Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AEjwB8RX7GjRBvG1nzVxw9HSICY.roa
File: AEjwB8RX7GjRBvG1nzVxw9HSICY.roa (raw, json)
Hash identifier: r6VVrfKegtb212iO99mhbDdRrj14OwXWI6mhXcwXwvw=
Subject key identifier: 00:48:F0:07:C4:57:EC:68:D1:06:F1:B5:9F:35:71:C3:D1:D2:20:26
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0121
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AEjwB8RX7GjRBvG1nzVxw9HSICY.roa
Signing time: Sat 01 Jan 2022 01:31:27 +0000
ROA not before: Sat 01 Jan 2022 01:31:27 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 10013
IP address blocks: 112.78.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:27 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=0048F007C457EC68D106F1B59F3571C3D1D22026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:e8:34:6f:c9:53:a3:34:b6:96:36:66:ac:
e0:0e:a2:05:8e:7a:c8:12:29:9d:78:26:d2:53:c5:
16:c7:98:6b:86:73:7c:f4:36:1c:ae:56:43:0d:42:
a2:73:6b:78:4f:e3:c7:4a:c2:3d:d4:7c:e5:52:fe:
f7:e1:e9:37:30:f1:53:e4:6b:79:63:d8:ea:a7:81:
43:6c:60:a2:2f:2a:59:7b:7a:73:57:68:5d:b6:c7:
55:a5:60:6f:2a:76:97:40:24:e6:57:66:18:af:0d:
9d:87:27:b8:14:1b:e8:0f:65:62:0a:c6:c2:a8:ac:
48:21:91:e8:06:5f:15:5f:8b:5b:6f:73:39:f5:d0:
78:86:3c:76:1c:53:6d:de:84:72:a9:17:fc:a1:99:
be:bd:c7:41:a5:31:d3:16:76:5c:46:6f:4e:ab:79:
24:5d:58:03:2a:a0:d7:f9:d6:b5:ad:81:dc:51:a4:
e6:84:85:8f:d9:83:3f:1c:2f:38:a1:4f:c7:32:02:
ad:90:d0:49:d8:32:ff:fb:d9:cd:79:20:be:1c:52:
87:1e:49:1e:52:d9:f4:50:cb:46:4a:c4:29:b2:47:
50:f6:8d:93:eb:d2:fa:6f:7b:fa:83:f2:45:fb:6d:
0b:8b:5b:c1:9e:0e:76:9c:a9:46:87:33:24:cb:3c:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:F0:07:C4:57:EC:68:D1:06:F1:B5:9F:35:71:C3:D1:D2:20:26
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AEjwB8RX7GjRBvG1nzVxw9HSICY.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f5:80:f7:91:68:4e:53:8f:f7:bd:f2:b9:f4:90:73:02:bd:
6d:a2:67:b9:03:03:99:06:2d:1e:f6:ea:50:fb:d6:70:92:5f:
d4:17:01:2a:98:a1:da:cb:67:68:dc:ff:0e:5e:80:37:2d:03:
d3:34:e8:0f:e1:69:9b:c2:4a:ec:98:55:71:e9:bd:c2:44:f9:
c1:be:45:c2:9e:0f:97:b8:f4:c7:59:ab:2b:e6:a5:2e:57:6d:
53:13:cc:f7:75:f6:ea:29:8e:ef:54:8d:63:e2:69:5e:a9:16:
28:1a:66:d8:46:d7:4e:bd:31:db:43:6d:cf:83:41:7c:06:5e:
4e:c0:75:8e:17:e5:c7:d3:c3:74:1f:2f:31:11:51:5c:29:46:
a9:15:7b:13:6f:24:ac:6f:ff:46:80:6d:a8:a6:18:1c:c2:fb:
80:05:eb:28:f1:06:f9:95:f1:f2:16:b0:64:a5:8f:bd:5c:83:
8a:cf:e4:99:ff:cd:7c:09:7b:76:8c:0a:20:b0:a4:2a:d2:8b:
b5:29:ef:f6:be:3d:2c:65:80:e7:17:ed:a5:24:41:8b:b1:9a:
7a:6b:65:4e:ef:e5:ea:ac:bf:af:7f:79:4d:a5:2e:f8:b9:06:
20:58:80:41:c2:f5:a8:cb:58:6d:2f:bb:ca:94:51:c7:3e:74:
e7:d9:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:16 2025 by rpki-client