Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/853/C87Mt0Lb3tHwQtl-D8N6Ivp0a7w.roa
File: C87Mt0Lb3tHwQtl-D8N6Ivp0a7w.roa (raw, json)
Hash identifier: HdJxNCQHS82lRGRlwrKZAf+OYlq+VBwiEKt0ctvQmYM=
Subject key identifier: 0B:CE:CC:B7:42:DB:DE:D1:F0:42:D9:7E:0F:C3:7A:22:FA:74:6B:BC
Certificate issuer: /CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
Certificate serial: 14
Authority key identifier: 27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/C87Mt0Lb3tHwQtl-D8N6Ivp0a7w.roa
Signing time: Tue 25 May 2021 02:46:55 +0000
ROA not before: Tue 25 May 2021 02:46:55 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 2506
IP address blocks: 202.249.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
Validity
Not Before: May 25 02:46:55 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=0BCECCB742DBDED1F042D97E0FC37A22FA746BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:df:a1:e4:3c:d7:f1:02:b4:62:51:91:33:
d6:6a:dc:7c:b4:23:3c:73:c2:0a:69:d3:95:05:f3:
26:4e:46:8b:86:08:e7:d5:e9:31:0c:a3:ec:ec:80:
77:c2:16:de:00:9c:a1:4c:16:e8:4b:77:5e:c3:75:
73:1c:1f:98:33:d6:b5:93:af:a1:99:f3:61:c7:e3:
95:71:36:bd:e2:ac:82:4d:bd:ab:64:8e:e0:03:48:
d7:39:59:9c:a6:b0:70:5b:39:74:8e:04:87:84:55:
df:6d:28:e8:b4:3f:37:43:44:c1:a1:57:db:a3:91:
02:bf:a0:62:bc:8e:b3:b3:16:1d:e9:a1:c6:1c:c7:
45:e0:34:e5:d1:35:47:88:b7:15:5a:fd:ab:90:74:
3a:14:75:a2:6e:aa:0e:f2:fa:a2:fc:f5:84:53:12:
cc:ba:09:52:99:4a:e6:c8:4b:c1:af:f5:a8:bf:a5:
f4:6e:cd:c5:a7:d0:b5:45:68:2c:37:62:bc:ec:80:
52:af:41:8a:b1:7a:8a:78:0b:b4:08:dc:02:00:77:
13:05:71:e7:86:13:78:53:dd:21:8a:de:b4:ca:cc:
cc:fe:db:d8:80:8f:df:77:31:f5:94:6c:22:7a:40:
29:ff:a0:a6:62:23:18:13:fe:d7:ae:7f:91:25:f4:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:CC:B7:42:DB:DE:D1:F0:42:D9:7E:0F:C3:7A:22:FA:74:6B:BC
X509v3 Authority Key Identifier:
keyid:27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/C87Mt0Lb3tHwQtl-D8N6Ivp0a7w.roa
sbgp-ipAddrBlock: critical
IPv4:
202.249.192.0/18
Signature Algorithm: sha256WithRSAEncryption
89:70:99:6e:c4:ba:95:93:7b:61:6c:4c:18:5b:36:1d:25:71:
ae:15:5a:6c:8d:f1:a3:9e:70:29:d7:06:65:82:35:96:ca:dd:
9d:21:8d:24:c9:b0:43:32:94:c3:8a:ac:3c:34:b2:2e:f2:a3:
cc:3f:09:12:3f:e2:7f:9b:fc:76:c1:b7:05:08:51:ee:aa:c5:
e2:4b:d8:b9:02:00:e1:17:cb:dd:db:43:0e:bb:f1:5d:3b:ee:
a3:11:c7:2e:fa:a2:f7:f1:52:68:ab:b2:64:69:63:fd:8f:1d:
bf:37:ab:86:72:11:9f:fb:e6:04:35:68:4c:27:73:ee:ba:85:
3f:2e:4b:14:90:77:09:24:6d:3e:c2:30:c9:77:0f:50:e5:7c:
c2:0f:16:75:92:b1:1b:bd:c5:8a:c9:2f:0a:55:c5:b9:2c:6d:
1c:31:fd:9c:fb:30:17:52:27:0a:12:40:c7:c6:24:b7:40:7d:
64:81:21:fa:5d:06:c6:98:a8:ce:c1:91:66:f3:97:cf:1d:4a:
ef:2e:25:c6:93:61:5b:ff:dc:48:d4:ca:ae:a1:0c:16:2e:e0:
72:6e:bf:c2:1a:1a:2b:f3:8b:77:e5:ef:6a:76:27:f3:33:e5:
41:22:fc:a9:d1:75:47:87:df:50:b9:15:9e:79:db:1e:47:4b:
53:80:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org