Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YNWPFC4yaL97l8ptKsvm-hfTBwU.roa
File: YNWPFC4yaL97l8ptKsvm-hfTBwU.roa (raw, json)
Hash identifier: VWjdkpdcjNRKR2CCLY0GBPI2JBc8xv9GRHGj1V6oAYE=
Subject key identifier: 60:D5:8F:14:2E:32:68:BF:7B:97:CA:6D:2A:CB:E6:FA:17:D3:07:05
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 020F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YNWPFC4yaL97l8ptKsvm-hfTBwU.roa
Signing time: Mon 01 May 2023 01:37:45 +0000
ROA not before: Mon 01 May 2023 01:37:45 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 118.152.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:37:45 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=60D58F142E3268BF7B97CA6D2ACBE6FA17D30705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:25:5c:dd:98:69:a7:30:11:ec:6f:71:f5:
7b:44:e9:cd:93:58:24:2b:41:9e:dc:f1:67:df:51:
c4:64:46:de:1e:8d:95:bd:4f:c4:51:cc:38:b3:75:
b3:41:1a:0f:a1:64:ec:a5:21:c0:9f:28:5a:2d:41:
1e:cd:52:88:0c:a9:ef:0d:79:c0:36:50:f9:70:fb:
6f:05:30:2e:d4:88:a0:a4:6f:74:42:d0:8a:b0:47:
05:c0:dc:d9:ed:cd:43:e1:bb:4c:3a:89:41:6c:81:
d0:87:49:ec:d2:5f:1f:aa:af:20:f9:be:c9:75:b8:
af:12:2f:86:29:55:02:69:41:b9:28:be:31:5f:34:
35:0e:10:fc:2a:a2:5c:72:36:1c:84:38:f0:eb:f0:
4b:37:56:83:2a:61:c0:25:bf:c4:80:47:49:96:90:
d0:0f:55:2f:60:84:7f:2e:47:05:9b:0d:ab:e3:71:
05:cf:79:5b:70:0d:a1:af:51:1b:9e:00:c3:de:1d:
f8:48:07:c9:15:7b:c0:f6:a2:2a:6c:fb:a3:42:9d:
00:f0:52:a0:d8:a1:df:b1:52:ad:f0:62:56:28:91:
14:7a:3a:0a:6a:0e:c9:a8:1d:3e:98:55:a2:e9:fb:
f6:e8:24:54:3b:c6:9a:a7:24:8e:38:a9:ea:71:47:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:8F:14:2E:32:68:BF:7B:97:CA:6D:2A:CB:E6:FA:17:D3:07:05
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YNWPFC4yaL97l8ptKsvm-hfTBwU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:18:34:21:5d:bc:73:88:b3:58:83:49:43:33:4c:a4:4e:df:
60:2a:20:63:c3:16:b5:7b:24:25:7c:4c:f2:f5:d4:11:27:48:
3b:73:d1:0b:97:ec:59:d7:c5:cf:29:30:96:76:86:60:44:82:
29:62:e7:1f:27:f0:ec:c6:d7:a1:83:00:fb:37:71:f8:03:cd:
90:cf:b2:49:54:19:0e:68:c3:07:07:24:23:ed:66:50:50:ab:
3f:00:34:f2:de:11:21:b8:98:43:ca:ca:56:04:08:ef:2b:ff:
4f:0e:39:6d:5b:97:f8:b3:22:ae:8b:e1:ce:06:d6:af:f6:78:
fb:94:95:47:d7:ee:59:d0:a6:2e:0e:5f:a7:64:15:11:8a:2f:
8c:32:26:81:f9:e2:10:0e:e3:7d:49:b2:16:20:e7:bf:82:86:
25:b4:4d:09:f4:8c:4f:84:4c:66:e6:29:19:cc:d8:c9:11:b6:
9d:2b:bf:bb:46:08:5e:09:fe:df:2b:35:1b:6d:41:47:33:6c:
5b:09:bb:b4:0c:f7:f5:0f:50:f0:b7:b5:a0:f1:21:11:86:f7:
73:f0:72:d0:34:d0:85:0d:0d:ce:51:30:fc:e1:84:1a:62:32:
00:e9:3a:9f:f7:30:08:4a:37:76:49:8a:ab:89:6f:32:cd:80:
a2:d6:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:11:33 2025 by rpki-client