Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
File: D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa (raw, json)
Hash identifier: EsCRgHyplf9YdOFBNWbGWQIbFa9Ru7UnUJoypJzGgnc=
Subject key identifier: 0F:DC:4F:33:81:DB:21:98:7B:2B:C2:79:69:93:88:F6:7D:47:6D:EC
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02F1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
Signing time: Sun 31 Mar 2024 01:35:51 +0000
ROA not before: Sun 31 Mar 2024 01:35:51 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 210.198.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:35:51 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=0FDC4F3381DB21987B2BC279699388F67D476DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:01:b2:d6:e5:20:da:f8:be:aa:0f:1d:9d:
d1:4d:18:fb:82:4e:e2:b7:93:37:b4:5e:9e:d4:e2:
a0:74:86:3b:1a:0e:a7:25:b0:f3:79:72:f4:c3:76:
88:81:2f:8f:27:ba:0a:e1:cc:31:ae:03:f5:6f:f2:
f7:23:5e:29:7b:85:28:15:ff:b4:26:8b:1e:e0:31:
f3:cd:4f:3c:01:d6:5c:c4:16:f1:45:65:23:40:75:
28:9e:8c:19:41:7f:d6:80:50:64:65:7a:e5:25:b7:
88:44:32:3f:89:14:92:6a:df:08:1f:31:f5:97:c1:
37:94:0d:94:d1:89:60:16:96:61:5e:65:79:73:72:
c1:9c:98:df:62:cc:e9:04:b3:e8:43:f2:f7:2e:9b:
17:c4:70:b8:e2:39:e1:20:d9:cc:08:56:75:1e:31:
c9:c3:a1:14:79:1b:6c:52:51:ed:81:b9:5c:00:92:
ac:c9:8d:c8:a3:0a:79:59:47:89:3b:40:19:28:ab:
86:cd:57:09:3f:17:b7:fa:78:df:07:4a:c2:08:ae:
e4:74:c3:73:02:dc:0b:9d:bc:8a:8c:7f:e7:e7:d7:
f6:64:d1:a9:16:7e:be:49:47:e6:5a:90:08:49:24:
e3:59:d9:6a:79:1b:6b:ef:3a:29:9a:ec:bd:8a:f6:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:4F:33:81:DB:21:98:7B:2B:C2:79:69:93:88:F6:7D:47:6D:EC
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.198.128.0/17
Signature Algorithm: sha256WithRSAEncryption
26:35:ef:5b:ae:08:92:34:62:da:09:86:91:25:8a:50:05:9a:
51:c8:27:69:6f:25:3a:4a:e4:fc:63:14:a7:bc:c4:5a:06:f8:
8d:54:ab:f9:1b:bd:9d:85:1d:47:ce:07:73:64:f0:d8:56:eb:
fb:87:05:89:0d:cd:dc:3d:39:24:e5:e3:5b:cc:f5:01:a0:06:
ee:08:d0:9f:c9:14:cf:58:73:c8:4a:a5:b3:38:f1:41:a7:55:
21:4c:5d:91:4a:ec:19:e7:92:19:50:27:75:cc:66:e3:42:86:
89:7d:bb:30:08:08:2f:7b:95:21:94:37:47:fa:69:b0:70:13:
86:36:6c:9b:94:13:77:9c:ed:ef:a1:13:48:72:ed:35:cf:75:
70:4e:16:60:0a:8f:03:a7:78:46:54:7c:08:f3:1d:fc:8c:e7:
f4:38:02:b8:9d:92:6c:35:51:4e:6a:36:28:11:29:96:9d:34:
cb:df:b3:3f:3d:a8:18:20:d4:7c:31:80:b8:be:30:b3:99:c0:
c5:1f:da:06:c1:77:0d:5d:d7:92:7e:5e:2d:7b:b5:cb:3a:49:
b9:e4:12:5b:fb:c0:ed:b5:0a:d3:ea:de:0b:7e:1b:37:df:34:
4d:b6:ee:d7:2b:da:00:8f:a5:e9:b1:15:53:98:98:c1:bb:e2:
bc:10:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:51 2025 by rpki-client