Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
File: B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa (raw, json)
Hash identifier: a9rnnk7ynpuRtGrZ9FL1eswh+wO4FHelX/cS8ENzpdw=
Subject key identifier: 07:46:B4:99:61:CE:08:A3:20:76:19:73:6E:05:9C:AB:3C:3B:49:8C
Certificate issuer: /CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Certificate serial: 43
Authority key identifier: FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
Signing time: Thu 29 Feb 2024 01:29:12 +0000
ROA not before: Thu 29 Feb 2024 01:29:12 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 18125
IP address blocks: 150.26.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Validity
Not Before: Feb 29 01:29:12 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=0746B49961CE08A3207619736E059CAB3C3B498C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:8a:17:7a:ba:8a:47:db:2d:27:03:cc:10:
b4:c8:78:24:f8:1f:b3:ee:70:53:f7:6d:ca:fb:b4:
09:9c:79:90:2b:9c:68:e1:7d:3f:4f:87:d6:5b:2a:
d7:0b:f9:7d:ce:72:4b:d4:fb:b7:a2:cf:bc:fd:95:
0d:44:ef:41:5f:63:2e:e1:d1:2d:d4:37:ef:1d:5c:
ac:e8:25:fa:89:9c:8a:ca:86:df:7a:e2:d4:82:d3:
f2:24:8e:b0:41:d9:1b:3d:25:8c:69:e3:b3:05:3b:
07:60:a7:25:c7:fa:9d:ec:97:e6:e7:7b:31:76:33:
5a:1a:f6:d7:14:62:9d:b2:c2:b5:31:69:86:19:db:
00:cc:0a:d7:59:ae:02:27:3c:65:33:d0:ea:b4:e4:
e4:10:14:f5:01:1c:07:b7:23:28:de:a3:83:22:5b:
05:de:73:7f:ea:f3:a1:92:fa:4e:04:87:d0:39:2a:
b8:df:a2:81:29:2e:ac:c5:f1:ba:4d:ff:e1:a2:39:
6c:c1:c1:ec:6c:9f:18:bc:0b:65:de:4f:b2:aa:3a:
d9:b2:df:70:19:3f:a1:70:c7:ed:fb:e4:98:7c:02:
eb:60:69:e6:41:0b:9f:35:b4:6b:fb:0e:fe:3a:9a:
be:0c:bf:42:a8:ed:ac:0d:79:5e:8b:2d:a0:52:4e:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:B4:99:61:CE:08:A3:20:76:19:73:6E:05:9C:AB:3C:3B:49:8C
X509v3 Authority Key Identifier:
keyid:FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/B0a0mWHOCKMgdhlzbgWcqzw7SYw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:ef:61:9f:12:a7:5c:81:79:bf:c2:b5:b1:b2:3c:be:43:62:
be:55:61:76:f3:82:be:b3:ab:e3:c7:a4:23:e7:54:ea:04:7e:
8f:81:e1:3b:3e:f3:31:69:af:91:05:33:dc:39:3d:21:91:8f:
a9:c2:90:8a:c8:cd:e1:05:f1:5e:50:64:f9:c0:bc:36:73:a1:
99:ee:7f:40:18:6e:04:91:36:08:03:a4:82:94:28:a8:6b:3c:
0f:e7:bb:29:40:e8:4f:15:8a:b3:44:d6:99:b4:0a:4a:da:09:
70:ba:07:8c:54:f5:42:85:47:d4:26:80:bf:82:04:36:c4:75:
88:f7:9d:45:17:80:41:fe:6f:aa:17:11:d5:aa:06:fa:3c:18:
39:ca:51:a2:66:c2:49:5d:34:fd:cf:b4:0f:c0:45:48:ea:c9:
aa:32:60:e7:24:0a:ce:fe:3f:5f:14:47:04:7f:fc:84:21:85:
2a:8e:81:9b:51:1d:e9:49:49:31:72:e4:58:66:26:83:a2:06:
dd:d0:7a:13:91:53:6f:b7:bc:ee:ef:36:0a:1a:fc:d0:43:29:
21:23:ca:34:3c:d7:79:fb:7e:3c:17:ea:30:fa:62:3a:bd:15:
cd:25:5a:b1:be:49:de:a0:0b:1e:0c:00:9b:8b:53:ab:de:77:
86:27:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:10 2025 by rpki-client