Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/_PkMnbbTpoF5lINta667OaGq01A.roa
File: _PkMnbbTpoF5lINta667OaGq01A.roa (raw, json)
Hash identifier: MgJtPNaQOT45vM+PUyGXDfDi5DQExRG5mDgIBhC+mxY=
Subject key identifier: FC:F9:0C:9D:B6:D3:A6:81:79:94:83:6D:6B:AE:BB:39:A1:AA:D3:50
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0105
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/_PkMnbbTpoF5lINta667OaGq01A.roa
Signing time: Sat 01 Jan 2022 01:31:17 +0000
ROA not before: Sat 01 Jan 2022 01:31:17 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:17 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=FCF90C9DB6D3A6817994836D6BAEBB39A1AAD350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:47:73:e2:7d:51:db:41:b0:28:5c:11:23:
12:18:89:d3:53:72:e0:2b:07:0b:f2:46:b9:50:f0:
a1:00:4d:25:00:90:72:e2:87:24:3c:48:79:29:b7:
47:f4:f1:fa:a9:e3:27:bd:e0:be:a9:91:07:0e:f9:
08:ce:91:b4:ff:9d:bf:e3:2c:8a:9e:14:3d:00:16:
98:c8:2a:97:b7:e7:81:7d:66:26:72:9c:d3:81:a7:
9a:87:66:96:d2:25:f9:ce:f1:52:9f:24:31:94:94:
1b:fa:82:10:9c:eb:54:4e:5a:20:e7:3d:f3:b7:96:
75:ae:d3:f8:21:d5:8b:44:ab:79:70:e7:42:5a:2c:
41:3c:d6:43:10:c8:99:41:8c:93:bb:b3:3f:74:e6:
2a:cb:0b:b8:c3:7b:0f:52:8f:ff:fa:5c:67:64:aa:
49:b5:6c:07:75:3e:94:2f:fc:bd:77:fa:44:57:ac:
fd:b4:84:59:6d:d2:31:20:da:be:05:35:90:1c:5b:
52:3a:f1:24:a6:e0:c0:3a:4a:44:16:2e:d9:d2:5a:
a4:bc:0f:9b:4e:ae:49:c9:7b:d1:8d:8b:fc:10:cd:
11:2b:aa:81:f9:30:8c:f1:ad:f9:f1:78:c2:1b:51:
bc:b1:84:43:18:53:04:bc:77:45:39:e0:fb:cb:09:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:0C:9D:B6:D3:A6:81:79:94:83:6D:6B:AE:BB:39:A1:AA:D3:50
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/_PkMnbbTpoF5lINta667OaGq01A.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.192.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:a5:ff:60:68:ab:d7:9c:f0:88:9e:27:25:fd:74:e5:33:34:
b4:a5:24:ea:77:5f:d1:b5:cf:f8:9b:53:cd:fc:77:3c:be:c9:
2c:e5:76:c5:de:42:20:db:53:88:ae:4f:91:ad:57:46:af:59:
ba:5a:3c:48:fa:23:4d:81:96:31:19:12:cf:48:4e:01:51:59:
06:1c:33:8d:b9:cb:55:34:3e:52:24:23:02:3a:2d:98:34:7a:
8a:78:fe:63:2c:b0:f2:5e:56:1e:91:13:4c:51:ca:89:a4:b5:
9c:9f:1a:ab:24:c2:f7:dc:08:23:aa:05:ff:c5:ae:90:5f:ef:
cb:b8:4f:f7:a0:1c:54:52:36:34:bc:d0:2a:08:8f:0e:e7:44:
48:81:96:99:d4:7d:24:cd:72:45:c5:92:cc:45:ad:55:4c:a9:
b0:00:d7:68:62:45:b6:b4:56:e5:e8:64:bb:e8:99:1b:2c:6c:
9f:d7:37:de:83:ac:76:58:41:05:09:f9:ad:85:dd:f6:0c:b4:
d1:49:d0:cd:85:c7:28:c9:d5:3d:ab:65:95:36:fa:05:a3:cd:
f7:55:95:20:1e:eb:0d:0d:cc:c4:15:0f:eb:49:10:76:ca:f0:
54:94:f2:76:33:e4:62:bb:e9:f6:95:4b:88:e3:ed:58:53:58:
37:a8:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org