Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hm4mYk0UN91RVcU8mSu1csdCTH8.roa
File: Hm4mYk0UN91RVcU8mSu1csdCTH8.roa (raw, json)
Hash identifier: J7gV/GOeKOTiZ3j/53U7i3S/GYKVkiMXuhyzEEaDdWQ=
Subject key identifier: 1E:6E:26:62:4D:14:37:DD:51:55:C5:3C:99:2B:B5:72:C7:42:4C:7F
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0159
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hm4mYk0UN91RVcU8mSu1csdCTH8.roa
Signing time: Thu 01 Dec 2022 01:28:22 +0000
ROA not before: Thu 01 Dec 2022 01:28:22 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:22 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=1E6E26624D1437DD5155C53C992BB572C7424C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:8b:47:2c:90:2e:4a:ac:d1:fc:5d:8c:be:
f1:14:fd:17:49:92:e5:e6:76:a0:da:f9:bd:76:6b:
1a:f9:a1:50:3d:8e:10:2f:b6:6b:b0:be:49:a6:01:
f0:9e:8f:6f:ab:91:86:b8:9b:dc:aa:f3:21:2b:f9:
71:75:9d:60:2b:da:3a:e1:31:ed:c1:1c:30:b5:43:
a0:ea:64:c2:aa:54:9f:88:b3:b9:d6:bb:6e:88:cd:
4a:ff:4f:64:f2:9a:ec:0c:8e:cf:8a:63:29:2a:46:
24:5f:55:92:68:7c:38:a2:49:52:1e:15:82:65:45:
0a:59:1e:6c:51:b5:09:c4:6c:ec:ad:04:e6:a0:cb:
e2:7b:dd:a1:ba:71:38:b2:c3:32:f7:93:ef:ca:dd:
30:34:4e:f9:d8:4d:b6:48:e5:1d:dc:70:37:00:f9:
d7:02:1a:be:25:53:f7:b6:96:6b:47:88:b3:53:94:
9b:82:2d:ea:61:99:93:39:b1:3c:ed:2b:93:32:69:
28:4b:71:fe:65:49:cf:88:2f:f8:2a:07:2c:cb:ab:
c7:78:f3:c0:f9:9f:94:c6:3f:73:75:87:ad:e6:39:
10:b3:94:88:f6:84:bb:1b:2c:de:17:13:21:ec:25:
df:d0:b5:a3:1e:48:e8:a0:f4:d0:78:d6:bc:84:16:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:26:62:4D:14:37:DD:51:55:C5:3C:99:2B:B5:72:C7:42:4C:7F
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hm4mYk0UN91RVcU8mSu1csdCTH8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:78:6f:44:f1:dc:2d:32:b0:ba:73:ce:10:3c:4a:39:17:b2:
29:21:bb:9d:61:12:ad:91:11:bb:5a:e2:6b:32:9c:b8:d9:95:
47:84:44:cc:49:dc:49:ca:bf:47:96:72:ce:91:7d:ff:f6:ec:
21:35:b5:d4:7b:7b:cf:5a:00:d6:84:82:7a:96:7a:e7:82:37:
1d:93:d9:92:4a:90:5a:f3:0c:5a:cf:ce:91:70:ef:bb:d2:92:
5a:3f:7f:ce:dc:f5:86:b7:79:d4:d2:3f:52:16:49:89:8a:46:
c0:ea:1a:77:a8:5c:42:ed:bf:3c:81:48:11:8c:2c:70:a0:4c:
7e:99:66:06:34:02:1e:9d:11:a1:44:1e:bc:e9:18:40:28:25:
a7:36:3f:81:95:da:51:1a:5b:8a:2f:f0:86:8b:5f:59:87:30:
e9:22:88:0b:3d:5f:3b:3a:62:14:0d:fb:90:74:aa:4e:4d:fd:
6b:81:ee:21:18:2a:33:29:36:8f:5e:93:a5:ed:b9:b9:9f:b8:
c5:32:f0:50:d8:a9:9e:a4:9c:30:ae:1a:7a:ea:d8:5a:86:06:
f6:04:d8:79:84:1c:d8:59:77:da:a3:24:19:36:a0:ee:f4:26:
ac:18:49:a3:60:9f:d8:1a:0d:58:ea:f9:96:fa:ac:a7:20:32:
51:fe:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:01 2025 by rpki-client