Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dXWFz2bwPJgpAO8CJQ5wDgFl5as.roa
File: dXWFz2bwPJgpAO8CJQ5wDgFl5as.roa (raw, json)
Hash identifier: s6oeVs1B1nuf3v76sl5yhyUyjaGfWiMN1ernJlLPaYE=
Subject key identifier: 75:75:85:CF:66:F0:3C:98:29:00:EF:02:25:0E:70:0E:01:65:E5:AB
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0127
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dXWFz2bwPJgpAO8CJQ5wDgFl5as.roa
Signing time: Sat 01 Jan 2022 01:32:10 +0000
ROA not before: Sat 01 Jan 2022 01:32:10 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:32:10 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=757585CF66F03C982900EF02250E700E0165E5AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:78:35:39:d1:a2:71:a0:bb:1f:15:ff:05:
28:9e:e0:cc:a4:da:c2:b5:63:67:d0:19:c6:21:6c:
f1:1f:87:54:2c:e0:1d:ac:66:77:3f:ee:b3:8f:5a:
31:ea:6d:5a:d9:92:7d:18:ae:7a:4d:ce:af:f1:74:
3e:1d:b9:c9:f2:43:b4:76:90:56:98:4a:f4:84:6a:
3b:cd:64:7d:4f:e1:55:88:ae:5e:af:77:46:b3:95:
5e:63:39:09:80:1f:99:21:f2:06:2c:06:c5:24:4a:
4b:46:1f:11:36:1b:36:f9:e5:5d:bc:bd:2b:44:26:
a6:08:0c:40:5c:22:bc:45:0f:52:b6:bf:ad:ed:e1:
ab:47:30:32:5a:19:f4:b7:6a:0a:2d:8f:dc:15:44:
08:80:7e:e1:21:ea:d9:07:ad:e8:9f:3a:43:01:17:
73:be:13:a0:b7:9d:52:58:68:32:5d:dd:29:70:84:
24:6e:5e:21:fa:ac:bd:4e:b6:92:9a:c4:32:6c:ba:
50:a5:f6:d6:e1:6a:c9:99:91:d3:a3:4a:fb:f6:48:
de:2f:8a:d9:3c:f0:df:dd:c1:d9:b8:48:74:96:b9:
d0:ee:47:31:bd:61:4b:1c:58:01:44:c6:9b:89:2c:
b2:c6:60:11:fb:92:ad:38:6c:50:6d:11:d7:fc:f1:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:85:CF:66:F0:3C:98:29:00:EF:02:25:0E:70:0E:01:65:E5:AB
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dXWFz2bwPJgpAO8CJQ5wDgFl5as.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0e:22:36:a2:8c:cb:fc:04:0b:37:36:42:50:ce:ac:79:ce:
65:15:63:72:51:54:ee:a1:b3:be:d2:b4:fb:f1:f3:a9:75:20:
43:a1:86:ee:57:97:1f:19:ea:b6:f3:ca:31:25:ca:7e:f4:e1:
fd:55:bb:f9:23:aa:fc:0e:6f:b7:f9:18:ab:5b:9f:46:ad:81:
f3:52:30:22:2c:46:65:fa:3c:6e:e7:18:0b:71:42:aa:79:14:
12:c3:75:a9:12:8f:89:27:10:16:4d:8f:dd:b0:99:77:97:d3:
7f:cc:05:c4:c4:e4:43:aa:7e:6e:9c:44:c0:d9:5d:f8:a4:2e:
ea:a6:bb:2d:90:21:50:50:38:1b:ef:b6:c4:53:77:6c:66:ca:
5b:94:fc:c3:1a:6b:9c:27:45:66:37:35:8c:75:ba:7e:d6:09:
bc:5a:e9:13:a3:39:a1:c0:08:5f:9d:d4:c3:1f:72:d9:52:f0:
f0:5e:7a:59:7b:64:63:d1:24:00:71:05:8b:a1:8f:66:28:f0:
a6:26:b0:70:a3:d1:89:9e:ea:14:e1:6c:6a:d6:d7:98:ac:7e:
2f:57:bb:6c:0a:c0:e3:ce:a1:6c:3c:c9:f3:7b:f8:37:32:4d:
c6:dc:06:af:95:d5:7e:88:f4:85:a0:5e:fb:b8:98:4f:18:f3:
04:6f:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:48 2025 by rpki-client