Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/cCZYyYoP1-nwoCTunpd0HO9xrL4.roa
File: cCZYyYoP1-nwoCTunpd0HO9xrL4.roa (raw, json)
Hash identifier: bNcULqmUdhePMMHoF+ozVYfL2sS7YMAlXDQpcZH6NA4=
Subject key identifier: 70:26:58:C9:8A:0F:D7:E9:F0:A0:24:EE:9E:97:74:1C:EF:71:AC:BE
Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial: 2A
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/cCZYyYoP1-nwoCTunpd0HO9xrL4.roa
Signing time: Fri 23 Dec 2022 05:22:28 +0000
ROA not before: Fri 23 Dec 2022 05:22:28 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 131971
IP address blocks: 202.1.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
Validity
Not Before: Dec 23 05:22:28 2022 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=702658C98A0FD7E9F0A024EE9E97741CEF71ACBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:88:e2:95:25:e4:6c:73:78:df:8b:8c:51:
3d:3b:2d:b6:bc:33:c7:20:d9:99:5e:d5:c2:7f:c6:
0f:2f:a7:3e:b8:9e:08:b6:ba:6d:8d:b1:8f:6f:85:
68:90:af:f2:d0:23:9e:a3:65:8b:c1:79:df:dd:1c:
96:e9:ad:61:c8:6a:1f:4d:82:65:0c:7f:32:fc:6f:
ba:1d:d0:ca:13:2d:36:3e:0c:1a:32:81:6f:15:9c:
be:8b:a1:3f:a1:47:bc:53:11:40:d6:dc:cc:ae:d9:
ea:92:b5:f1:6b:21:c3:bb:1d:23:1c:d1:b6:54:5c:
f1:8d:04:c8:fc:26:2f:84:04:77:58:15:1c:73:cb:
fa:7c:bc:ad:75:ba:e2:35:94:50:e1:6e:5c:8d:62:
84:6e:c0:8f:b0:8b:b1:11:aa:80:56:60:cc:5b:70:
ca:89:35:ad:73:d6:66:2b:ef:6c:b5:a9:10:d1:dc:
92:5e:40:5f:66:b6:8c:6a:5f:44:e8:6a:8d:9f:9d:
f4:bd:74:d0:63:e0:9b:ae:dd:9e:c8:54:cc:36:4f:
51:2f:62:9f:a7:98:c8:57:ac:35:ef:02:b8:17:d5:
67:cb:d9:8a:37:88:dc:5c:48:d2:d1:02:1b:10:f7:
2d:43:cf:3b:43:a8:ab:ec:af:1e:d4:3c:3d:e6:b7:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:58:C9:8A:0F:D7:E9:F0:A0:24:EE:9E:97:74:1C:EF:71:AC:BE
X509v3 Authority Key Identifier:
keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/cCZYyYoP1-nwoCTunpd0HO9xrL4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.1.208.0/21
Signature Algorithm: sha256WithRSAEncryption
15:3a:6b:72:83:3c:ea:a4:75:af:a0:c2:8b:a5:4e:bb:77:97:
7a:de:c2:a1:98:cb:c7:5c:7d:4a:80:1b:35:3f:3a:36:cd:7f:
b8:6b:39:d8:eb:42:84:e5:68:39:11:cc:2f:45:35:82:5b:b2:
3d:f4:e9:0e:e1:ea:33:2b:ac:5c:a5:d5:fa:e0:ee:f7:36:b8:
1b:ec:b3:eb:0b:e0:8a:a1:7b:83:d9:a2:8f:8a:34:2c:ba:15:
74:8a:64:f5:5b:4a:fe:b6:c3:cf:03:88:77:75:67:a2:d1:12:
fd:50:ee:b3:b4:be:9e:5b:81:81:93:94:7e:7b:52:e7:05:76:
47:f6:3b:a7:ad:97:26:63:17:18:05:78:40:1e:2f:f6:23:76:
3d:50:4e:04:f8:90:10:96:05:f1:cd:eb:e5:8c:5e:34:22:2c:
06:98:61:3d:4a:ab:47:e4:ab:24:dd:07:59:e5:51:3e:5f:04:
bb:fa:80:43:b8:18:ac:2c:d1:a4:16:4d:83:50:35:54:65:f1:
a4:bd:d8:a2:8c:17:bc:b5:01:ab:9c:b2:e6:e2:4c:30:16:e4:
dc:7c:09:76:2c:dd:ca:14:31:e6:43:b5:35:5a:2b:67:96:62:
0c:ab:6f:a8:e5:85:ba:62:61:41:f0:3c:13:73:ec:3b:a4:21:
c1:16:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client