Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa
File: HQdeUR3DPCUuQJL4HWD-orjhwMI.roa (raw, json)
Hash identifier: 5JQhq8AXDEkWpRsbVppodaATr8EDEDaPZ7pF/rhQA9o=
Subject key identifier: 1D:07:5E:51:1D:C3:3C:25:2E:40:92:F8:1D:60:FE:A2:B8:E1:C0:C2
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 0D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa
Signing time: Wed 20 Apr 2022 08:47:25 +0000
ROA not before: Wed 20 Apr 2022 08:47:25 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 39.2.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 08:47:25 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=1D075E511DC33C252E4092F81D60FEA2B8E1C0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:ae:9c:9f:0b:ed:7c:34:29:96:5d:50:ec:
ce:14:c6:f8:a1:02:43:30:89:24:00:3c:a3:45:aa:
88:6d:02:04:87:b6:35:3e:bd:34:f8:cf:26:3a:06:
33:63:66:4c:39:5f:19:42:47:6c:e3:1d:d9:04:ed:
a2:9d:ac:08:41:64:a4:1e:63:94:21:ed:87:3b:dc:
be:cb:56:dd:07:39:83:a4:c7:1b:00:00:55:5a:18:
f6:52:30:62:8c:9f:95:04:b7:c2:08:f2:0e:5c:b8:
6a:aa:b8:ee:4a:e6:a0:6b:5d:9d:d5:08:4f:c0:ae:
a1:09:01:ed:c0:ee:78:c6:67:8b:e8:5d:5a:7e:ff:
bf:48:3b:46:80:e7:ac:bd:ca:0f:e0:f7:9d:a0:eb:
c5:ff:30:ee:77:d8:e7:0f:24:e2:f0:29:17:33:98:
a7:35:31:ff:24:a7:b6:86:ed:76:33:9c:07:3c:5a:
86:d6:85:25:63:e3:13:75:8e:ef:1f:8a:d8:2c:a6:
42:cd:0a:5d:ff:75:c3:2d:5b:45:7d:05:5b:9e:e9:
bf:99:77:d7:eb:d4:44:b2:d7:69:0f:c8:4a:a4:90:
81:f5:db:da:22:11:ad:9e:5b:b5:56:52:40:47:6f:
a4:c4:9a:31:9c:b1:bb:ef:0e:ef:ac:54:7d:7e:fb:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:5E:51:1D:C3:3C:25:2E:40:92:F8:1D:60:FE:A2:B8:E1:C0:C2
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa
sbgp-ipAddrBlock: critical
IPv4:
39.2.0.0/15
Signature Algorithm: sha256WithRSAEncryption
82:6f:15:66:c8:b6:85:de:c5:9a:05:25:57:75:a3:3a:67:9c:
5d:77:bb:7f:6e:c7:fb:84:94:49:3f:8a:39:7e:41:49:29:d7:
87:37:66:53:4e:f2:d1:bd:0a:74:b8:35:6a:57:06:d9:27:ed:
4e:f9:85:80:de:97:54:5d:9e:8e:6e:ea:33:90:26:32:c0:39:
e0:83:1c:66:b3:47:67:e8:57:f2:92:d5:d2:17:8b:9d:76:6f:
56:fc:8a:96:58:cf:f6:f5:bd:08:85:fa:54:80:22:a0:ba:58:
9b:32:89:04:bc:79:8b:45:4a:d6:50:70:00:df:5c:9d:33:43:
21:18:ec:fd:2e:08:18:12:82:e7:13:9d:0c:5f:5e:ee:5c:22:
fa:f3:33:bc:c7:8a:97:e0:24:16:62:4a:42:bc:5f:38:b9:d2:
39:dd:ab:81:25:bf:07:dd:be:58:40:8c:86:c9:20:81:07:ef:
18:d2:4a:3f:f2:43:44:00:6a:c2:87:56:3e:06:04:f6:c1:81:
31:fa:bc:32:9f:b0:60:aa:f1:55:83:53:19:3e:ce:19:b5:5c:
44:85:79:15:d8:ff:ba:67:2b:8e:f5:05:a4:f8:f6:37:2a:b3:
3b:c9:a0:33:14:bc:d0:31:d0:66:1e:ed:dc:8f:43:36:14:86:
77:0e:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:31 2025 by rpki-client