Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
File: Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa (raw, json)
Hash identifier: 1S96c2TRvJTh0gzVTO8B2TiM634dHyNLLy9k6zWjm0E=
Subject key identifier: 5E:FA:FC:05:72:CA:5F:5D:16:0D:6C:6F:6F:90:AF:39:A1:CC:B4:6B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02AA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
Signing time: Sun 31 Mar 2024 01:29:44 +0000
ROA not before: Sun 31 Mar 2024 01:29:44 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 27.94.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:29:44 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=5EFAFC0572CA5F5D160D6C6F6F90AF39A1CCB46B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:dd:71:41:0d:4b:33:1d:f7:8d:62:60:a2:
1d:42:22:43:b5:a0:15:07:26:93:d2:ee:95:ab:ae:
66:ba:b4:20:7a:0b:d1:0f:c5:42:91:0b:b6:5a:59:
ec:cb:ae:ef:91:16:7d:7d:1e:25:bc:24:1a:bc:25:
b1:18:24:ad:a3:d3:41:de:3a:02:b3:20:7c:a8:b6:
bc:f5:62:82:da:17:9d:64:de:aa:10:e1:22:73:09:
34:5b:fa:55:37:a9:22:ea:1b:3a:dc:74:9c:6c:5f:
c5:ea:7c:c6:29:f8:89:22:d3:cc:52:f5:f3:4c:45:
3b:a5:b0:3a:2a:be:7a:17:8f:d8:68:01:4b:a4:64:
58:12:2e:64:9c:55:b4:ce:a2:e6:c9:14:62:36:e2:
6c:a3:8f:b2:ce:cd:33:aa:22:7f:84:1d:da:26:75:
9d:79:d2:02:9b:66:1f:c3:75:2a:21:54:37:e1:e6:
3e:f5:d5:a4:77:6c:b1:49:24:0f:ec:2f:07:af:9f:
97:0c:62:71:55:89:f6:02:7d:7c:95:78:c5:bd:48:
a5:3d:c7:dd:72:6f:ee:f1:8b:35:13:bd:9d:e0:bf:
86:43:3b:13:ca:fd:2b:3a:ac:e9:42:49:92:df:5e:
c9:c8:bb:1d:dd:c5:e4:a1:3c:45:af:64:de:19:c0:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:FC:05:72:CA:5F:5D:16:0D:6C:6F:6F:90:AF:39:A1:CC:B4:6B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:dc:a9:e8:7e:9f:95:9b:4b:8b:49:df:5d:8f:29:99:49:72:
f4:71:a5:b9:3a:42:49:b1:da:47:c5:80:ef:16:2b:95:aa:25:
6b:95:ee:50:e9:f7:01:17:e9:10:eb:2a:ad:9b:20:51:2b:a1:
ab:7e:d7:8e:b7:3f:67:c6:93:10:56:64:12:70:73:4b:97:48:
fe:9d:55:97:ba:97:f6:67:91:85:65:fc:b2:2b:11:83:ee:a7:
a9:f9:8f:b0:5d:05:36:34:95:e1:3d:97:35:a0:57:7a:74:c3:
7c:ad:f4:51:a7:c8:9a:b7:b2:31:3f:70:70:b9:39:f1:ba:30:
94:12:1a:87:53:34:90:71:26:2c:6a:0c:30:79:6d:ad:78:ea:
ac:c7:0b:cb:1a:9e:63:e1:64:67:ad:d5:ae:bc:44:7a:9f:18:
4b:ae:8d:ff:0c:8f:19:cf:07:23:a3:f6:4e:ad:6d:00:44:4e:
73:ca:14:9b:af:af:38:8d:68:0e:ed:fa:85:27:68:ad:13:85:
cf:07:97:25:78:ad:04:96:b2:ac:f5:eb:b1:20:bd:09:9b:35:
39:47:10:3e:bd:4e:a3:13:9c:73:90:5d:e9:23:b0:e7:e1:61:
18:da:c7:ce:ca:0d:f5:87:92:39:f5:4b:da:22:3c:2b:a4:98:
e2:3a:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:48 2025 by rpki-client