Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nssfXe4kluuahTOvphGLf4TDgmw.roa
File: nssfXe4kluuahTOvphGLf4TDgmw.roa (raw, json)
Hash identifier: y+Z4lr09UIqAg0CkX7ZQ2W99n+V8NMIQh8CalGeIvbw=
Subject key identifier: 9E:CB:1F:5D:EE:24:96:EB:9A:85:33:AF:A6:11:8B:7F:84:C3:82:6C
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 98
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nssfXe4kluuahTOvphGLf4TDgmw.roa
Signing time: Tue 01 Feb 2022 01:31:24 +0000
ROA not before: Tue 01 Feb 2022 01:31:24 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 121.101.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:24 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=9ECB1F5DEE2496EB9A8533AFA6118B7F84C3826C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:50:82:07:1a:84:e2:9f:7c:85:14:26:42:
1a:33:a2:83:bf:c5:ce:5a:d2:5b:8a:82:c4:56:a8:
2d:eb:30:bf:25:dc:1f:9c:fb:2b:e8:de:33:9d:6f:
7a:5d:ea:73:78:bf:5a:19:7a:ee:9e:12:a9:f6:d5:
9d:37:29:76:a1:8f:d8:bb:86:3b:6f:76:99:5a:50:
4b:33:de:6d:3e:43:74:97:8f:c8:29:97:07:6e:c9:
0f:f2:c0:c4:7d:c6:43:da:35:8e:e3:b4:0e:56:ce:
fa:62:b0:93:bb:7a:93:a2:4e:66:72:0e:43:26:a1:
80:30:37:c3:4d:b0:34:93:b3:24:77:0e:ea:4e:ca:
1c:43:77:1f:af:01:6a:ca:e5:04:da:0f:59:ee:77:
02:62:1e:8b:8c:15:b8:72:5a:74:f2:a9:7c:0a:aa:
62:c0:7e:d9:df:ad:ca:b5:f6:6c:c2:ce:1b:16:78:
41:4f:3a:27:50:d5:3d:31:2e:b0:d1:48:a3:c6:f9:
76:59:8c:e1:23:ca:ed:ea:12:fd:98:2e:d4:94:a4:
2b:74:65:e4:3c:97:f0:2d:de:86:33:e3:f0:58:9b:
14:06:65:68:15:e0:ff:a6:e4:0b:89:c3:91:0b:f6:
6f:81:e6:a6:43:1d:38:35:97:46:44:42:19:f0:02:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:1F:5D:EE:24:96:EB:9A:85:33:AF:A6:11:8B:7F:84:C3:82:6C
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nssfXe4kluuahTOvphGLf4TDgmw.roa
sbgp-ipAddrBlock: critical
IPv4:
121.101.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:b6:2e:e7:53:35:3c:a7:07:dd:4e:15:d8:10:5f:ff:4b:19:
9a:80:97:b2:2f:f6:75:4b:6b:78:7e:f1:14:e4:4a:90:f9:2a:
ac:52:75:0c:a7:41:ce:e6:b5:6e:02:f7:43:bf:10:fa:dc:34:
4b:5d:b1:5c:c9:a4:34:03:40:9e:1f:a7:6f:01:23:50:8d:37:
c9:df:bf:53:fc:df:b7:60:f8:81:2d:f9:ae:47:66:03:eb:9b:
04:65:e7:02:37:7b:00:4e:08:81:d7:6c:d8:9c:db:67:f8:0c:
7b:7f:e7:c6:08:89:18:4d:d1:34:48:73:46:d0:13:51:f1:d5:
eb:4d:9b:65:c6:63:21:64:ff:d2:0b:0a:ae:69:19:4c:57:33:
41:29:d2:5f:00:9f:91:7d:e0:05:92:c9:08:79:cb:65:40:c1:
62:ea:79:5c:23:48:e8:2f:2d:54:0a:cd:d0:2f:06:23:8e:d9:
2f:ee:03:f2:ea:e9:0e:2d:3b:5a:88:b3:df:e8:4a:6f:28:1c:
aa:7b:ce:24:54:10:52:55:23:c9:bb:6e:79:39:ec:c5:af:ea:
32:bc:1f:30:07:09:46:08:40:ec:a1:d5:65:0d:58:09:f9:c6:
c5:64:f7:43:79:20:99:b3:cb:3c:7b:e4:c7:79:7c:54:7a:3b:
2b:36:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:41:54 2025 by rpki-client