Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lGY491wVYbuDA7Zy7sbllABEovQ.roa
File: lGY491wVYbuDA7Zy7sbllABEovQ.roa (raw, json)
Hash identifier: pbrmLyuMuHP83XCTXiwiAhAXLJGPjaQGus3dph7U92w=
Subject key identifier: 94:66:38:F7:5C:15:61:BB:83:03:B6:72:EE:C6:E5:94:00:44:A2:F4
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0124
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lGY491wVYbuDA7Zy7sbllABEovQ.roa
Signing time: Sat 01 Jan 2022 01:32:08 +0000
ROA not before: Sat 01 Jan 2022 01:32:08 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 112.78.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:32:08 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=946638F75C1561BB8303B672EEC6E5940044A2F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:60:1c:90:9e:51:c3:16:82:c3:3f:17:7e:
44:ea:32:28:ec:fd:e4:29:81:f1:e3:8b:a7:af:4e:
fd:48:6f:11:c1:96:da:c9:d9:fb:cc:1b:5c:f8:fa:
4e:61:c0:4c:29:74:c8:61:cb:0b:66:0e:a6:82:8b:
0e:d8:76:17:49:43:d9:eb:a7:6d:e3:cf:84:3d:ee:
0e:98:64:f5:ae:07:75:dc:e7:32:bd:dd:9b:11:cb:
a7:05:67:08:ae:58:f8:21:a9:3a:c0:35:46:2b:c6:
24:e6:4f:6b:5c:9e:42:85:0f:01:06:57:be:c1:c2:
5e:44:96:5b:3a:49:d1:b2:4a:17:78:04:5f:31:2e:
56:84:a2:4e:6f:82:4d:af:50:1a:d9:09:ab:0d:5a:
56:ed:5d:03:d3:65:b2:43:94:92:80:c1:0b:f0:55:
6b:a6:ad:23:a2:f1:79:fb:c7:71:88:71:56:f6:6e:
fe:44:6c:2e:de:b0:35:37:06:a4:22:50:fa:c4:93:
3a:8e:e9:79:03:13:5c:9d:82:5b:be:83:c2:c9:94:
31:67:ad:2b:d1:17:c4:25:33:3c:05:f5:c7:f3:2b:
7e:45:ff:d3:9a:65:91:f3:db:1e:a9:00:23:79:03:
7f:66:e1:13:00:8e:2c:4b:dc:c8:0d:44:24:4a:dd:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:66:38:F7:5C:15:61:BB:83:03:B6:72:EE:C6:E5:94:00:44:A2:F4
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lGY491wVYbuDA7Zy7sbllABEovQ.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.208.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:96:55:ef:20:14:02:42:84:49:e5:0c:9d:ff:04:79:89:68:
3d:33:8a:df:6a:ef:b1:42:eb:3c:5e:44:83:5a:ed:ec:17:40:
76:aa:c8:2e:0c:18:5f:52:73:da:58:70:cc:75:6e:79:da:7e:
a4:47:b4:f7:a9:eb:2f:5c:a4:ab:6e:43:4a:2c:df:ef:96:ab:
34:7e:9d:3d:a6:bd:f6:85:b5:57:97:90:4b:3d:43:cd:93:a6:
42:de:39:c3:38:58:f2:b5:51:c4:88:da:b4:54:53:0f:df:e6:
b2:15:6a:58:4e:c1:f2:ff:8a:cf:8c:db:d1:83:31:21:cd:4c:
23:37:51:c2:d9:c7:1f:5a:f9:4c:58:78:8c:53:aa:d2:34:0c:
1c:22:51:1d:fc:50:90:ef:74:14:3d:df:a7:0b:53:c1:7f:9a:
94:41:5b:eb:41:3e:83:3b:b6:47:12:c7:b5:92:19:48:d3:db:
ae:73:04:2c:a0:9e:04:a9:85:2b:3e:78:a3:eb:ce:f4:2b:3b:
57:4b:fd:e0:80:e7:e3:dd:04:6b:8d:7f:54:fa:d0:bd:10:e2:
70:66:20:b0:3b:ba:43:56:24:80:f4:a3:ef:e3:a6:a3:3c:49:
e5:8d:0b:78:13:31:f6:d5:36:38:48:b3:55:83:d7:cf:a8:d2:
de:ca:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:41 2025 by rpki-client