Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/AiA9tlSDEOIaEGelW5ScGcBC3IQ.roa
File: AiA9tlSDEOIaEGelW5ScGcBC3IQ.roa (raw, json)
Hash identifier: Q5DEinzMpBQx2OdVQV68m9vLvlyFe0Fj1lxzpSUWLtk=
Subject key identifier: 02:20:3D:B6:54:83:10:E2:1A:10:67:A5:5B:94:9C:19:C0:42:DC:84
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 1B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/AiA9tlSDEOIaEGelW5ScGcBC3IQ.roa
Signing time: Sat 30 Oct 2021 05:08:48 +0000
ROA not before: Sat 30 Oct 2021 05:08:48 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 131896
IP address blocks: 103.239.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Oct 30 05:08:48 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=02203DB6548310E21A1067A55B949C19C042DC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:24:13:16:89:43:ac:83:f7:70:8b:cc:8b:
9e:95:99:ba:ad:82:6f:f2:11:42:40:e4:89:ba:f9:
ab:3b:12:7d:e6:47:3a:75:9c:be:20:2f:5d:1d:eb:
66:b0:59:8b:c3:e2:f6:08:8b:0d:a1:25:f4:12:a2:
83:0e:6d:72:99:09:ed:4e:e8:4d:9b:06:37:4b:0d:
38:9a:ad:65:1e:d9:cf:5e:8f:6e:32:24:8d:d5:51:
c4:0d:20:b3:ef:2d:fb:f6:81:83:65:72:e7:d7:95:
67:87:10:ad:44:8d:f8:24:1f:d6:96:3d:c0:51:06:
40:fe:f7:4c:26:f6:7e:8a:c3:64:a1:30:34:b5:0d:
d0:74:b8:f4:a9:dd:65:8f:43:b2:0a:c6:73:ea:fe:
e7:6e:25:24:92:ee:d0:dc:00:a9:fb:94:14:34:5a:
00:2d:1f:84:72:f6:74:2e:5e:b6:18:36:c1:c3:c9:
45:e6:c8:d5:74:b9:45:72:43:9a:b6:9d:23:4c:15:
4a:57:ab:15:94:71:cc:3a:02:df:a1:5f:fe:4c:20:
df:4e:33:7a:b5:62:09:1a:27:7c:a1:bd:63:2a:04:
da:61:e3:68:ef:87:6d:5f:f4:b4:68:3e:dd:45:5e:
c5:6e:a8:22:32:8e:c3:b1:6d:9c:f6:18:73:ec:d3:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:3D:B6:54:83:10:E2:1A:10:67:A5:5B:94:9C:19:C0:42:DC:84
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/AiA9tlSDEOIaEGelW5ScGcBC3IQ.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:0a:dc:c2:61:ca:8e:c5:06:0f:60:ab:e5:5d:d4:2b:43:cf:
4c:06:c0:a2:ab:4f:be:72:64:a9:6b:b1:ca:e4:91:d4:4a:66:
25:20:13:2d:e6:15:77:31:a4:c8:5a:92:71:56:ac:0d:2c:3f:
58:ff:41:66:32:61:4d:5b:2f:08:a9:47:8c:74:52:31:a3:0d:
50:17:58:f3:24:b6:fb:35:de:aa:85:8d:c3:f8:3a:0c:5a:c9:
5d:96:0c:01:31:91:93:ce:3c:22:49:68:37:e7:53:87:a7:48:
30:35:82:b4:8a:f1:55:6f:5e:98:26:53:b0:e3:7d:9f:82:ba:
dd:8c:ef:30:67:2e:c1:82:66:00:68:c7:6e:0d:f9:7b:70:85:
6c:48:df:41:76:82:9b:0f:e1:62:62:47:59:a3:83:af:77:d8:
e8:84:54:50:d7:07:c5:c2:8b:f6:0b:1b:e4:77:4c:26:f5:a0:
ca:5a:f5:93:fa:95:c6:40:12:78:58:37:08:a7:6b:74:c7:64:
b3:77:4b:62:cf:d8:7c:d7:a9:4b:c2:1d:97:7d:5c:3f:fb:6d:
09:28:48:80:5b:3b:62:0a:ea:00:7b:67:91:c4:fa:29:ce:cd:
b5:0e:59:46:61:e4:5a:b3:c7:63:a8:12:31:f3:30:f4:ad:05:
5d:e6:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org