Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
File: 3WKkNC9pRmKLElI8AjtS5tjKv90.roa (raw, json)
Hash identifier: IR4Ma12TOK/MrtUo0QnE+1RdIqowk1wZceGAAkFLLIQ=
Subject key identifier: DD:62:A4:34:2F:69:46:62:8B:12:52:3C:02:3B:52:E6:D8:CA:BF:DD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0364
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
Signing time: Sun 31 Mar 2024 01:44:34 +0000
ROA not before: Sun 31 Mar 2024 01:44:34 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 106.186.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868 (0x364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:44:34 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=DD62A4342F6946628B12523C023B52E6D8CABFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:a3:98:ca:b4:26:70:13:4b:29:31:89:b3:
21:45:5d:a1:99:01:30:84:11:82:7a:7d:ef:b9:58:
0b:7b:61:09:6c:f5:69:cc:d7:5c:83:8f:3d:2a:cf:
94:f8:a7:8f:18:a8:e7:6a:a2:90:a7:84:46:67:9b:
c5:2f:14:ce:91:3f:3f:1b:c9:34:2d:0a:bd:18:f5:
ae:1d:7c:95:a3:8a:fd:4c:5c:fa:23:8d:e7:b8:6c:
45:aa:f5:39:ea:9d:27:17:c5:9c:8c:28:3d:65:ae:
80:65:2e:86:f5:45:b9:31:b7:34:1a:4a:71:37:fd:
4e:51:9d:8c:41:ad:7a:47:ef:27:d7:e9:23:00:9d:
d6:da:e0:57:a3:ec:f1:9f:9c:39:2a:aa:2b:2d:b9:
bc:3d:5b:ac:45:5e:a0:d7:13:8c:cf:87:6a:b3:2a:
b1:c6:e1:83:3d:32:01:50:91:df:6b:97:44:91:8a:
f5:00:b8:d7:fb:24:f5:90:bd:84:65:d9:4d:22:4f:
4a:5f:ac:31:f1:a8:15:3d:b5:7c:1d:97:56:aa:d7:
e8:51:7a:f4:a0:7f:54:4f:d3:5c:64:60:6a:f9:aa:
17:2f:10:4d:b5:ce:10:24:d3:6d:93:c5:f8:c7:4e:
bf:56:70:a0:a9:e9:37:b9:2d:9a:ca:60:51:76:fc:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:A4:34:2F:69:46:62:8B:12:52:3C:02:3B:52:E6:D8:CA:BF:DD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.186.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:03:11:c4:40:b3:94:ac:71:9b:cd:bc:ae:d3:0f:0d:b6:91:
a3:c8:69:7d:b4:8d:53:60:84:04:fb:58:13:9f:96:d2:eb:0b:
8e:a2:71:4f:b3:c9:d0:80:43:df:78:ba:59:2b:84:7d:b3:b2:
df:ba:fd:b3:c0:49:7f:1d:ae:54:79:50:6c:ac:6b:6a:e4:68:
77:7f:db:96:57:ed:32:d5:76:94:79:e2:97:1a:69:e0:7f:94:
5b:48:76:b4:75:f8:dd:96:b2:e2:bd:61:b2:83:62:69:37:7f:
89:7e:3f:ac:60:9b:ca:df:55:e8:09:0b:78:9c:14:bb:c9:6c:
37:41:d5:73:a1:38:5a:b7:7e:60:a3:5f:49:43:1d:f3:fe:f3:
87:78:45:fc:47:df:b5:08:a7:5a:e7:fd:82:0c:dc:19:00:88:
9c:3a:31:db:02:06:df:83:2e:e7:c8:87:29:66:31:7f:6c:f0:
74:28:96:62:e7:95:99:c5:ff:6e:cb:00:8d:ef:15:09:fc:8d:
b9:5c:74:66:30:d4:14:55:08:c1:99:cf:01:27:d3:91:55:fc:
d4:d3:18:4e:e2:17:60:e7:ab:bb:78:0e:06:87:08:ac:de:15:
1a:7d:d0:d2:0c:77:e7:9a:c8:6a:27:46:7f:7b:b3:26:d2:6b:
62:b5:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:38 2025 by rpki-client