Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa
File: EcAvrc-BZsk2TIILNmqsPH-ISFc.roa (raw, json)
Hash identifier: DWMQoxz1fxhYOl+nmyocISxPC0+zqSYWslwuMO1K06c=
Subject key identifier: 11:C0:2F:AD:CF:81:66:C9:36:4C:82:0B:36:6A:AC:3C:7F:88:48:57
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02D3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa
Signing time: Sun 31 Mar 2024 01:33:27 +0000
ROA not before: Sun 31 Mar 2024 01:33:27 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 125.29.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:33:27 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=11C02FADCF8166C9364C820B366AAC3C7F884857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:75:23:b3:72:ef:cb:73:34:14:a5:37:a7:
22:7f:72:a8:75:b3:4e:e8:3a:ca:eb:58:cf:f4:4a:
80:a0:6c:c6:32:13:10:84:42:c0:cc:5e:40:96:f6:
9f:4d:e8:33:bf:c3:e2:14:84:db:19:ba:d5:8a:98:
bd:65:aa:c9:a2:cd:1d:91:66:3d:6b:e5:a4:6e:8c:
27:4f:1b:94:b6:c3:58:92:6e:51:66:1d:d7:4a:77:
23:fc:ef:2e:f4:32:08:ac:9a:e9:85:7e:d1:00:61:
2c:bb:72:19:6d:17:02:a7:87:03:ee:d7:23:d9:db:
53:05:5a:1a:43:d1:91:b3:d2:49:2d:8a:80:d1:0e:
55:ea:f1:51:8c:0d:76:d6:18:3e:99:3e:91:19:61:
68:fe:7d:59:7a:24:ee:0b:19:d0:33:76:24:b4:20:
f4:68:78:af:a0:29:36:2c:46:40:03:a2:c4:8d:ab:
20:0b:9c:83:9a:58:d2:3a:1a:4a:96:62:df:92:98:
c8:c0:15:9b:c9:f8:9e:40:60:1b:45:15:7d:63:de:
3a:35:f1:9e:62:a9:bb:72:cf:f8:b4:4d:8c:01:16:
d0:82:e0:84:53:c7:28:cc:a9:83:a6:d2:e7:d6:86:
c2:8e:a6:97:c1:c9:16:df:94:3d:7a:09:45:6b:8b:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:2F:AD:CF:81:66:C9:36:4C:82:0B:36:6A:AC:3C:7F:88:48:57
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.29.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:6a:94:a7:0e:86:9a:26:28:4b:b1:44:41:be:a4:c2:e9:20:
ec:9e:93:a8:45:13:5b:61:6d:de:69:b7:8e:ad:04:dd:16:43:
1c:2e:c3:8d:f0:f0:81:4c:4c:a8:c4:c3:8c:9f:4e:5d:9f:f7:
e4:a9:1e:81:c8:39:2d:9a:6c:da:2c:89:a3:b1:5e:a4:67:7c:
72:22:61:40:80:fc:1d:3c:40:3d:78:06:35:81:2d:08:14:e0:
9b:02:5a:61:47:ed:48:09:38:a1:48:92:23:3e:d1:e0:bb:37:
74:05:02:50:01:0f:d5:86:cc:fe:78:80:cb:f8:5e:92:5a:8f:
25:c4:dc:56:87:6d:b6:0f:e2:c2:c4:2a:f3:77:f7:7b:71:90:
a5:8e:16:6f:89:21:9a:5a:3a:6d:6a:c4:75:f2:74:af:4b:c4:
97:74:55:4a:10:82:ae:7a:80:c8:03:d7:41:a1:38:cf:56:42:
43:98:09:ba:0f:92:bd:7e:f1:3e:05:8d:ea:61:51:ef:69:a1:
4b:6c:63:33:59:07:ed:87:f7:a7:0f:b9:3a:28:8b:34:39:13:
df:93:94:25:78:d9:b9:b3:b6:b6:79:af:f0:c6:de:a1:d6:1e:
67:7b:97:2c:86:f3:4a:6a:ff:a8:e2:2e:0c:16:b6:87:8f:3d:
dd:c1:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:19 2025 by rpki-client