Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/KnpYh90opHknAJoVp1xx1WdIR5w.roa
File: KnpYh90opHknAJoVp1xx1WdIR5w.roa (raw, json)
Hash identifier: 2QM51kIatiqE2NCB+RTKVGWC/QbUmHmJ2lTU/lVxZI4=
Subject key identifier: 2A:7A:58:87:DD:28:A4:79:27:00:9A:15:A7:5C:71:D5:67:48:47:9C
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 011F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/KnpYh90opHknAJoVp1xx1WdIR5w.roa
Signing time: Sat 01 Jan 2022 01:31:26 +0000
ROA not before: Sat 01 Jan 2022 01:31:26 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 110.74.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:26 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=2A7A5887DD28A47927009A15A75C71D56748479C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:6b:6b:28:4c:e8:c6:be:a7:de:cc:dd:39:
9c:cb:26:4f:bc:88:25:41:d8:c9:eb:7d:3f:e2:a1:
d1:fb:de:35:9c:b3:5a:05:0e:72:90:f1:dc:58:37:
73:f3:bb:31:d2:d4:dd:60:38:63:bc:a6:1b:ba:88:
e8:4d:fc:eb:e4:8a:c7:9e:dc:bb:cb:52:c6:f4:18:
7a:1e:0d:80:60:55:aa:e9:bf:63:4d:15:12:50:1e:
fc:ed:a6:5f:dd:73:24:3d:39:3c:2b:f7:cf:cc:0c:
b5:2f:3d:f0:be:87:70:5d:0a:ba:96:57:95:e3:94:
f9:f6:eb:6a:8a:77:72:25:48:21:9a:ea:96:f1:24:
f4:6b:d6:7c:90:59:48:ea:de:13:f4:69:d8:2d:80:
d5:61:55:22:72:27:5f:19:1c:cf:1c:87:08:f8:50:
44:c1:c1:3b:ff:48:37:40:5b:2f:d1:9b:37:9f:f0:
1e:0b:23:a8:3c:09:29:1c:54:bc:45:77:1e:95:ae:
74:d9:85:4e:d2:5d:66:4b:d1:22:f3:4c:0e:b3:59:
7e:c8:49:4b:a0:0f:ee:38:25:ce:17:91:3e:9d:ed:
1d:9b:8e:ee:1d:95:eb:82:04:00:5f:13:78:64:ee:
47:86:37:0a:4a:e8:26:35:38:af:58:8e:ad:83:9f:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:58:87:DD:28:A4:79:27:00:9A:15:A7:5C:71:D5:67:48:47:9C
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/KnpYh90opHknAJoVp1xx1WdIR5w.roa
sbgp-ipAddrBlock: critical
IPv4:
110.74.32.0/20
Signature Algorithm: sha256WithRSAEncryption
57:db:fd:c9:6c:a7:2b:23:c6:75:1f:1f:83:da:b6:b9:49:3d:
ce:d5:6d:41:27:6f:b4:3d:f9:4f:2b:0b:cd:80:d6:e2:a5:96:
f1:42:7b:ba:7a:ad:01:fc:72:43:59:97:17:be:7a:c6:eb:ab:
8c:66:44:33:4f:f3:64:02:ba:a8:f5:b9:a9:20:52:a7:44:45:
46:85:ca:0f:cf:42:00:f3:60:11:b1:f2:1e:78:5f:b9:44:e5:
69:7d:c0:6e:35:69:9c:fc:cf:4c:f4:eb:e3:ab:e9:43:98:35:
46:72:6b:30:18:ca:66:5c:23:9e:ed:fb:a0:ea:ef:d8:ea:ba:
fa:ca:ee:30:f5:d3:5d:35:79:83:5d:0c:a8:9c:48:dc:b3:f9:
58:d0:5e:37:34:9d:fc:d1:7e:68:1c:9e:bf:a8:0e:7c:9e:23:
e5:a3:78:42:fb:68:68:8f:da:2f:83:69:bb:8e:9b:3e:92:39:
57:cf:cf:71:9a:17:c6:52:69:5c:66:82:c5:f0:1a:66:ca:35:
b5:59:d2:20:39:97:9e:5d:30:e6:6a:34:14:02:57:cd:63:df:
16:f7:6b:df:af:3a:8b:3e:f5:d3:b0:e8:9f:fc:2b:15:15:52:
77:b7:c0:20:7c:ca:c4:08:cb:8c:68:ae:4d:89:24:77:9d:b4:
d9:b0:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:04 2025 by rpki-client