Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
File: IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa (raw, json)
Hash identifier: dSurzwKhaKXimAT3dS4Re/srLFeJ4mgA82Byd14/uf0=
Subject key identifier: 20:32:1D:A8:BF:19:64:00:0E:1C:82:2B:DA:19:9D:E9:55:F9:77:31
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 02A3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
Signing time: Mon 20 Feb 2023 08:05:30 +0000
ROA not before: Mon 20 Feb 2023 08:05:30 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.92.118/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:05:30 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=20321DA8BF1964000E1C822BDA199DE955F97731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:43:6b:89:48:88:ff:25:d6:8e:5a:dd:cc:
91:3b:e4:ee:a0:bd:d8:14:60:22:dd:79:fc:79:70:
4a:fa:0a:53:cb:1f:ab:12:54:12:e4:f1:73:2b:80:
68:17:52:51:79:30:d3:2a:07:a1:81:76:47:f7:b3:
25:62:22:d2:2b:65:af:c1:bf:a9:cc:56:31:a9:e4:
bb:b5:ee:c7:2e:4f:65:f0:3f:b2:52:e0:dc:09:b2:
f3:ab:e7:44:6e:3c:b8:df:c7:46:cc:26:92:e7:1b:
e2:41:49:a7:ad:fe:9c:16:a7:24:8f:2a:b2:aa:40:
75:a0:65:00:86:42:30:a1:40:34:cd:a2:39:53:ea:
9c:50:29:85:83:bc:26:a4:fa:32:7a:8d:44:bd:a2:
42:a4:7e:4f:86:fb:56:14:67:ba:a7:d4:c3:fe:5c:
33:29:00:54:6e:ff:b5:1b:e1:5a:89:57:26:35:a0:
0f:24:d2:aa:e4:90:fd:d8:0d:22:d3:7c:81:7a:81:
99:d6:5a:ff:54:8c:0a:6c:20:31:6d:89:9e:f3:87:
3e:7a:25:5d:f7:78:dc:4c:00:f0:1c:b7:51:19:1b:
32:ec:aa:a8:49:38:ab:be:e4:57:ef:ef:c2:5a:3c:
63:9c:c4:dd:ca:c9:02:a3:4f:72:09:37:96:b1:5d:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:1D:A8:BF:19:64:00:0E:1C:82:2B:DA:19:9D:E9:55:F9:77:31
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.92.118/32
Signature Algorithm: sha256WithRSAEncryption
6b:24:c1:1d:53:c3:77:23:99:c2:d0:a7:10:61:a8:2f:1a:89:
51:0d:ea:12:f7:e8:ed:02:37:9b:a2:e4:e4:5c:ed:e8:3a:ed:
e1:39:8d:68:f4:0b:32:8f:cc:54:d5:3a:1c:00:19:9c:cb:99:
0c:21:f7:d8:ea:9b:c4:12:04:8d:70:5a:96:1a:78:39:a0:fb:
52:e0:ad:a0:24:54:94:c5:4c:28:df:f8:f4:c7:b5:22:e4:77:
05:29:6f:59:3c:9b:65:38:33:41:8b:50:94:2c:93:da:14:77:
26:0a:08:1a:98:a6:9a:e6:95:ba:c3:53:3f:8e:f3:39:5c:6e:
78:66:1a:42:db:04:cf:04:c7:8e:5b:dc:fa:c1:7f:6e:ed:99:
40:8a:09:b0:d2:f2:71:02:78:5a:de:15:42:4b:11:07:cd:73:
ef:7f:0e:49:a9:b7:5c:39:f3:db:23:b1:f2:5b:17:36:53:3f:
8b:1c:2b:38:8f:aa:33:72:1c:1e:ba:d8:26:ed:ac:39:95:ef:
3d:53:7c:82:a5:06:69:2b:86:cc:d0:76:07:cc:97:bd:64:1b:
00:7e:15:24:0b:03:ef:fa:54:10:e2:d3:7e:13:36:b8:c3:04:
69:e8:13:a9:04:22:5e:9d:b4:0d:dd:5a:78:12:19:88:b8:e0:
7a:c7:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org