Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/i__AF7bQm4ntI8ghmH_nXQYt0Rs.roa
File: i__AF7bQm4ntI8ghmH_nXQYt0Rs.roa (raw, json)
Hash identifier: jeshWEbZPx+wRar//ZlERWayWC6A+DCltWXRKkES/sM=
Subject key identifier: 8B:FF:C0:17:B6:D0:9B:89:ED:23:C8:21:98:7F:E7:5D:06:2D:D1:1B
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 2D
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/i__AF7bQm4ntI8ghmH_nXQYt0Rs.roa
Signing time: Sun 01 May 2022 01:30:50 +0000
ROA not before: Sun 01 May 2022 01:30:50 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 2500
IP address blocks: 202.249.0.0/17 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: May 1 01:30:50 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=8BFFC017B6D09B89ED23C821987FE75D062DD11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ff:5a:f3:07:a5:0b:8f:32:72:72:a4:8e:4a:
66:f6:78:95:f3:ba:71:b0:1c:dc:14:29:e9:a9:54:
16:5d:48:59:b2:e2:8d:ad:b3:30:9c:4d:fe:0d:b1:
70:08:bb:90:b0:26:2d:f6:ec:89:a8:84:bc:de:af:
ee:fc:48:f9:89:b4:4a:cc:ef:bf:86:18:b5:27:06:
61:25:8d:07:4c:0c:1e:e6:79:cf:3f:65:35:d3:cc:
5d:6a:c0:ba:1f:f7:a5:3f:c2:c2:48:77:09:4e:70:
95:b0:85:34:76:b9:f4:29:9c:45:75:69:21:e4:9f:
31:43:bc:8b:91:3a:f5:19:f1:20:e5:f5:82:c9:73:
49:e0:7b:79:5e:97:80:dc:e7:ed:ca:2f:31:38:d4:
c8:18:ed:3c:a4:42:2a:18:89:3e:0a:62:f3:a2:08:
6d:f6:90:80:30:e6:f3:16:ab:ff:fb:c4:6a:9e:03:
db:98:92:4a:3b:4c:19:2a:1f:6b:d8:21:5f:fd:a7:
46:d1:2a:f6:e1:6c:96:68:13:6a:18:e7:79:44:f1:
5c:ea:e5:0e:45:f3:89:72:84:7a:6b:2e:f2:e6:da:
82:d8:04:9f:23:26:63:08:43:c9:90:f3:0a:d6:d7:
24:c3:aa:f7:58:d9:59:07:eb:f5:74:b9:c3:4c:55:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:C0:17:B6:D0:9B:89:ED:23:C8:21:98:7F:E7:5D:06:2D:D1:1B
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/i__AF7bQm4ntI8ghmH_nXQYt0Rs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.249.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:59:13:1f:e1:8d:97:b4:58:75:6f:a4:bb:f4:db:f1:51:f1:
19:70:d4:6c:62:fb:ce:44:a9:40:aa:e1:75:6a:8a:02:3c:bd:
9b:6d:65:b5:f9:ac:70:d0:a9:20:d2:b2:3e:5f:c4:ce:58:5b:
0b:61:33:c6:e9:f9:09:4d:5d:c3:25:37:f4:fe:1c:a9:b5:bf:
74:aa:8c:cc:d5:be:cc:b4:ab:72:ae:48:5a:6a:08:7e:15:08:
f2:b4:66:8b:06:2e:a2:f0:92:19:8c:60:3d:1e:de:9f:64:dd:
34:a3:6c:97:7c:12:d0:ef:74:74:19:74:ce:2a:ec:8c:f3:00:
be:38:b7:79:8e:ca:8f:7c:bd:16:97:49:b4:f5:9b:99:67:46:
1b:d2:d2:7e:42:f4:60:5c:0d:38:26:a2:0e:81:a4:00:15:a9:
5d:ae:41:e5:63:3c:28:ef:55:d1:07:eb:4e:b3:87:b9:61:19:
17:1e:85:53:e0:39:49:28:a6:eb:c3:6b:e2:43:13:2e:7c:34:
5e:98:8f:f8:4e:d9:90:16:03:bc:42:d6:18:2a:79:ed:1c:40:
f6:87:44:9e:c3:fa:fc:c8:26:b0:73:ed:e1:cf:3f:a8:7d:e7:
2f:ae:be:72:fa:73:ee:f8:44:10:19:67:a7:a5:6e:95:ad:02:
fb:9e:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:18 2025 by rpki-client