Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8kOpQEGJ0lH7l0JBUK1yxT11YFM.roa
File: 8kOpQEGJ0lH7l0JBUK1yxT11YFM.roa (raw, json)
Hash identifier: tF9zfvsZFcBA1GyaWcCnrxdXbFPINpz68lHgwYQIBtY=
Subject key identifier: F2:43:A9:40:41:89:D2:51:FB:97:42:41:50:AD:72:C5:3D:75:60:53
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: E1
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8kOpQEGJ0lH7l0JBUK1yxT11YFM.roa
Signing time: Wed 22 Sep 2021 06:34:01 +0000
ROA not before: Wed 22 Sep 2021 06:34:01 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 7684
IP address blocks: 112.78.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 22 06:34:01 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=F243A9404189D251FB97424150AD72C53D756053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:f4:5d:fe:3e:b5:66:ab:3d:7f:6c:11:53:
1c:96:1b:00:05:d3:6a:b6:de:60:95:2e:d3:f0:b8:
57:6c:b8:f0:84:30:24:3d:98:7c:6e:29:ac:6d:86:
3c:05:2f:2f:54:5f:18:18:52:80:f6:96:0d:4e:06:
75:8a:cc:53:04:a0:ee:74:44:06:92:48:4e:92:54:
ed:df:16:fc:21:34:b1:a7:23:5d:b6:a1:f5:ea:47:
6d:96:2c:3d:f7:2c:c3:d2:2d:7a:3d:16:9b:cd:93:
0e:4b:90:0c:a1:f0:5c:9c:40:05:58:e1:aa:40:d2:
61:89:16:73:87:84:cc:bc:69:42:e8:1f:d1:2c:07:
7e:17:1d:7a:2b:55:0c:85:e5:3b:63:f2:02:82:ad:
e7:72:24:f8:56:dd:31:83:b4:5b:4e:5f:4d:e8:49:
2e:73:af:99:c1:2d:b9:d1:bd:d1:e4:48:3e:09:a8:
bc:1b:6c:12:4d:fa:0b:83:30:82:f5:70:54:85:4c:
94:48:28:e7:62:8e:8a:71:2f:cc:d4:62:65:f9:41:
d5:82:60:62:2b:02:7a:c8:74:5f:59:8d:31:c2:52:
72:ad:df:ae:9c:44:f3:cf:36:1d:41:d9:53:82:10:
9e:9e:ee:64:12:2f:71:2e:24:1e:8b:da:84:2d:6d:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:A9:40:41:89:D2:51:FB:97:42:41:50:AD:72:C5:3D:75:60:53
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8kOpQEGJ0lH7l0JBUK1yxT11YFM.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a6:59:67:76:d5:cb:2d:3b:92:77:2f:aa:0f:17:c0:31:f1:
88:d1:32:5b:4a:5b:d7:4c:3c:a7:ca:71:26:57:83:7a:bd:6a:
94:b3:15:06:35:ff:d0:23:49:8b:8b:05:92:89:72:fc:cc:45:
6e:d9:21:e2:8e:a6:cc:83:c5:11:47:94:c3:cd:aa:59:81:2e:
a9:1e:55:74:e5:4c:38:d3:dc:5f:e7:87:6e:59:94:03:9c:bd:
e1:36:86:84:d1:db:19:a3:1a:27:3a:3a:34:2e:df:97:c9:f9:
db:44:d3:9a:e6:99:be:c0:4f:03:72:07:48:91:cc:73:f7:69:
30:ff:65:28:a7:6a:b2:6f:de:03:8b:d5:a0:71:c1:a8:74:47:
b3:32:e6:de:09:01:42:9b:7f:59:f9:83:ae:b6:91:8f:75:7b:
64:35:08:1e:dc:e1:c3:21:e7:2f:06:47:70:26:e2:4d:3f:ca:
6b:7e:3e:d2:d0:68:62:d5:23:1e:d8:fb:ae:6e:96:a9:8c:56:
82:de:7f:8d:7d:ef:64:1b:f2:83:ff:33:20:cc:b1:79:e9:16:
38:26:9a:2b:db:b5:9c:f4:ab:0d:15:7b:a2:7c:78:27:d8:43:
ab:18:45:b3:a0:22:2e:f8:a9:b0:0c:06:dc:8e:12:fc:85:aa:
7a:e4:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:00 2025 by rpki-client