client