Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa
File: F7KZMgfXopkSWXs7O4KiP4awxnc.roa (raw, json)
Hash identifier: 4+32q7gVud4vQUsKyIkLZyWP49zUIBNsDmmXsEhV/bw=
Subject key identifier: 17:B2:99:32:07:D7:A2:99:12:59:7B:3B:3B:82:A2:3F:86:B0:C6:77
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 028E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa
Signing time: Thu 29 Feb 2024 01:31:32 +0000
ROA not before: Thu 29 Feb 2024 01:31:32 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.132.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Feb 29 01:31:32 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=17B2993207D7A29912597B3B3B82A23F86B0C677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:5a:fb:58:03:0e:65:47:0a:5b:05:1e:fe:
46:08:44:72:a4:cd:e1:60:6e:f5:c0:08:3d:1d:13:
49:e6:f4:a3:0b:f4:f9:0b:08:2f:2b:b1:4d:11:ce:
c6:c1:46:90:1a:6c:58:2b:d9:6f:42:55:10:9e:1d:
03:27:cd:06:2b:a0:56:4f:00:3c:37:65:2e:b7:45:
88:85:95:57:3f:9d:03:30:bd:db:1e:95:cf:40:ab:
32:f3:ed:41:62:e6:c2:bc:36:08:ae:22:b5:4f:71:
9e:5d:b9:82:48:61:7d:e0:c6:4b:f6:6f:86:91:df:
62:93:86:62:0d:27:e8:dc:3f:3a:4c:ea:c1:2c:61:
01:0e:9e:8a:1c:c1:78:95:95:df:47:ad:71:57:91:
a7:c3:ce:da:63:22:50:66:f2:05:0c:57:df:bf:cc:
a0:a1:14:c3:d1:d4:44:b5:d4:58:ca:52:c3:21:70:
36:7a:70:41:97:ee:ca:25:47:4f:c6:be:2c:9f:a7:
bc:84:4c:ee:97:08:c3:ca:d5:12:6d:85:93:cb:01:
ee:10:0a:44:0d:ec:e1:35:68:63:ec:76:92:ee:ea:
f1:50:8b:64:65:c3:de:f8:c9:ac:85:c3:74:0f:ba:
82:48:fc:8d:55:f7:eb:c0:f8:09:eb:1f:fe:3c:8d:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:99:32:07:D7:A2:99:12:59:7B:3B:3B:82:A2:3F:86:B0:C6:77
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:92:4a:25:00:fe:cf:e6:43:10:08:6c:e1:5a:7b:b3:67:06:
5b:7a:0c:35:2b:a9:cb:82:b3:e2:9c:f1:f7:fd:d6:8a:62:b7:
05:fd:d6:67:76:c0:c1:f0:9b:30:0f:85:a2:28:63:57:78:14:
7b:5d:ef:e7:99:78:f8:3c:10:13:79:4f:e4:19:53:aa:0c:e8:
f8:13:3c:6a:b3:23:18:47:57:ff:be:22:e0:7d:28:fe:43:05:
1f:b2:cd:fc:8e:56:4c:13:36:0b:0d:14:4c:54:88:77:6a:e4:
68:cf:b6:48:93:58:32:90:32:55:94:d7:45:2b:52:ef:4a:c7:
49:16:3d:48:47:8c:bc:cb:f0:f8:bc:50:9a:e1:1f:51:2e:77:
aa:02:49:00:7f:e5:8b:65:0b:2e:b0:75:ef:8e:b8:67:57:29:
dc:aa:02:69:b8:10:97:4a:dc:24:47:6d:a1:dd:e6:47:24:93:
1a:47:af:c5:ba:68:ca:36:3a:d2:a2:a5:af:4e:dc:49:69:84:
71:a1:1c:2b:b2:1d:c3:b6:28:77:47:de:50:35:d5:c1:82:cf:
72:23:88:9a:a5:4e:86:cf:3f:e5:73:7a:98:30:de:2d:fc:51:
8e:3e:25:b6:52:54:e7:00:a5:8a:9f:55:e7:e3:91:3a:21:2b:
b0:13:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:35 2025 by rpki-client