Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/jJRk5-xHLiJSqwEkucCXQXD7LOI.roa
File: jJRk5-xHLiJSqwEkucCXQXD7LOI.roa (raw, json)
Hash identifier: UmDHrm4/nMGilU2q3oXUXfl047RXEo/ce3QfJS9nGLQ=
Subject key identifier: 8C:94:64:E7:EC:47:2E:22:52:AB:01:24:B9:C0:97:41:70:FB:2C:E2
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 1D
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/jJRk5-xHLiJSqwEkucCXQXD7LOI.roa
Signing time: Sat 30 Oct 2021 05:08:49 +0000
ROA not before: Sat 30 Oct 2021 05:08:49 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Oct 30 05:08:49 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=8C9464E7EC472E2252AB0124B9C0974170FB2CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:e8:25:9b:4e:97:1b:b0:14:05:c4:12:58:
66:48:31:fa:72:93:0e:a8:8d:eb:ba:88:17:ff:57:
09:fe:41:08:83:b4:8c:1a:d1:1c:7c:d4:5b:31:ac:
f5:c9:bf:7a:f7:4c:1b:ce:5e:de:8c:04:80:94:54:
bc:c7:1c:68:da:2f:97:e5:b6:a2:0c:77:34:cb:f2:
d3:8b:f1:f9:1f:90:f3:0d:77:56:c1:da:8b:f3:cf:
b7:c9:e3:df:56:9c:3a:37:34:42:11:60:48:cb:ba:
67:ae:29:20:8f:05:77:cb:0b:36:fc:3a:ef:aa:fa:
06:0c:02:89:8b:61:4b:87:29:32:87:b9:55:0c:48:
21:6b:bf:a4:2f:01:73:cc:46:c7:28:89:26:55:5f:
13:f9:3a:0d:d0:75:87:b6:2d:17:ba:fd:38:54:c3:
ed:4b:0d:56:1e:3c:00:15:31:77:98:56:30:79:30:
5e:b6:16:3f:5b:c8:35:81:13:9e:30:81:1c:76:dc:
23:6d:44:dd:c1:0a:bf:53:76:94:16:5a:90:9e:23:
54:7a:cb:e8:20:eb:b9:b9:8e:fd:52:ac:16:9f:06:
67:1b:26:c1:63:ad:b4:32:6c:23:d5:ab:cf:0a:50:
a1:82:55:e8:31:0d:17:72:c4:06:96:51:81:e5:63:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:64:E7:EC:47:2E:22:52:AB:01:24:B9:C0:97:41:70:FB:2C:E2
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/jJRk5-xHLiJSqwEkucCXQXD7LOI.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.16.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:ed:b7:82:3b:c7:a7:ee:57:13:b6:72:e9:99:c2:05:9e:a1:
92:5f:61:3f:36:2a:36:cc:9c:55:a8:86:d6:cf:1b:ac:a3:74:
ec:2b:66:49:bc:6d:b2:00:07:5d:34:6e:64:53:9b:6c:df:09:
f3:70:7b:41:e4:d5:9d:96:10:48:a0:9d:7a:48:6a:c8:dd:41:
3d:8a:a3:37:38:11:c0:a7:ca:b7:e5:0d:2c:a0:aa:cc:7a:f3:
a0:7b:54:e2:2d:5d:39:d5:bb:bd:a3:3e:d5:d1:2d:a7:8f:e1:
f8:37:97:8d:38:b7:20:50:3a:d9:43:6c:8b:84:55:87:3d:a1:
64:dc:8d:ac:9a:3c:6a:db:d7:92:4a:bf:d8:a5:df:c2:e5:71:
d3:bf:44:57:0d:6d:38:80:a8:57:30:c8:87:29:81:90:12:45:
df:0b:09:ff:82:99:2a:f5:75:63:10:94:07:8d:f3:31:30:54:
61:13:71:0d:57:45:89:09:9f:b5:50:b2:e4:c6:f2:a9:93:ba:
27:49:5c:30:3f:8d:7c:62:7f:45:78:4f:e3:2a:0a:07:60:2a:
2b:b0:78:94:07:41:b2:fa:44:37:f3:4e:a6:25:3c:ff:d0:12:
fc:78:d5:8b:c4:ba:d9:32:02:d0:8c:84:53:83:e1:86:93:46:
39:40:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:32 2025 by rpki-client