Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/PbVBDXzFFOZpVlovUvy9JeOumqQ.roa
File: PbVBDXzFFOZpVlovUvy9JeOumqQ.roa (raw, json)
Hash identifier: saq/hiCsw1gaAWyq3HyhmY6vsNpLrA6J6dSXFWMg+rs=
Subject key identifier: 3D:B5:41:0D:7C:C5:14:E6:69:56:5A:2F:52:FC:BD:25:E3:AE:9A:A4
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 28
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/PbVBDXzFFOZpVlovUvy9JeOumqQ.roa
Signing time: Wed 20 Apr 2022 09:17:22 +0000
ROA not before: Wed 20 Apr 2022 09:17:22 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.156.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:17:22 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=3DB5410D7CC514E669565A2F52FCBD25E3AE9AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:fe:f3:2e:cc:6b:f0:f1:2f:78:d3:da:7a:
03:f7:22:ef:7b:b9:3d:c6:df:c3:00:2d:14:b8:63:
c1:72:d0:32:78:ad:ce:4a:11:fe:85:00:c4:81:b8:
09:ea:be:93:2c:0f:c2:89:2a:f6:41:21:62:e9:52:
b1:e4:f7:99:a8:dd:e3:2e:11:07:41:29:96:3f:bf:
92:de:ef:f5:7c:31:82:8d:5e:7a:a4:90:5b:41:6a:
aa:29:38:cf:7b:0f:4c:70:f9:b9:af:04:97:6a:e1:
e6:f4:eb:7d:51:7a:c3:44:fb:7c:5c:77:e7:fc:bd:
28:63:0f:2c:49:71:26:5e:4e:04:37:c1:8a:34:03:
76:a8:4e:06:b0:88:68:12:bc:9e:be:78:64:f1:ea:
9c:e4:46:e7:c2:d6:98:f0:b6:1b:97:4d:8f:78:8e:
ae:77:e6:5f:09:23:20:11:2a:42:8e:e1:8b:b4:88:
34:d4:13:3a:bc:a2:fa:ad:0d:14:eb:ab:ea:b7:f4:
e8:8e:49:78:0c:96:0b:19:1d:e8:e1:ce:db:53:29:
20:a6:e8:97:5b:a6:95:74:1e:8e:15:9d:bf:be:91:
27:d7:99:5e:d7:e8:6b:16:dc:f2:0b:91:9e:a2:38:
4b:3e:ae:55:5d:6e:3c:1d:db:c8:a1:c6:03:f5:4d:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:41:0D:7C:C5:14:E6:69:56:5A:2F:52:FC:BD:25:E3:AE:9A:A4
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/PbVBDXzFFOZpVlovUvy9JeOumqQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.156.96.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c1:ed:be:4b:d1:49:33:22:98:47:9f:10:ba:45:25:cb:b4:
11:b5:06:c7:9c:52:a7:13:19:3a:02:fa:88:6f:31:63:cc:b8:
09:ef:de:68:a9:35:7f:f3:20:92:45:55:4b:f3:61:b4:05:fe:
93:05:78:c9:54:1e:b1:e6:c1:8e:94:70:f8:c1:e9:e8:3f:a1:
d2:26:b6:87:a1:76:2b:ad:d2:a2:fd:7c:de:b4:3e:2c:45:13:
d4:fd:6e:d6:04:46:e3:2f:e9:f1:85:e1:ac:c6:bb:56:9d:cd:
65:9d:3d:14:07:85:b4:09:98:d8:db:9c:26:d6:df:5b:d6:5b:
0b:3a:ca:f0:68:c8:3c:b7:b9:62:5c:e4:bf:05:8f:ef:f5:13:
85:bd:8c:4c:45:35:79:75:76:2b:dd:62:3a:27:a3:2d:24:e1:
d3:f7:b4:ab:94:4f:db:3b:18:3c:8b:8a:b5:c6:47:51:f6:52:
69:c5:20:2b:fd:fa:f9:8f:09:18:82:c2:ae:ef:5a:d0:49:65:
74:42:d5:f5:47:da:91:5a:e1:78:4f:cc:44:96:2f:99:1b:04:
20:df:93:9f:be:49:47:a2:7d:1a:3f:0e:15:97:17:d7:13:17:
61:f5:2c:e6:7d:f7:88:4c:40:4a:10:89:53:a3:56:24:12:10:
91:34:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:04 2025 by rpki-client