Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/YH2a2Y7xFeU6JIuiE9p60UNQDXw.roa
File: YH2a2Y7xFeU6JIuiE9p60UNQDXw.roa (raw, json)
Hash identifier: zbPOW3eG2iSH5umYG9C7G4z4ADZ2W2D1vZrGNeEXxKw=
Subject key identifier: 60:7D:9A:D9:8E:F1:15:E5:3A:24:8B:A2:13:DA:7A:D1:43:50:0D:7C
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 1A
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/YH2a2Y7xFeU6JIuiE9p60UNQDXw.roa
Signing time: Mon 01 Nov 2021 01:28:49 +0000
ROA not before: Mon 01 Nov 2021 01:28:49 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 9621
IP address blocks: 157.120.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Nov 1 01:28:49 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=607D9AD98EF115E53A248BA213DA7AD143500D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:f0:8c:d3:74:a0:ae:9a:79:c6:45:ec:ec:
7b:25:37:82:ef:38:34:7d:0b:ac:38:ad:e4:5f:04:
d7:7e:87:a8:e2:68:a5:ea:1c:02:d3:44:88:d8:aa:
c9:82:38:e2:41:24:4d:2f:35:f4:e8:c2:f1:52:be:
95:54:28:ca:a7:04:70:f0:1b:e2:ea:08:a3:c6:04:
97:71:b5:d1:08:40:9c:cb:2b:25:87:32:53:f0:b4:
60:12:1e:b0:e1:76:2a:6e:53:95:6f:a3:2e:37:fc:
53:fd:d1:9f:46:1c:7d:57:12:e9:1b:30:a2:af:e1:
e8:ae:d4:a2:3f:a1:13:2b:92:54:1b:c3:05:69:b8:
7c:c0:9d:cc:92:0b:95:f5:2f:ee:75:d1:14:c6:c5:
f9:8c:ea:26:11:0a:35:99:df:09:4b:f2:36:2c:4f:
9f:05:85:f4:2d:84:76:5c:cd:44:f6:07:e6:05:73:
57:42:4d:85:68:89:3f:ab:8b:26:dd:31:cf:1a:8d:
07:49:44:5e:eb:52:2c:45:2b:ad:43:f7:1d:56:4a:
63:9a:53:2d:73:96:bf:8a:7f:dd:48:45:a5:94:38:
7e:82:20:b4:cd:b7:0c:48:d9:78:89:ed:11:fc:5a:
ed:bc:eb:31:ab:48:59:18:24:ef:52:76:61:2b:9d:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:9A:D9:8E:F1:15:E5:3A:24:8B:A2:13:DA:7A:D1:43:50:0D:7C
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/YH2a2Y7xFeU6JIuiE9p60UNQDXw.roa
sbgp-ipAddrBlock: critical
IPv4:
157.120.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:55:c7:14:21:c1:d2:9b:1a:26:f9:77:60:d8:b7:4b:e5:2b:
08:4b:0e:67:7f:3a:d3:cb:cc:06:f5:9c:3c:6a:8c:7a:f0:d9:
6c:df:c4:13:a8:15:4d:61:fd:f9:cf:35:50:e0:65:2c:38:68:
a8:df:5e:35:e7:9e:a9:89:82:07:42:8d:46:8e:bb:da:8d:c9:
2c:58:7e:6c:72:29:40:31:98:b0:64:8e:a9:8f:5e:1f:78:bc:
c7:0f:8a:2d:ab:7c:58:1c:5b:17:11:ca:fc:73:c4:58:0b:e8:
2e:ec:34:ee:f4:2b:c9:ce:eb:ec:66:b4:da:cb:2e:86:b1:f7:
6e:14:87:05:96:52:74:ae:1c:67:05:ae:7a:e5:26:7c:46:5f:
27:f3:fe:e8:0c:b6:a7:6c:ad:0e:0a:10:b6:b1:cc:8e:ba:51:
cc:9f:b9:fe:9a:5a:00:50:a3:bc:9c:0e:a7:74:bf:9a:fe:94:
8d:be:f2:77:c0:25:14:84:48:f4:26:18:73:d5:85:5a:50:ad:
40:0c:a1:c8:a7:17:57:40:9f:84:e9:33:4b:24:9f:56:9c:ec:
07:db:78:25:11:42:03:d9:29:29:08:1d:16:86:d3:86:d4:8e:
a7:76:5f:38:96:5f:d0:1e:5a:38:2f:00:4e:b6:80:b2:5f:c4:
ed:3f:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:14 2025 by rpki-client