Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/nN9qeCE5ljAJvY0BGBYC0FcDOM4.roa
File: nN9qeCE5ljAJvY0BGBYC0FcDOM4.roa (raw, json)
Hash identifier: nOatI/YpJB5mMa2U/MXAMhTLu/wbpn/tce1/eUMsRfo=
Subject key identifier: 9C:DF:6A:78:21:39:96:30:09:BD:8D:01:18:16:02:D0:57:03:38:CE
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6A
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nN9qeCE5ljAJvY0BGBYC0FcDOM4.roa
Signing time: Wed 01 Dec 2021 05:34:21 +0000
ROA not before: Wed 01 Dec 2021 05:34:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 110.50.76.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:34:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=9CDF6A782139963009BD8D01181602D0570338CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:bc:0b:7b:24:ca:f9:ad:36:7b:f0:fb:fa:
40:fc:c3:1e:f5:04:de:9c:2a:1c:91:30:d1:41:37:
c9:93:0f:a1:c0:99:97:dd:6b:2e:11:75:a2:9e:2f:
f9:95:51:cd:1d:87:f5:26:d2:7c:85:93:86:8e:61:
55:fa:ef:1d:57:a2:47:5a:6d:ae:cd:51:b1:73:c7:
f7:76:37:04:fe:3a:b3:71:16:6c:60:53:98:f7:7d:
a2:c5:45:17:1d:e3:48:5c:7f:ab:ed:73:86:91:59:
1e:38:51:d7:f9:05:7d:dd:38:fe:01:70:b1:77:95:
bc:7e:f7:6e:26:bf:05:57:02:ba:52:59:7d:30:c3:
3e:e0:56:ec:02:e2:45:0a:3c:63:74:cc:45:36:a1:
24:d5:1d:52:6a:6a:1c:39:6a:f9:a7:e4:52:d2:14:
0e:30:89:3b:35:c6:4f:32:87:24:f4:76:7f:33:c6:
18:b2:47:8d:59:bf:8c:78:f2:67:19:1a:ee:28:08:
cb:02:26:99:ea:65:59:b4:da:10:3a:90:ab:86:d4:
40:b1:05:82:c7:0f:48:a7:d3:57:54:d8:2d:30:81:
ca:c1:68:3f:89:31:66:03:19:43:84:4a:f8:94:8c:
18:a5:50:71:dc:4f:8c:84:42:f5:85:fb:fc:45:94:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:6A:78:21:39:96:30:09:BD:8D:01:18:16:02:D0:57:03:38:CE
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nN9qeCE5ljAJvY0BGBYC0FcDOM4.roa
sbgp-ipAddrBlock: critical
IPv4:
110.50.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:3a:6e:03:51:2b:77:a4:d5:c2:e4:ca:f2:dd:5e:9f:41:90:
c7:5d:dc:f6:c9:11:de:35:d0:76:86:fb:5a:57:b7:97:94:22:
d9:cd:5f:74:bc:83:bb:fe:51:6b:6f:af:c6:dc:b3:62:7b:8a:
a7:e6:8b:72:4f:1f:34:3b:cb:83:64:d1:d6:ae:a4:f0:b3:36:
35:60:88:6b:3c:d2:af:21:9d:8a:05:a6:d1:1e:63:a7:0e:af:
bf:15:b7:59:81:dc:a4:ff:01:71:19:d6:f4:38:e0:1e:81:ee:
b3:29:27:a5:5d:41:ad:97:8b:e6:98:f8:3e:91:3a:a9:c9:db:
8f:c9:a2:cc:d7:6c:fe:ca:0e:4d:ac:0b:2a:d7:73:cb:c6:c5:
bd:e3:17:22:bc:0a:17:40:94:c7:4a:09:4e:0c:ae:9b:f9:5e:
f9:9f:9c:7b:f3:42:c3:b3:3d:d1:99:2a:72:4c:f8:c9:73:0b:
6a:50:2a:f1:99:e7:24:e9:ac:14:4b:cb:51:5a:05:f4:fe:a0:
85:dc:9c:ac:e0:8b:2f:48:29:62:19:bb:ca:71:76:8f:ac:93:
07:88:12:2f:f5:6e:e9:34:d3:a7:55:10:b8:98:98:33:40:d1:
f0:40:61:0a:6a:e5:61:b7:c6:5e:b7:42:96:24:4e:2f:28:7b:
ee:0c:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org