Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YIELNZ6gTkmJihKgcd1nq7hdUTY.roa
File: YIELNZ6gTkmJihKgcd1nq7hdUTY.roa (raw, json)
Hash identifier: UnMruaOgT1igEEMBmPZaBWpvUU0NISrfhJe11XZCJUw=
Subject key identifier: 60:81:0B:35:9E:A0:4E:49:89:8A:12:A0:71:DD:67:AB:B8:5D:51:36
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0163
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YIELNZ6gTkmJihKgcd1nq7hdUTY.roa
Signing time: Thu 01 Dec 2022 01:28:26 +0000
ROA not before: Thu 01 Dec 2022 01:28:26 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:26 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=60810B359EA04E49898A12A071DD67ABB85D5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:bd:c4:d2:43:2d:44:e2:02:78:25:14:41:
3d:f7:1c:cf:85:1c:b7:89:dc:2c:9c:cf:7f:56:e2:
f2:44:6b:ec:7f:7f:7c:3e:a4:04:92:f2:46:42:4b:
c7:a6:71:6d:08:71:98:3f:ae:0c:be:79:a4:c0:c2:
05:4f:4b:86:b9:f0:ae:c5:d7:4f:6a:12:af:06:4d:
87:94:01:91:c4:0c:31:bd:38:b4:4f:0c:29:c9:c9:
7e:a6:a1:aa:4e:8a:8d:09:c5:4e:fd:49:0b:e2:ad:
2e:db:b0:96:a2:40:b2:ee:6d:ad:cb:34:66:6b:31:
02:69:f4:83:c3:ab:fa:52:f5:87:e3:d3:7f:e0:5e:
d6:7a:2e:1e:33:f8:aa:66:a3:52:74:f3:17:78:1b:
00:df:29:40:17:54:06:08:4a:a3:07:76:04:68:b8:
da:0b:01:8c:53:ee:03:8e:20:38:60:9a:6b:5f:85:
67:1e:e0:d2:4a:68:1b:9a:8d:5d:f1:18:bf:8a:53:
fd:b1:cb:57:ab:12:ab:3f:aa:c9:a8:eb:1b:20:dd:
db:c2:05:4a:ad:25:ab:5d:57:6e:c6:91:45:d7:73:
98:76:06:45:ae:32:b9:16:ee:a1:f3:3d:6a:76:03:
7f:8a:84:7b:94:5a:29:9a:e4:d4:f5:f0:53:4b:80:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:0B:35:9E:A0:4E:49:89:8A:12:A0:71:DD:67:AB:B8:5D:51:36
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YIELNZ6gTkmJihKgcd1nq7hdUTY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.188.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:fa:98:99:32:92:4d:53:03:c6:3e:7f:db:cd:08:b2:bc:0b:
f7:92:49:9b:8c:c1:6f:ea:2b:eb:da:43:f5:00:bb:20:90:ba:
33:13:36:9f:d1:5e:3a:44:07:05:73:24:40:cb:83:4e:b2:bb:
61:43:5b:bb:95:05:f1:9c:17:9b:d3:c8:fa:05:66:fc:10:d1:
e9:97:21:d8:1b:df:1e:bd:90:19:f4:d4:61:a7:e5:f5:61:97:
3c:b2:3e:d1:51:18:e3:25:87:2f:83:7d:77:10:1b:a9:e0:64:
ac:9c:fa:dd:e4:ef:91:42:1c:18:0f:7d:f6:09:9d:28:dc:38:
28:86:98:f0:70:26:11:e8:4d:23:26:03:f2:79:36:2d:3a:eb:
5e:e6:b8:d4:0f:eb:b0:ea:3e:f3:fe:f3:72:f9:41:aa:64:5d:
79:f9:43:de:63:9d:d1:ab:0b:16:9a:30:c5:29:c3:2c:c8:52:
ab:dd:57:b8:0e:16:63:82:76:c0:77:46:86:36:3a:7a:98:80:
86:f5:08:65:a9:16:05:57:c0:d0:f0:d1:91:8a:c9:55:bc:a0:
3d:03:24:fb:c7:a0:00:aa:d7:aa:44:b2:77:18:1c:b5:54:31:
21:b9:e9:57:f3:4f:41:5e:e6:89:ea:42:71:90:25:35:74:6c:
5a:19:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:59:07 2025 by rpki-client