Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30043/gC01cQyuKQ9uvBOFkTqbRTMhao4.roa
File: gC01cQyuKQ9uvBOFkTqbRTMhao4.roa (raw, json)
Hash identifier: 9ZSJ3qzMtAfSNn7u93FCUKHXFBcwBgJQkKUUeR1vvCk=
Subject key identifier: 80:2D:35:71:0C:AE:29:0F:6E:BC:13:85:91:3A:9B:45:33:21:6A:8E
Certificate issuer: /CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Certificate serial: 02
Authority key identifier: 7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/gC01cQyuKQ9uvBOFkTqbRTMhao4.roa
Signing time: Tue 05 Oct 2021 05:09:53 +0000
ROA not before: Tue 05 Oct 2021 05:09:53 +0000
ROA not after: Wed 05 Oct 2022 05:03:42 +0000
asID: 9621
IP address blocks: 2001:d28::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Validity
Not Before: Oct 5 05:09:53 2021 GMT
Not After : Oct 5 05:03:42 2022 GMT
Subject: CN=802D35710CAE290F6EBC1385913A9B4533216A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:7a:05:71:cb:49:d5:e1:4e:a0:ec:a4:55:
70:ff:bc:98:6c:89:fb:9c:e1:f7:6a:08:ac:91:d9:
19:7c:b3:1e:ef:3a:43:24:99:9d:78:83:eb:66:71:
5c:82:4a:e6:f3:7a:ba:7f:a8:b3:cd:f8:26:fa:de:
44:15:f0:36:14:16:d6:1f:77:ef:57:12:88:e2:6f:
4a:b5:b8:b5:44:18:cd:a1:7c:48:ea:2b:b8:67:4d:
34:1c:04:6f:fb:b8:e5:20:0d:0a:fa:8a:21:df:ac:
22:44:81:14:76:45:57:b5:93:3a:41:c5:e8:49:8b:
35:6b:e2:fc:90:17:e6:34:e6:c8:18:f0:b3:bf:2b:
75:d3:84:92:c7:73:8e:70:c9:c6:49:16:78:99:4c:
42:be:73:ba:b2:e3:80:8c:39:7a:d9:0b:5e:12:32:
eb:bd:23:18:aa:b8:2c:6d:16:09:07:af:7c:a9:02:
ff:54:0e:26:0d:6a:1c:62:62:ed:ee:5a:2d:1a:a1:
e5:07:2a:a2:49:71:b7:87:62:07:01:66:9d:09:1d:
85:59:72:8c:5a:5e:cb:7b:ad:9b:10:26:cc:e5:5c:
8e:fa:04:ec:71:3f:7c:2e:c0:07:5c:a2:27:1d:44:
72:38:52:f1:12:fd:53:dd:c4:0f:b6:f1:33:7a:ed:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:35:71:0C:AE:29:0F:6E:BC:13:85:91:3A:9B:45:33:21:6A:8E
X509v3 Authority Key Identifier:
keyid:7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/gC01cQyuKQ9uvBOFkTqbRTMhao4.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:d28::/32
Signature Algorithm: sha256WithRSAEncryption
84:7e:7a:c8:43:97:d1:2b:26:c6:d2:4e:a5:fa:d5:79:d7:b3:
7f:50:c4:30:f6:b3:b5:94:e4:5b:9a:db:7e:22:82:96:ed:3e:
3a:dc:a4:73:92:10:db:86:2f:f0:d1:45:9a:dd:1d:71:fe:71:
0c:7b:d7:04:09:66:82:a7:d3:a6:49:3f:02:da:1f:a5:f8:83:
f4:bc:9b:95:68:cd:4b:4a:01:af:fc:ec:61:0b:13:7c:7d:e1:
35:7d:f8:f0:27:94:d3:bd:de:d8:02:15:1e:1b:98:eb:17:b4:
4a:9d:fd:de:c4:30:a2:5a:2c:cb:f2:3e:88:de:e5:ff:6b:95:
05:2f:fb:e4:2c:6c:49:67:ac:0c:a2:e0:c1:c5:b2:38:d1:06:
c2:0a:f0:31:3e:50:68:9c:e3:7d:0d:90:af:5a:78:8f:a1:1c:
fe:8f:f7:84:81:62:3e:a2:ed:c3:17:44:40:ae:d6:19:fa:a9:
56:36:52:7e:b2:6a:bc:4e:a4:6b:8d:ac:e1:78:63:2d:20:89:
40:a0:ed:73:89:90:24:31:68:99:ef:e1:9a:f4:f8:ba:62:08:
26:47:ae:7f:ca:d3:56:45:77:d8:5f:4a:0a:e4:e0:19:3b:0e:
7b:e7:75:24:f7:3d:18:8f:ab:53:32:97:b0:67:65:ac:00:fe:
c1:e9:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:53 2025 by rpki-client