Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/B9J8sT4xjCS8BuQL5YbSCWuUr3I.roa
File: B9J8sT4xjCS8BuQL5YbSCWuUr3I.roa (raw, json)
Hash identifier: 6Z5ScJTF0gAji3yOqgDSYVNvNhkdisUQIeJzs19z52w=
Subject key identifier: 07:D2:7C:B1:3E:31:8C:24:BC:06:E4:0B:E5:86:D2:09:6B:94:AF:72
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 5A
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/B9J8sT4xjCS8BuQL5YbSCWuUr3I.roa
Signing time: Thu 22 Jun 2023 00:35:01 +0000
ROA not before: Thu 22 Jun 2023 00:35:01 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 203.160.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:35:01 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=07D27CB13E318C24BC06E40BE586D2096B94AF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:09:1c:cf:29:8a:40:75:74:91:64:00:f7:
a9:39:91:f5:b6:dc:cc:22:10:9c:cf:9c:dc:38:31:
ce:0b:5e:52:86:be:99:79:a6:fa:53:2d:e5:8d:4b:
c7:71:8b:c7:14:80:3b:95:d3:c2:08:16:4f:39:5b:
82:f9:2d:9b:8a:62:52:8c:75:8d:de:d9:c3:96:e9:
56:9f:ec:4c:86:81:dc:88:dd:1c:9c:f4:90:3d:ad:
b8:ec:b8:9c:d7:c2:c0:2c:91:76:88:1c:33:39:9e:
1c:f9:af:62:c1:12:fc:1c:57:a5:a5:1f:81:a5:c1:
03:72:5b:ef:83:82:c1:5e:9b:44:00:05:ef:3c:73:
12:c9:b7:cc:93:cc:74:42:e5:27:74:6d:c1:b6:9a:
fb:a8:2d:5e:4e:fe:99:88:d3:d0:21:5d:13:8b:da:
78:0b:48:a7:51:f1:56:60:cd:9a:7c:32:bd:9d:41:
96:ad:cd:22:37:21:04:cb:47:c3:91:9a:ea:e0:04:
9f:6f:8c:c5:1c:c2:f6:6d:e4:c1:67:3e:45:d6:46:
bd:cf:f5:23:6c:f7:de:db:f6:7e:6a:e0:6e:a2:35:
f1:cb:d2:cd:e2:cc:45:ca:45:9e:82:f1:87:fe:17:
08:cd:2d:b5:e8:28:6a:ba:bd:0a:68:75:2b:b2:41:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:7C:B1:3E:31:8C:24:BC:06:E4:0B:E5:86:D2:09:6B:94:AF:72
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/B9J8sT4xjCS8BuQL5YbSCWuUr3I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:cf:54:6e:67:1d:5b:29:ee:4d:53:06:89:6f:c3:8a:cb:
73:74:35:19:c6:be:0f:74:09:e8:ab:ac:ae:27:6f:b2:e8:a7:
90:77:a7:93:41:92:e0:ce:84:ff:84:b4:2b:45:fa:91:42:ae:
a3:6b:e6:3f:69:94:a8:46:be:9a:03:58:b4:54:dc:5e:07:c8:
8d:0f:0e:d7:12:f0:73:d4:51:da:15:d0:78:e9:da:8d:e2:5d:
5f:cd:b0:61:62:2c:fc:2e:4e:37:bc:2b:00:db:fc:21:33:21:
69:55:d1:87:76:de:1d:a6:21:03:18:a4:a5:c7:2d:30:c5:3e:
ad:88:3a:39:ed:dc:6d:54:5c:81:fd:f2:20:e0:c1:c4:0a:20:
8d:df:3c:2a:f1:81:ee:6a:5a:ed:a7:6a:3c:a7:6f:04:a7:85:
2a:ad:cc:ad:ab:30:86:42:64:4e:f7:64:47:09:be:cc:0d:f4:
79:2d:74:40:2e:84:cf:d1:33:23:d2:d9:52:6c:71:b6:56:52:
60:f5:13:c3:d1:3a:d2:4c:3f:88:ce:29:69:a6:bf:17:31:6e:
13:a5:de:86:a4:c3:8f:54:ff:83:e4:8a:24:ee:37:e5:f4:67:
44:24:7c:a8:34:40:84:28:33:67:d7:a6:b4:3e:3d:2f:57:d6:
ee:d8:9e:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:28:20 2025 by rpki-client