Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OIr-7EtlsS-n-w6Q1OjZqpGJwP0.roa
File: OIr-7EtlsS-n-w6Q1OjZqpGJwP0.roa (raw, json)
Hash identifier: 3TSdwJS7ffktyfnbiYlfCyBRpVPB3Xr1bfK0AH9O+Sg=
Subject key identifier: 38:8A:FE:EC:4B:65:B1:2F:A7:FB:0E:90:D4:E8:D9:AA:91:89:C0:FD
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: EB
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OIr-7EtlsS-n-w6Q1OjZqpGJwP0.roa
Signing time: Wed 22 Sep 2021 06:34:03 +0000
ROA not before: Wed 22 Sep 2021 06:34:03 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 7684
IP address blocks: 112.78.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 22 06:34:03 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=388AFEEC4B65B12FA7FB0E90D4E8D9AA9189C0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:3f:7e:1d:62:24:85:55:8d:d0:01:a6:5f:
2c:2a:49:ee:67:b5:7c:4b:33:49:4f:de:99:90:46:
ce:7d:6f:87:a8:28:bf:40:67:4f:be:91:0f:c7:48:
61:75:68:94:a9:49:84:61:bc:c0:63:14:99:97:6a:
1d:19:7d:c3:e7:de:0d:7f:d6:bd:11:02:4b:3a:fc:
5b:e9:80:0c:ba:52:f4:c0:cc:e8:9c:86:45:d7:48:
ba:be:f0:27:56:e6:53:c1:52:a4:8a:b1:e6:5b:81:
5c:63:ca:6c:94:d3:20:b7:3c:53:8e:10:fd:c8:80:
ac:27:22:a1:17:23:01:78:48:e5:29:fc:94:20:13:
41:f1:dd:06:d0:d7:44:a7:15:f1:ff:fc:9f:c6:7e:
57:a4:8f:de:0d:55:f6:2f:3d:49:f9:49:eb:b7:a0:
39:77:0a:8f:1e:02:c7:27:d6:a8:40:bf:dc:ff:c0:
7b:7c:8a:8a:0d:c6:8f:66:73:90:01:f0:41:00:45:
2d:05:db:53:24:53:a9:ab:4a:83:82:fe:3c:bf:36:
a2:5b:af:f0:2e:55:aa:06:0b:0e:9c:4b:b0:4e:a2:
cf:41:bf:27:1d:68:4b:be:a8:7b:26:6a:2c:03:d3:
fb:4c:3b:6b:81:38:dc:98:1e:52:1f:26:62:a5:7a:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:FE:EC:4B:65:B1:2F:A7:FB:0E:90:D4:E8:D9:AA:91:89:C0:FD
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OIr-7EtlsS-n-w6Q1OjZqpGJwP0.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.203.0/24
Signature Algorithm: sha256WithRSAEncryption
86:99:c0:2e:7c:cd:9b:f7:c6:e6:6d:be:cc:1a:e0:a9:2c:ce:
75:ec:06:9e:af:1e:6e:d4:6d:50:23:e9:b0:4f:a8:c3:7d:26:
c8:53:c2:a9:95:b7:2c:a5:9c:20:f6:3f:c2:ad:f1:cf:0d:c0:
d4:b8:29:bc:58:7d:18:c6:a6:4e:4a:d1:cf:e5:c3:3b:a7:65:
4e:a4:90:58:df:83:93:5d:cc:3f:92:c0:b4:ee:14:4f:f0:df:
77:1f:9c:a7:72:42:51:7c:42:f3:99:88:18:aa:74:6b:aa:4b:
69:33:64:fb:18:e7:31:f7:a4:63:b9:2f:68:a6:fd:5c:57:25:
31:d0:7c:ad:c3:6e:27:bc:1c:9d:dc:04:66:6b:be:2e:06:7b:
d7:0c:c4:95:a4:16:ad:9c:7f:a1:75:84:10:10:28:87:08:72:
01:86:fd:5b:48:c7:bd:56:4d:b8:57:26:4d:f7:0f:99:2e:6f:
fd:66:52:1b:9f:93:b2:a5:be:91:46:ca:c9:4a:ff:b7:62:68:
56:4a:fc:dc:d3:e8:32:e4:18:a1:2f:3f:0a:e3:0c:21:9c:df:
ca:fe:b5:dd:95:6d:c3:3b:5d:af:57:df:c6:8b:57:37:8d:f9:
1e:a7:5c:1f:cd:33:03:1d:ff:88:76:d0:32:69:36:c9:ca:ca:
60:82:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:53 2025 by rpki-client