Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/H3HBcW6SoixBYBJBG9SSPsuL7w0.roa
File: H3HBcW6SoixBYBJBG9SSPsuL7w0.roa (raw, json)
Hash identifier: 3pFeOUVPlYvHaJiuuo+D9v9oTdVhXFR+ayUPA6KnuiY=
Subject key identifier: 1F:71:C1:71:6E:92:A2:2C:41:60:12:41:1B:D4:92:3E:CB:8B:EF:0D
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0181
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/H3HBcW6SoixBYBJBG9SSPsuL7w0.roa
Signing time: Thu 01 Dec 2022 01:28:36 +0000
ROA not before: Thu 01 Dec 2022 01:28:36 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:36 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=1F71C1716E92A22C416012411BD4923ECB8BEF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:49:23:06:2e:e8:c3:c6:d6:a4:a2:18:9a:
2c:b8:6d:de:e8:73:b2:97:b4:31:3b:b6:a0:cd:90:
6f:b2:40:b4:f4:e0:4d:d2:e1:46:bc:2c:da:e4:5c:
00:38:60:b1:23:24:b5:43:b7:31:b7:27:3c:77:61:
9b:83:fc:77:32:99:ab:d2:88:40:14:19:5b:82:8f:
81:56:68:70:ef:29:93:8c:e1:19:58:a1:72:fe:e2:
2d:2d:9a:a6:5f:d7:20:3d:47:6c:5c:63:dc:03:e7:
62:fd:27:32:c0:54:f9:39:69:3a:8f:ac:56:5a:6c:
20:6b:4d:aa:35:dd:86:be:86:e1:98:2b:9f:dd:60:
6e:b2:01:fc:01:b9:69:88:ea:d2:22:08:d5:94:d3:
28:2f:47:8e:35:20:8b:03:f3:04:90:f5:c0:00:73:
52:5d:b1:c3:e9:14:93:11:ae:63:94:f4:0e:c6:2b:
fd:6f:79:5e:1c:b3:29:da:58:7d:d6:bf:d6:43:6b:
f5:0a:a3:7e:59:1e:c3:e0:84:f0:b5:44:70:40:e6:
10:28:e7:02:6d:40:5e:4e:6c:d5:46:5f:f6:10:ed:
1d:10:58:f9:b4:68:77:53:49:8c:14:db:56:ee:9c:
88:3c:3a:6c:10:9c:f9:bf:03:33:54:53:a1:b3:09:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:C1:71:6E:92:A2:2C:41:60:12:41:1B:D4:92:3E:CB:8B:EF:0D
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/H3HBcW6SoixBYBJBG9SSPsuL7w0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d2:19:af:a7:88:8a:44:3b:9b:54:f6:0f:c4:d7:61:c0:17:
a3:a9:a0:6e:75:18:c1:d9:8e:36:d9:ae:be:89:f8:86:2b:04:
f4:dc:68:cf:c5:38:1c:39:a0:8d:04:b1:a2:df:5a:a8:05:13:
bf:9d:35:54:fb:47:b2:ce:8d:b5:d3:56:1c:c6:ba:b7:64:71:
f9:b4:aa:4c:34:c4:ce:96:e0:7f:41:6e:88:73:0b:a6:7a:49:
a0:8c:39:03:5e:62:4d:97:88:52:ef:51:c7:3b:03:1a:f4:34:
01:5a:a7:95:1f:48:46:14:aa:2c:1c:ab:ac:bb:16:35:03:92:
29:d0:a0:0a:37:16:5b:98:11:64:2e:34:01:59:d4:0d:da:73:
f2:38:1b:7f:40:c2:0c:d2:62:1f:51:b0:2f:ed:b9:5c:a8:e2:
ba:27:3e:23:78:fb:56:3a:0c:d8:79:0f:5f:9a:b1:b8:e1:eb:
bc:d5:0e:54:6c:d7:cb:b3:37:d6:f4:5f:2d:2e:5f:99:af:b0:
9e:c5:f0:08:eb:12:86:27:00:44:74:fd:65:a9:1e:bd:9c:b8:
fb:ef:97:07:2d:4a:77:97:2f:36:c3:db:96:0c:15:42:7f:5b:
82:d8:06:69:6c:f4:b6:8e:9f:c6:9e:fb:15:07:9e:2a:06:bd:
b1:f2:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:21 2025 by rpki-client