Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4dwdu4_EzpAlZ9jkV3QKiZc63Yw.roa
File: 4dwdu4_EzpAlZ9jkV3QKiZc63Yw.roa (raw, json)
Hash identifier: AI3KBaI1eWLGI410kbNfrWXgbWJFAvbqzEC7l3SyiMg=
Subject key identifier: E1:DC:1D:BB:8F:C4:CE:90:25:67:D8:E4:57:74:0A:89:97:3A:DD:8C
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: FC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4dwdu4_EzpAlZ9jkV3QKiZc63Yw.roa
Signing time: Sat 01 Jan 2022 01:31:13 +0000
ROA not before: Sat 01 Jan 2022 01:31:13 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 112.78.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:13 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=E1DC1DBB8FC4CE902567D8E457740A89973ADD8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:e7:72:2a:90:14:95:e0:2f:0f:1e:20:1d:
4c:85:2a:2f:0b:46:42:b0:a3:62:72:c6:e9:aa:55:
0a:82:e4:dd:66:cc:47:d3:61:f3:81:b9:d3:cb:ee:
b9:51:c6:3e:4a:20:9a:e7:8b:08:94:f7:74:26:8c:
d6:7f:27:5e:ea:98:e1:e8:3f:f2:f7:1e:39:7e:60:
04:54:87:8e:79:dd:02:90:45:5c:18:41:16:20:45:
f5:bd:3b:43:21:42:ce:09:61:b4:15:16:26:a3:1c:
d8:1d:36:17:17:24:95:8a:a1:24:c2:15:21:18:2a:
79:6c:2e:86:47:80:d1:c6:87:e2:a2:50:a8:60:2b:
86:61:a3:3b:bf:51:78:a6:27:32:7e:ca:84:e3:fa:
76:61:ae:0b:30:b5:40:e2:fb:09:56:28:aa:bc:fa:
d0:31:60:7c:0d:db:44:22:a5:77:22:3b:34:fe:9c:
fd:ef:85:9b:70:d9:40:ee:04:a3:5f:e2:1b:22:ab:
2f:5f:21:6f:b6:f3:12:a9:07:d6:25:f5:ce:6c:bc:
2b:4e:61:84:3b:39:89:ba:41:82:99:47:89:c0:f6:
ca:74:e0:4e:5f:e9:13:21:15:d5:72:11:7d:86:bc:
9e:00:5a:59:82:3c:96:e3:f8:18:1b:51:67:99:75:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:1D:BB:8F:C4:CE:90:25:67:D8:E4:57:74:0A:89:97:3A:DD:8C
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4dwdu4_EzpAlZ9jkV3QKiZc63Yw.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:96:45:75:a0:72:26:4c:f4:2d:8b:f9:49:b4:a0:79:72:a3:
03:a8:88:84:10:ac:06:52:59:4f:a1:2d:7d:ce:26:63:9f:e2:
0d:e3:14:e2:7f:04:a9:c8:6b:f9:34:5b:17:d5:c7:09:7d:74:
df:51:89:a3:2e:75:b0:25:08:0e:84:bf:94:84:42:2e:5f:8c:
89:79:5a:12:7d:68:63:c8:90:73:3b:d7:48:86:0b:45:0b:24:
eb:a6:ad:25:68:90:80:8c:91:6d:d5:7a:cf:ec:ba:ac:da:d6:
71:e9:c1:9f:f0:82:43:59:48:a5:99:de:d2:f4:89:99:13:ef:
23:d2:16:91:d3:42:7e:5f:db:d2:74:73:97:e3:d2:91:7d:a1:
27:b3:ca:af:29:f4:25:92:e5:be:51:d2:d6:d4:a2:79:2d:a9:
8b:2a:96:09:01:fa:26:e5:8a:0a:6d:a2:2b:fb:b7:85:78:7c:
b1:a5:82:d9:9a:dc:18:a1:1c:7c:4b:6b:a3:7f:5b:c4:6d:5d:
a6:7b:90:f7:d4:bf:c5:fa:f9:a9:ae:da:1a:52:db:94:91:49:
8b:75:3c:1d:7a:5f:c3:82:79:05:3b:e3:db:b8:28:32:48:27:
95:16:68:63:d7:f0:64:08:fc:b1:86:f3:15:01:58:32:76:d2:
c5:8d:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:35 2025 by rpki-client