Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yU3LReG-ouGeWUb3Gan57M7sKU.roa
File: 5yU3LReG-ouGeWUb3Gan57M7sKU.roa (raw, json)
Hash identifier: goom3ki7w11nSH1b4BoN/7T2p8tkRdYJADnm/uumqRs=
Subject key identifier: E7:25:37:2D:17:86:FA:8B:86:79:65:1B:DC:66:A7:E7:B3:3B:B0:A5
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 6F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yU3LReG-ouGeWUb3Gan57M7sKU.roa
Signing time: Tue 28 Sep 2021 08:05:31 +0000
ROA not before: Tue 28 Sep 2021 08:05:31 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 23816
IP address blocks: 211.14.20.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 28 08:05:31 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=E725372D1786FA8B8679651BDC66A7E7B33BB0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:6a:a4:09:5e:33:6c:1c:b0:b4:70:a7:c1:
c3:2d:3a:a9:9f:3e:fd:06:b3:c4:e3:0e:31:4b:60:
90:7b:f4:36:a6:8c:0b:29:6c:37:5b:4c:65:76:e5:
51:4a:ce:89:40:18:26:e2:5f:a8:ce:e1:0d:a9:c3:
c0:e6:67:e6:06:32:7b:20:ec:71:0f:a9:b1:df:e4:
d4:05:6e:5c:3c:a0:6f:fe:30:ae:af:b5:3d:ac:ca:
67:a0:60:f9:26:cf:2b:6c:0a:74:41:7c:c7:34:1b:
55:c9:4b:cf:39:9b:1b:ac:eb:a8:b3:9a:f3:42:e0:
a2:ca:81:b7:5c:14:49:92:81:95:7e:11:43:19:ed:
22:0b:4a:31:c4:c5:86:4a:5d:d2:d7:de:26:b1:5a:
05:ef:8f:76:53:97:f1:b0:20:f4:de:36:64:db:59:
ff:6c:47:36:a2:8d:95:b4:ca:27:66:f5:5f:af:92:
5c:6e:e1:b1:01:bc:33:dc:15:b1:2c:82:39:8c:ee:
7d:4b:1a:7a:ae:43:8e:11:90:43:6c:71:9f:54:94:
d4:4b:fb:3a:26:05:39:f2:d4:2a:81:39:58:df:2b:
3f:09:40:0b:81:60:20:26:4b:9e:e6:77:3c:8d:be:
e9:91:3e:cd:46:41:86:b1:7d:7f:65:be:ae:83:d8:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:37:2D:17:86:FA:8B:86:79:65:1B:DC:66:A7:E7:B3:3B:B0:A5
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yU3LReG-ouGeWUb3Gan57M7sKU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.20.0/22
Signature Algorithm: sha256WithRSAEncryption
36:1f:ed:03:1b:cc:1f:75:ba:a2:4d:42:98:c3:d6:9c:1b:60:
70:16:7f:38:89:73:e3:67:6d:e7:90:b4:e7:0d:d0:e2:60:c1:
22:29:28:ff:dd:32:e0:4c:d9:a2:1a:07:e8:34:f7:b1:ba:da:
be:ac:7a:cd:b4:7e:d7:61:2f:ff:68:f2:12:df:61:f3:64:37:
35:ee:00:13:09:fe:a1:6a:3e:36:0c:9e:d5:42:6f:ab:06:db:
4c:99:76:4e:eb:01:a0:98:9c:64:20:a1:ee:a5:b3:9e:84:c2:
ee:76:2f:4e:1b:ae:4b:66:e2:98:30:58:d7:bc:98:46:22:20:
57:9a:c8:e8:fd:c7:08:8c:bd:0c:fe:8d:99:35:d9:c5:ab:16:
e6:9e:6c:e6:0a:28:18:8c:65:0a:33:f0:07:3c:6b:1c:d5:43:
ac:1f:c4:3f:f8:1a:c1:de:54:85:c2:de:41:78:32:e3:eb:6a:
58:a6:5d:97:b7:fd:83:a9:55:7f:1f:56:24:e8:bd:f1:43:a7:
4c:e8:83:cb:24:77:d9:ff:c0:dc:46:5f:56:65:70:5f:2b:57:
1f:ac:d9:09:91:77:d6:ba:36:9b:64:61:4f:d7:2c:ab:91:09:
0f:52:cf:36:3f:f5:b9:59:6d:bc:6c:fd:aa:32:e8:ae:16:8f:
58:5a:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:11 2025 by rpki-client