Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
File: Buet1Sh1cSna3s5ab_QrZjm1IsM.roa (raw, json)
Hash identifier: Pv8Hpa1xte7L57Vtm8Hq1eGQPDd+fxPM32wcz8vF5vM=
Subject key identifier: 06:E7:AD:D5:28:75:71:29:DA:DE:CE:5A:6F:F4:2B:66:39:B5:22:C3
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01C9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
Signing time: Wed 01 Nov 2023 01:31:14 +0000
ROA not before: Wed 01 Nov 2023 01:31:14 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 112.78.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:14 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=06E7ADD528757129DADECE5A6FF42B6639B522C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:19:89:e6:a4:2e:62:f8:55:a5:9c:e3:4f:
b9:c8:e8:7a:f8:fb:67:30:bd:e3:8d:4a:72:72:37:
47:64:d3:c6:d1:8f:ff:2d:dd:81:64:49:06:cb:92:
63:67:27:7e:13:7f:39:bb:a9:31:70:12:47:d7:45:
8d:eb:61:e7:12:bd:65:c8:c6:81:da:98:78:a1:b1:
3c:91:9b:3b:89:77:10:93:df:6a:c2:e5:eb:ba:30:
11:72:14:0d:72:ca:b3:4e:8c:06:b7:be:22:55:84:
ee:69:14:8f:82:08:fa:c4:29:51:be:71:f8:df:83:
bb:7a:c7:bd:89:c9:d4:b0:a5:6a:19:98:52:ec:52:
63:0d:91:52:79:7c:be:2e:fd:88:e9:f3:b6:d8:65:
d6:13:39:9e:e3:68:bd:61:35:60:ee:4b:bb:88:f3:
f4:10:27:dd:35:ba:a3:29:1b:41:67:62:ba:e8:1c:
98:32:9d:cc:b1:77:b9:56:8c:0b:e6:44:10:1f:b5:
cc:a8:e2:59:89:b9:20:28:82:0d:6c:9f:57:17:2a:
9c:45:76:83:3f:80:59:0e:f9:51:a1:b3:e8:91:ad:
4a:90:7a:49:ad:8d:54:9a:63:3c:36:a2:56:32:2d:
e5:67:eb:a8:22:92:95:f5:84:84:33:aa:b8:18:63:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:AD:D5:28:75:71:29:DA:DE:CE:5A:6F:F4:2B:66:39:B5:22:C3
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.216.0/22
Signature Algorithm: sha256WithRSAEncryption
86:fb:f6:ba:4a:09:4b:15:95:cc:b5:d3:be:2f:c7:6d:f6:fc:
1a:e5:75:71:ec:3e:fd:73:95:e0:dc:5e:40:19:4f:d5:a1:f5:
87:e0:37:63:04:f4:ba:57:33:75:1c:4e:e7:1c:0c:24:68:3d:
cc:51:9d:50:89:4e:0d:c3:87:34:f6:4e:5f:cf:28:13:5f:91:
f5:9d:d9:0a:3a:06:47:10:fa:9f:24:70:5b:bb:30:d7:6d:78:
2d:c0:f9:47:0f:5a:0f:5d:c7:2c:6a:3c:e9:d3:c3:04:c5:5a:
db:0e:ad:cf:f4:d5:1e:1e:8f:c5:e0:e3:36:33:d2:a0:e8:01:
78:1d:28:68:27:99:47:89:24:2a:60:ff:a7:7a:92:7a:1b:21:
31:a6:23:c4:ea:4d:47:e7:fe:86:f0:4b:d0:87:3a:ef:c2:8b:
9f:15:f1:24:c7:eb:f4:d2:98:a7:16:03:24:e2:f6:b9:31:33:
61:41:f1:d6:70:93:6b:45:cd:d0:2f:c5:ff:3d:11:46:8b:d2:
da:12:92:6e:31:bd:96:d5:fc:09:b3:bc:24:3d:25:dc:e6:02:
22:c7:12:76:1b:44:8a:0e:1f:5a:61:9a:7b:39:6f:2f:48:9b:
ef:da:52:59:6f:2c:87:7b:b6:97:b5:f8:c5:cb:84:b5:2b:f9:
85:f3:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:39 2025 by rpki-client