Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nCQGu5Z58Nsgv1GhYznpNTPnnpI.roa
File: nCQGu5Z58Nsgv1GhYznpNTPnnpI.roa (raw, json)
Hash identifier: AxZ7GXbzACxyUPdxjZecsY/FIN26YRJ97KVaEZ64R/g=
Subject key identifier: 9C:24:06:BB:96:79:F0:DB:20:BF:51:A1:63:39:E9:35:33:E7:9E:92
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0173
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nCQGu5Z58Nsgv1GhYznpNTPnnpI.roa
Signing time: Thu 01 Dec 2022 01:28:31 +0000
ROA not before: Thu 01 Dec 2022 01:28:31 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 9371
IP address blocks: 110.74.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:31 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=9C2406BB9679F0DB20BF51A16339E93533E79E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:52:b8:22:cf:44:b0:d4:51:b8:3b:ce:28:
a0:d6:37:bd:3b:29:8f:f6:06:9e:e6:68:a2:53:e1:
1b:78:da:b6:11:f9:39:28:ad:12:c4:be:37:89:aa:
08:04:b2:30:07:87:1e:da:73:00:71:64:d7:9c:ca:
96:1e:40:f8:1b:41:47:33:32:7f:7b:3b:a7:52:a5:
6f:2b:3a:25:61:5a:29:15:b7:66:b0:2b:75:1b:76:
31:e8:53:f7:51:1a:93:55:04:f3:53:37:89:a9:83:
1a:fe:05:0e:f1:e6:d8:50:a4:75:64:7b:bb:82:b9:
c4:71:e0:e1:88:a3:2b:b3:f8:02:04:36:16:66:8b:
3e:bf:6f:9e:5a:44:0c:d7:f3:a8:18:49:50:d4:7b:
04:c5:a2:25:f5:0d:84:fa:89:88:8d:2c:b8:fb:ed:
85:e9:d7:e6:9c:9b:75:46:f7:9c:a2:4a:6b:d7:ce:
2a:7a:42:4f:78:23:f5:ad:81:cd:c2:e0:3b:09:2f:
45:47:ca:2b:87:a2:48:93:5d:bb:a3:95:ba:ae:33:
27:e5:fd:4c:03:76:57:2c:e6:95:03:fb:c8:4d:14:
9c:f5:1b:fe:23:46:6c:ee:a9:a1:dd:7a:e2:4b:8c:
91:35:31:ff:37:9a:26:cb:fb:40:95:a9:c9:fa:d7:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:24:06:BB:96:79:F0:DB:20:BF:51:A1:63:39:E9:35:33:E7:9E:92
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nCQGu5Z58Nsgv1GhYznpNTPnnpI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:30:91:d6:5c:5a:ea:e6:28:08:c7:8d:b0:eb:71:03:32:d4:
09:37:c1:6b:e0:1a:9d:81:f2:32:ef:29:44:82:e3:ec:d3:73:
c5:8f:a2:da:72:d8:ea:56:0a:7c:a3:09:92:cf:9e:9b:73:dc:
9f:c2:b0:29:43:41:4d:6b:45:07:47:27:04:e1:cc:45:33:b8:
97:7e:20:55:31:3f:ae:54:69:31:07:2a:2d:67:98:af:22:60:
a8:3f:ef:99:74:0c:bb:b5:fc:37:f4:50:48:b1:02:d6:2a:f0:
34:89:b4:84:b4:96:3d:ba:55:9f:18:7d:83:63:9d:10:d2:c0:
9a:17:64:e4:c5:19:66:2e:a9:91:3d:86:4b:de:c0:4b:05:96:
f4:7d:fc:ee:8f:bc:46:20:67:7b:7a:47:45:d0:25:c1:97:6d:
43:51:27:af:64:a8:80:33:dc:bd:80:e5:76:31:21:c1:04:61:
55:80:36:af:9c:88:10:09:85:e9:22:39:76:22:50:43:aa:69:
84:a2:5c:8f:a2:20:fa:36:1e:bb:28:47:53:ae:35:a4:fe:91:
70:ad:9c:02:7b:00:66:43:3f:70:eb:b5:d8:46:45:bd:1c:f8:
e8:69:2f:3b:5c:0c:95:7c:1c:2b:3e:b9:dc:eb:81:ca:eb:e5:
f2:b1:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:24 2025 by rpki-client