Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TX_pvKyMsqBDCAF7De60rEgAbjw.roa
File: TX_pvKyMsqBDCAF7De60rEgAbjw.roa (raw, json)
Hash identifier: qirjtmyy5X9Msdn0z78PgPV1ACr9e5K3otQYpz+OXMQ=
Subject key identifier: 4D:7F:E9:BC:AC:8C:B2:A0:43:08:01:7B:0D:EE:B4:AC:48:00:6E:3C
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0119
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TX_pvKyMsqBDCAF7De60rEgAbjw.roa
Signing time: Sat 01 Jan 2022 01:31:24 +0000
ROA not before: Sat 01 Jan 2022 01:31:24 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 112.78.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:24 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=4D7FE9BCAC8CB2A04308017B0DEEB4AC48006E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:8e:14:4b:07:5f:23:26:0c:4d:81:88:93:
2e:de:f2:3d:f6:7d:a8:4c:57:0a:34:04:b8:84:d2:
ab:81:01:ff:08:e6:51:57:bc:cf:59:48:88:bc:ae:
45:a6:74:7e:8a:01:34:08:b9:da:6f:d3:8c:83:f1:
cc:f1:7f:5a:a0:18:8d:f5:61:4b:88:c8:2c:af:bb:
39:c9:a7:83:fd:fc:8d:50:0e:03:d5:a0:18:73:8a:
be:c6:dd:1f:59:9f:57:fa:45:4a:d3:e3:91:a1:70:
94:b7:2b:f1:29:40:62:cb:1c:7a:2a:c4:15:c9:fe:
6f:34:71:66:75:50:fc:a7:38:f8:02:67:11:63:55:
8f:a2:0c:f6:84:17:17:da:fc:48:06:11:b3:b4:b8:
46:97:76:56:b7:4c:ac:26:e1:74:38:fd:d9:c0:43:
55:7a:d1:f9:b0:84:c1:f0:67:fb:55:3e:61:3c:85:
28:f7:0a:92:dc:7a:5d:d5:a7:ea:ac:48:7f:fe:84:
51:90:a9:10:7d:f7:81:db:73:fc:b5:38:00:ca:c2:
73:37:29:4e:cb:7c:8b:9f:94:82:59:43:52:70:1d:
35:45:88:91:ce:f1:7d:a1:dd:66:8f:6c:c5:d6:75:
92:43:f4:58:99:b4:fe:22:b6:ab:1d:de:00:67:09:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:E9:BC:AC:8C:B2:A0:43:08:01:7B:0D:EE:B4:AC:48:00:6E:3C
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TX_pvKyMsqBDCAF7De60rEgAbjw.roa
sbgp-ipAddrBlock: critical
IPv4:
112.78.216.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a3:62:3a:08:79:5b:4e:3e:7a:12:c9:67:52:5d:b6:77:3a:
5e:26:1b:b2:f6:ae:3d:a0:28:e2:51:0b:48:e3:f4:8c:43:ba:
6e:98:df:5c:74:fc:c1:ba:fd:43:a2:f0:83:98:c2:8c:ed:8c:
46:b0:51:9a:10:55:5e:93:c6:45:82:f7:7b:ae:26:11:7a:90:
f0:58:d2:96:2d:f8:c1:02:37:21:20:44:d5:8f:e6:84:da:80:
21:66:81:61:d1:f2:02:5a:d2:44:db:ec:61:08:9d:29:09:24:
a8:a0:1b:c8:bd:f4:f6:e3:e6:57:58:f4:44:b2:7b:37:89:42:
b2:9c:13:fa:0c:8e:d0:69:6c:b8:6c:a4:8f:40:03:7f:4b:7b:
d8:66:cf:c4:0d:b3:cc:0b:dd:dd:b1:11:92:59:12:8b:8f:fb:
cb:58:cf:a7:43:b0:7a:9d:67:41:15:87:bb:90:ff:74:d3:1e:
0a:5a:51:df:ff:1c:0a:f6:c3:12:9c:b1:33:a5:f2:81:ab:7f:
db:ae:e2:c8:a5:b9:1a:76:af:3b:34:ad:9d:ee:56:e0:88:76:
2a:2a:aa:f5:37:7d:5a:50:3c:71:3c:18:25:60:28:fa:5e:18:
01:05:7c:59:30:fb:04:46:2c:84:a1:29:de:8f:2d:04:24:8c:
c6:53:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org