Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q90ajELQ4l9BQ9044oW98TR4Sfk.roa
File: Q90ajELQ4l9BQ9044oW98TR4Sfk.roa (raw, json)
Hash identifier: 6sZkqSJvRECSS3i32TC7hPHuEBdO2yZmQFCNQ1xll1Q=
Subject key identifier: 43:DD:1A:8C:42:D0:E2:5F:41:43:DD:38:E2:85:BD:F1:34:78:49:F9
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0169
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q90ajELQ4l9BQ9044oW98TR4Sfk.roa
Signing time: Thu 01 Dec 2022 01:28:27 +0000
ROA not before: Thu 01 Dec 2022 01:28:27 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 9371
IP address blocks: 219.109.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:27 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=43DD1A8C42D0E25F4143DD38E285BDF1347849F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:7c:3b:c5:22:44:8f:d0:80:8f:50:db:54:
22:c9:c0:00:7a:a9:9c:1e:33:ea:96:09:3f:57:9a:
4c:24:b9:21:9f:22:aa:a6:55:c4:e8:48:19:07:97:
6e:44:61:f8:e6:57:0c:bf:49:20:dc:d4:0d:13:a8:
1e:eb:d8:86:23:52:3b:7c:05:1f:ac:3b:be:2d:1e:
46:1f:dc:56:01:49:e3:50:8c:4f:94:a2:8b:91:5c:
55:e4:7a:2a:0b:a4:ae:f0:b3:13:1e:a1:b7:b8:55:
2f:48:0d:0c:af:81:fe:9a:7d:6e:c7:ce:87:6e:de:
80:4c:09:04:5d:1a:f0:52:62:72:b9:f3:75:2c:68:
ff:86:a0:be:0e:de:25:2f:85:69:9a:f0:07:6f:2a:
77:89:1a:c8:50:49:e8:4a:54:ae:d5:f0:84:86:b1:
37:c3:3c:01:72:ca:f2:2e:6d:fb:26:ec:aa:43:4e:
2b:87:6b:85:65:82:4e:31:e8:07:f4:c4:66:e4:e4:
e0:e1:99:bd:1e:b0:01:5f:7b:79:07:8e:1f:a9:d4:
c9:09:72:91:06:2d:1e:78:96:93:cd:9f:3d:0b:a4:
e1:de:b9:1e:d0:f5:0e:2b:a8:33:a3:83:26:de:91:
36:ba:3d:f7:fc:c2:ba:17:30:8e:14:2c:db:93:09:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:1A:8C:42:D0:E2:5F:41:43:DD:38:E2:85:BD:F1:34:78:49:F9
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q90ajELQ4l9BQ9044oW98TR4Sfk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.109.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:54:60:2f:2c:99:d7:c8:2e:5d:6e:2e:35:db:29:59:46:fa:
e3:56:ca:d6:89:cf:2a:6e:b6:9f:65:c4:5e:18:e3:16:c0:7f:
52:7d:2f:30:93:74:2d:f3:50:ea:2e:14:0e:dc:b7:3c:c3:3e:
9f:d6:d0:fb:1f:11:d5:4d:2f:e3:66:3b:0b:12:5e:e9:a1:1e:
6f:d1:e5:ef:0f:ef:1e:19:c8:c0:d9:55:d4:21:4b:70:d8:22:
2a:8c:30:26:15:cd:f1:74:9c:3e:e2:8d:2c:1d:40:d7:92:6e:
47:bb:d9:9c:e6:3e:a6:70:cc:d2:97:b4:a4:ce:d4:8c:99:3f:
a5:00:44:6c:14:9a:ec:77:9b:5b:e4:a7:95:a3:56:bb:ec:c8:
4a:81:5f:87:eb:76:7d:59:93:a3:1d:f4:b1:aa:14:e1:11:be:
07:18:e1:a4:66:97:fb:c3:61:24:f6:4b:49:d4:d4:89:16:d9:
f1:4d:41:92:fd:bb:4f:c0:01:c1:16:ab:92:e6:25:c7:4d:92:
0d:16:2c:5e:b0:90:35:81:06:36:7f:26:8d:e2:57:34:0e:d9:
1f:b1:1c:e7:b5:00:fc:01:9f:df:40:93:aa:d8:2a:fc:65:66:
29:65:ce:bd:92:1d:29:81:19:3b:01:a1:f4:34:00:8c:bc:0e:
f2:75:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:44 2025 by rpki-client