Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/IMvtUnJlocvCHBuIKgP7dGOli14.roa
File: IMvtUnJlocvCHBuIKgP7dGOli14.roa (raw, json)
Hash identifier: qwqfcfBid07dmRW68xS+bpIN+fLUUhVtRDJb+HzwAHE=
Subject key identifier: 20:CB:ED:52:72:65:A1:CB:C2:1C:1B:88:2A:03:FB:74:63:A5:8B:5E
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: BE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IMvtUnJlocvCHBuIKgP7dGOli14.roa
Signing time: Fri 01 Apr 2022 01:28:13 +0000
ROA not before: Fri 01 Apr 2022 01:28:13 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 203.140.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:13 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=20CBED527265A1CBC21C1B882A03FB7463A58B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:5a:75:c5:bc:45:8e:0f:67:34:8a:ca:e9:
dc:fc:79:43:ec:f6:0e:2d:72:2c:9b:f0:c1:8a:8d:
be:6c:31:df:48:64:de:05:29:52:da:5c:4f:32:69:
a7:19:02:1d:a1:72:a5:73:50:18:3a:2d:5a:c5:4e:
cf:a5:8f:2c:a6:e3:04:1d:18:41:42:d3:91:44:28:
10:5a:ea:c5:f6:c5:cb:1b:01:6f:6f:82:b4:26:07:
6d:7c:f7:ba:5c:bf:9f:f6:03:e7:d1:c4:2c:39:b3:
8f:b2:52:15:8a:9f:36:63:e6:b2:fb:d6:24:52:2f:
75:5c:e8:52:30:63:75:58:9e:e0:8d:d9:81:83:85:
68:d6:18:bf:8b:26:7f:e6:70:c8:f2:93:c6:8a:d2:
61:d8:d4:2b:cb:7c:cd:99:f2:ec:7a:05:3b:6b:04:
61:75:76:86:52:32:12:c9:e4:37:b7:b8:e6:e0:40:
63:5f:e0:79:f1:c9:3c:6d:e8:5b:6b:f6:2e:64:81:
03:2a:96:d4:b7:36:12:6e:3d:2e:50:91:46:a1:1a:
74:dc:43:9a:9f:c9:d4:e8:34:86:c4:9a:26:b4:8b:
53:54:67:55:b6:b1:03:c7:53:d8:04:bd:53:d7:d1:
d0:46:40:8a:7a:15:51:ec:83:0c:d5:b1:16:24:a9:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:ED:52:72:65:A1:CB:C2:1C:1B:88:2A:03:FB:74:63:A5:8B:5E
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IMvtUnJlocvCHBuIKgP7dGOli14.roa
sbgp-ipAddrBlock: critical
IPv4:
203.140.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:fe:37:e7:86:e5:e4:6c:30:30:da:91:0f:24:e2:a8:06:0e:
33:78:0f:27:f5:46:3c:f5:ea:6f:dd:b4:2b:bf:a4:c8:49:47:
49:cd:b2:a1:77:63:90:32:8a:8d:c3:d5:be:fb:0d:8d:36:cb:
1f:56:b2:42:4d:64:2b:b6:df:5a:c2:08:8d:3b:64:46:fa:fe:
15:56:ad:2f:b2:a8:31:50:c7:3f:7c:b5:65:16:e5:76:c1:55:
21:a4:33:cc:33:f5:4a:b1:96:50:04:ca:e4:23:d9:24:36:b7:
71:30:7f:3b:eb:eb:2c:25:fa:eb:d9:ce:84:c9:ea:38:5a:cd:
0e:53:0a:e7:43:09:5b:4b:07:c8:28:da:f5:dc:94:52:47:ce:
38:33:36:3c:db:1c:bf:6a:bc:8d:5b:03:96:15:a2:23:43:79:
eb:46:fe:4b:fe:38:c6:2b:de:aa:e5:85:be:7b:1d:72:59:23:
a6:1e:eb:55:05:0c:02:08:ba:1f:b6:71:dc:1c:07:a2:53:95:
91:69:50:5b:f2:ca:4d:f2:2e:a8:47:19:a5:f2:55:0d:cb:30:
e9:12:35:de:98:6e:21:66:c9:c3:a8:cf:2f:3d:dd:80:fb:2e:
99:fd:1a:40:48:25:99:42:69:07:43:c4:90:cf:04:2b:4c:94:
d6:4f:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org