Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ngkz2qkJ23TVD6TDm6M0Qu0gw3g.roa
File: Ngkz2qkJ23TVD6TDm6M0Qu0gw3g.roa (raw, json)
Hash identifier: dxHmdHHnfiDxM1LCJEhnSdnt9jb3ovMb06wleNaeFPw=
Subject key identifier: 36:09:33:DA:A9:09:DB:74:D5:0F:A4:C3:9B:A3:34:42:ED:20:C3:78
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01FE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ngkz2qkJ23TVD6TDm6M0Qu0gw3g.roa
Signing time: Tue 30 May 2023 16:29:24 +0000
ROA not before: Tue 30 May 2023 16:29:24 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:29:24 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=360933DAA909DB74D50FA4C39BA33442ED20C378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:bf:5e:82:35:a6:0f:d1:c9:fc:4e:2a:f0:
4e:46:7b:75:f9:3a:f2:c9:71:c5:57:6a:d7:fd:50:
d7:7e:90:e7:3c:13:37:69:be:57:6f:b5:2a:17:45:
7b:c1:21:31:b8:54:76:68:ed:2b:25:67:7f:14:4b:
10:9b:06:f7:9f:ca:63:d3:c0:ae:52:6a:30:8a:80:
1d:a8:97:3d:60:58:ca:9a:e2:2d:0c:d4:a7:d0:be:
df:59:cf:56:01:f4:05:89:14:6a:fd:75:82:e7:4c:
ce:63:86:4b:7d:4f:96:c9:ae:79:e5:dd:b5:60:1e:
1c:0c:84:ea:a7:2a:91:3a:5e:85:4a:60:9c:a1:40:
64:61:40:6c:82:9d:54:af:8e:fc:b3:73:f6:cf:fa:
70:5b:39:3e:25:22:4e:c4:ed:e5:d2:8e:0f:28:3d:
8b:01:24:31:85:4d:6c:fa:86:7d:c4:2b:ba:8c:2b:
b6:84:72:e1:d6:51:8e:63:ae:52:46:2e:da:17:68:
7d:6b:44:83:68:88:04:c4:39:64:96:2d:c1:33:5f:
40:1b:db:44:1f:f2:28:a9:9a:e1:45:76:98:1d:ff:
11:0c:e6:17:49:e0:75:f8:4c:e7:17:c6:1b:dd:ab:
4f:ac:cb:69:54:d4:35:ef:3a:0c:e6:01:25:67:38:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:33:DA:A9:09:DB:74:D5:0F:A4:C3:9B:A3:34:42:ED:20:C3:78
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ngkz2qkJ23TVD6TDm6M0Qu0gw3g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.160.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:da:90:d2:ea:d3:83:db:93:6e:0f:3c:2d:51:c9:f4:41:d9:
c6:af:7e:17:62:2d:4c:d6:ec:2e:79:bc:db:bd:e9:41:d0:55:
9c:e1:33:ce:20:c6:84:94:03:5d:15:52:e0:0a:e6:c3:31:45:
e5:57:90:7b:8a:f0:99:40:fc:53:ca:2e:cc:46:8e:0c:52:83:
4a:49:a0:12:9f:91:c4:96:29:f8:83:be:57:a1:0d:4d:89:a9:
e2:66:55:c9:76:58:4a:12:a7:0d:0d:93:6f:e9:a5:af:ee:2f:
17:89:c7:17:6e:50:74:90:cf:2b:98:df:d0:52:47:d9:4e:25:
1c:74:b5:b2:cc:97:3e:6a:f6:2b:14:a4:6a:2f:fd:bb:52:f2:
c4:99:ed:8d:4f:cc:99:23:94:b2:e8:dc:ce:a6:c4:f7:63:b5:
c3:51:7b:45:0d:e5:3f:4d:6f:f5:b2:7b:65:b6:c4:9d:63:1c:
74:21:14:29:c4:a0:30:06:33:28:4e:18:91:31:1a:63:94:7a:
dd:24:d0:3a:c3:45:b0:4d:02:92:57:50:a8:3f:c9:20:05:7c:
9a:83:e8:3f:63:ac:69:51:c9:08:79:fb:40:69:eb:fc:b5:9c:
cc:69:bf:46:e7:bf:a4:76:54:0d:e0:73:26:f7:30:63:d6:c3:
a8:a2:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org