Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/mnJ3sBpAQPJqFy7uRTXfSP6U5KE.roa
File: mnJ3sBpAQPJqFy7uRTXfSP6U5KE.roa (raw, json)
Hash identifier: 13Ldul/crhSnaJxD7Z6+zJHnTzyyXVdiBeQsqQnLahk=
Subject key identifier: 9A:72:77:B0:1A:40:40:F2:6A:17:2E:EE:45:35:DF:48:FE:94:E4:A1
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 5D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mnJ3sBpAQPJqFy7uRTXfSP6U5KE.roa
Signing time: Sat 18 Sep 2021 06:38:09 +0000
ROA not before: Sat 18 Sep 2021 06:38:09 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 10021
IP address blocks: 202.7.96.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Sep 18 06:38:09 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=9A7277B01A4040F26A172EEE4535DF48FE94E4A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:66:78:38:72:5c:3e:98:98:ff:de:60:23:
29:cb:9b:7c:31:0d:10:0d:b7:04:60:15:ef:3f:ee:
7f:11:00:c5:b0:b7:5e:64:98:1b:d9:f3:91:7c:96:
e0:70:d4:fc:b6:c1:42:fc:03:23:97:ec:c2:a9:bd:
a5:5f:4c:c9:d5:06:b2:0b:e7:e5:95:1a:28:6e:8c:
f1:71:10:08:67:a1:e6:6a:8b:33:d8:0c:22:fe:cc:
09:e0:7b:b8:7f:b1:a5:37:06:29:c8:8f:e8:8a:7b:
38:1b:6b:57:54:a0:f4:ed:e3:dc:67:e8:e3:dd:5f:
cc:bf:5b:20:92:35:64:5f:7e:24:99:b1:ee:6c:f5:
07:52:6f:a4:40:cd:04:c3:9c:e3:55:be:69:fb:fc:
83:20:fe:cc:17:c7:8e:29:46:3d:f7:ab:c5:ec:94:
ba:68:12:32:f8:3b:d4:d1:6d:85:68:3c:29:74:fb:
a7:2b:c8:32:17:9b:d9:0a:00:65:26:f4:4c:10:83:
55:d5:10:50:c3:d0:a6:6c:a1:b4:40:21:11:2f:3f:
77:34:a5:72:34:7c:3d:b4:a3:d0:9a:70:fe:b6:2c:
bf:c1:d0:12:b6:7c:57:48:c9:c4:1d:fb:73:38:48:
18:5e:d7:19:3d:74:fb:18:aa:e1:df:1b:78:9e:9d:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:77:B0:1A:40:40:F2:6A:17:2E:EE:45:35:DF:48:FE:94:E4:A1
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mnJ3sBpAQPJqFy7uRTXfSP6U5KE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.96.0/21
Signature Algorithm: sha256WithRSAEncryption
04:d6:b3:97:56:fe:49:2b:9e:d0:01:e7:ce:0d:c3:4c:f8:c9:
b0:73:5f:69:cd:72:88:2f:c7:1a:3c:f2:66:f9:45:68:e5:b7:
ae:26:00:c0:0c:09:8f:de:60:fa:35:03:9d:5a:17:7a:17:95:
cb:bc:ca:6a:e9:e1:79:24:de:dd:8c:71:3f:61:e5:29:a3:8c:
10:b0:85:34:4b:ac:fe:96:57:8a:cd:7e:83:bf:39:54:f5:bd:
cc:60:d8:dd:48:9d:af:80:e5:4a:ab:2c:54:5a:06:a3:d3:a8:
02:ab:3d:72:b3:5b:06:33:f0:9a:fc:f1:c9:c7:74:ca:ae:5c:
c9:8b:f8:1f:26:0e:2a:05:78:eb:8f:77:29:a3:af:d7:8a:1d:
21:68:0b:39:3a:6e:44:c3:c5:0b:d3:80:fe:c3:6b:c2:d2:7d:
55:18:da:bc:04:47:f4:f9:b4:e1:7e:73:a9:9c:95:de:f7:f4:
53:7f:1d:ed:01:2e:30:7d:96:f5:5d:4b:7d:4b:63:bc:30:b1:
c6:03:45:d4:44:94:e5:d7:d8:da:b2:3e:4e:c2:b5:fe:5c:dc:
78:36:13:32:a9:cb:35:b2:32:43:d2:6a:21:1a:f1:48:7c:f3:
93:2f:69:2b:28:bb:c7:d5:c2:a1:8a:9b:05:da:1d:b3:f3:68:
66:fc:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org