Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ml8TGH2u0ta5aitY4EFLyFKrrzQ.roa
File: ml8TGH2u0ta5aitY4EFLyFKrrzQ.roa (raw, json)
Hash identifier: +hqybx7pq6bUHPnTYfxt3H5e0t5krRyi25JNXRGHXvA=
Subject key identifier: 9A:5F:13:18:7D:AE:D2:D6:B9:6A:2B:58:E0:41:4B:C8:52:AB:AF:34
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 80
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ml8TGH2u0ta5aitY4EFLyFKrrzQ.roa
Signing time: Mon 01 Nov 2021 01:28:42 +0000
ROA not before: Mon 01 Nov 2021 01:28:42 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 202.232.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:42 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=9A5F13187DAED2D6B96A2B58E0414BC852ABAF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:1e:68:fe:de:2e:92:6f:9f:90:5f:89:02:
47:12:77:46:cb:37:4c:d0:47:66:bf:cc:2d:5e:d9:
a4:af:19:17:c7:56:71:46:fa:a4:fb:18:9e:39:78:
b6:58:c2:da:23:1c:9c:ea:04:fc:fe:55:0f:e8:1b:
3a:c4:44:13:bc:8a:bf:ba:4d:83:18:6b:49:cc:a9:
d6:6d:d5:cb:19:31:d8:d3:f7:08:6f:32:ad:f5:3e:
c2:71:53:d2:66:4c:e0:6c:d3:3f:1e:ab:90:64:0c:
34:bb:b2:5c:62:fe:0f:d3:aa:af:f5:dc:14:6c:20:
e2:09:02:cb:77:42:2a:04:66:57:1a:d1:1f:e2:3a:
65:1b:89:37:e7:30:6b:1d:b9:40:b3:e5:08:9e:14:
1a:ba:44:0b:16:83:3b:80:6d:60:55:1e:7d:29:50:
20:b6:5c:32:7a:fd:87:89:f0:5d:f9:09:1f:40:77:
8f:09:ec:5a:3b:01:d8:95:bc:46:62:6d:76:df:aa:
28:7b:42:1b:b4:fc:ed:07:df:83:d3:6c:df:c1:04:
25:0d:1f:f5:44:b1:0f:a8:fd:5d:6b:90:c0:2d:c7:
38:9f:1f:f7:f8:74:db:a8:de:3c:e9:78:dd:45:1b:
82:e1:30:75:9e:06:62:f3:e7:b9:11:b4:f2:36:80:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:13:18:7D:AE:D2:D6:B9:6A:2B:58:E0:41:4B:C8:52:AB:AF:34
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ml8TGH2u0ta5aitY4EFLyFKrrzQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:ff:8c:e2:22:7a:b6:85:fd:9f:ab:7d:32:1e:f5:b8:29:f3:
35:6e:31:25:ee:0c:19:8b:50:79:4a:08:65:f5:40:29:77:ae:
fe:8b:fe:76:b9:47:a8:34:72:b9:ab:d8:0f:c8:f1:b9:96:55:
64:44:d3:63:50:db:2d:75:56:8b:75:c8:85:f5:4d:7c:6f:60:
1a:b6:26:3a:a9:be:0e:64:ed:a9:3f:c3:9b:4e:c9:2e:20:38:
da:ff:45:52:50:5b:d6:f8:63:53:32:2e:9c:a5:b3:1f:8d:ea:
31:0e:8c:9c:84:cf:6b:87:eb:0d:4b:84:c8:bd:17:24:c2:f5:
28:3c:86:c6:98:5f:54:06:df:73:ae:0d:53:6b:bd:ba:7a:9a:
9d:39:e2:31:db:29:7e:ca:3a:5c:10:9c:1c:64:43:b5:d7:f0:
9b:81:c2:48:f9:2b:ff:f2:0c:c9:4b:6f:7d:bb:a8:4c:96:15:
50:c6:e8:ed:5e:35:25:2a:35:ad:48:fc:fa:0e:79:b6:2a:1f:
db:b6:8f:a6:c4:ef:e9:a9:6d:9f:b4:e3:c4:90:9f:d0:ed:97:
c8:e4:c2:af:ff:61:51:f0:3d:1c:14:95:c1:95:12:f6:7b:14:
53:43:23:60:23:9d:62:27:99:c1:8c:28:e8:92:1b:6a:08:fa:
ad:a0:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:09 2025 by rpki-client