Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/qQfqzX3XYNf7cvnB7fpWCzsr2MY.roa
File: qQfqzX3XYNf7cvnB7fpWCzsr2MY.roa (raw, json)
Hash identifier: qxTHyyY0HtAgBm+qsRVdeSqPXsU8A5x3yq/nf0gDMTg=
Subject key identifier: A9:07:EA:CD:7D:D7:60:D7:FB:72:F9:C1:ED:FA:56:0B:3B:2B:D8:C6
Certificate issuer: /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial: 1A
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/qQfqzX3XYNf7cvnB7fpWCzsr2MY.roa
Signing time: Fri 01 Oct 2021 01:28:26 +0000
ROA not before: Fri 01 Oct 2021 01:28:26 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 55900
IP address blocks: 137.220.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Validity
Not Before: Oct 1 01:28:26 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=A907EACD7DD760D7FB72F9C1EDFA560B3B2BD8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:40:1b:eb:5d:e7:bf:88:1d:86:54:03:c6:
03:2b:2b:f7:90:c3:48:1d:97:b6:7a:af:06:da:eb:
6e:9c:fd:84:d2:11:80:27:e1:c0:bb:a3:bf:18:09:
73:5b:82:c8:a8:e8:5a:19:a2:b3:c3:3a:98:74:ad:
5e:71:e3:a8:79:30:6f:8e:83:99:45:96:15:47:07:
2e:f5:7a:8d:16:f4:e6:c1:73:66:00:b1:13:42:e5:
3d:30:af:23:fe:71:0c:19:4d:bc:07:e9:70:7c:9a:
17:a5:40:70:fd:e0:54:8b:63:ab:a8:21:76:2e:f6:
60:0c:7c:dd:8b:35:56:64:c9:30:cc:5a:d3:6f:81:
ba:4c:84:92:2d:23:73:fb:1e:16:9d:c3:39:d0:ac:
98:ea:e2:7b:0d:ed:dc:31:56:af:79:6b:49:ca:40:
04:93:db:c4:aa:02:0b:55:7f:2f:88:1a:f4:fb:36:
5c:4b:0f:e2:9b:d6:c4:a5:74:72:89:59:5b:f0:f5:
ee:f9:fb:bd:48:0d:1d:93:55:7f:79:00:65:20:11:
14:04:7e:ae:8c:65:16:8c:51:6e:16:5b:56:e3:3d:
fb:91:f9:6c:2b:02:c1:ba:95:63:57:86:da:0a:ef:
3e:96:4c:85:9d:2c:c2:af:10:74:bb:20:ec:4a:c2:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:EA:CD:7D:D7:60:D7:FB:72:F9:C1:ED:FA:56:0B:3B:2B:D8:C6
X509v3 Authority Key Identifier:
keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/qQfqzX3XYNf7cvnB7fpWCzsr2MY.roa
sbgp-ipAddrBlock: critical
IPv4:
137.220.16.0/20
Signature Algorithm: sha256WithRSAEncryption
70:f1:41:c8:f4:89:20:e9:dd:bf:7d:66:5c:7e:db:9f:3b:aa:
c6:e3:96:55:50:cf:78:df:53:5b:66:8a:b0:e8:31:80:72:a1:
ab:a7:ee:15:c0:d6:a3:93:8a:ad:09:90:8f:d3:1e:ea:ea:e2:
fe:81:de:7c:cc:71:d2:31:b3:10:2e:cd:1e:d8:87:84:c1:07:
78:7d:32:f0:63:36:64:f2:37:f5:02:4c:7e:24:18:f2:91:e2:
e3:09:87:24:0d:f9:1a:b2:98:33:1b:a6:ce:32:d4:56:d6:58:
b6:ce:3b:e3:3f:36:39:28:e8:ef:8d:df:63:f5:e2:c2:14:d0:
72:ea:6f:d5:27:88:fb:18:07:f6:2a:a1:ec:ed:c3:b6:96:26:
c8:7a:54:6c:36:b1:2a:09:6e:be:ea:6b:0d:1a:55:99:3d:3e:
f1:7a:17:f3:86:eb:04:43:c0:ba:69:22:25:73:30:79:4d:8b:
2c:13:28:cb:0a:bb:32:42:6b:12:f4:1a:ac:10:45:66:fc:36:
18:02:0c:59:fb:3a:70:48:57:1e:7f:44:bb:3f:48:fe:68:95:
78:fa:f7:63:64:14:41:f0:92:71:1d:41:37:f9:01:a8:ef:cb:
a5:a9:c9:88:a1:d3:92:d7:22:38:17:06:67:c7:56:01:44:11:
f5:e2:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org