Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/87LW1Zr702xQlelx3gB3dpu6THw.roa
File: 87LW1Zr702xQlelx3gB3dpu6THw.roa (raw, json)
Hash identifier: TJ36Apy95Pu1wy+P7l1Kw9KbXKPTVZZ2tNHe1ns/KS0=
Subject key identifier: F3:B2:D6:D5:9A:FB:D3:6C:50:95:E9:71:DE:00:77:76:9B:BA:4C:7C
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 02A2
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/87LW1Zr702xQlelx3gB3dpu6THw.roa
Signing time: Mon 20 Feb 2023 08:05:30 +0000
ROA not before: Mon 20 Feb 2023 08:05:30 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.148/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:05:30 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=F3B2D6D59AFBD36C5095E971DE0077769BBA4C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:f6:8b:b9:ea:19:e9:7e:32:c1:ff:5f:ba:
91:f2:8b:51:4a:79:1a:b1:c2:58:f6:b4:cf:9e:3b:
aa:96:bd:e0:71:50:01:85:87:b9:2f:2d:ec:60:96:
3e:6f:df:21:ca:b4:ce:3d:75:27:a9:22:b7:83:98:
03:7e:65:32:42:f1:f1:9f:2d:1f:9d:5e:e9:99:e0:
85:46:4d:34:44:34:9c:91:9b:1d:71:14:83:c3:0b:
b8:f8:15:a2:cf:04:27:8c:62:60:43:b7:72:df:6d:
69:59:04:7e:04:6a:2b:be:3e:31:3b:68:49:28:11:
a0:7a:60:1a:b8:d6:ec:1f:e9:cb:a3:38:08:56:57:
ac:c1:b1:18:07:52:26:ff:1f:dc:6a:0f:c6:7d:e9:
87:1e:22:36:3f:57:69:e8:e3:df:b0:ca:ab:7a:47:
a8:9f:13:6f:28:b3:5f:66:8b:22:c2:33:28:df:92:
3b:43:fc:2e:03:d9:1b:48:69:11:7a:92:da:de:49:
b9:65:5f:c4:a7:ce:cf:76:b0:20:af:6f:71:96:19:
5a:2e:42:0a:4e:49:a1:1c:4a:ff:d5:ef:1b:89:f1:
a8:9c:b6:ba:a2:c0:8d:e5:88:b8:f9:12:eb:6a:7c:
7a:8d:ea:79:f9:7c:b8:c8:9a:99:2d:7e:8a:fa:d9:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:D6:D5:9A:FB:D3:6C:50:95:E9:71:DE:00:77:76:9B:BA:4C:7C
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/87LW1Zr702xQlelx3gB3dpu6THw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.148/32
Signature Algorithm: sha256WithRSAEncryption
1d:c8:3c:8a:ea:0f:07:d3:b6:c9:cc:21:07:45:ae:d2:ee:ce:
62:d1:84:60:4b:94:30:4f:68:cf:69:a1:3d:95:b1:20:fa:4f:
9f:39:78:f0:38:d3:5d:6c:84:b6:8e:07:6b:04:a8:90:f5:ab:
1e:d9:69:5d:ad:7d:ce:55:71:b6:b2:45:39:fc:6e:84:30:00:
0a:fd:95:d0:fd:9a:c4:5a:67:53:22:2d:0f:cc:f0:0d:85:8a:
2d:2e:90:81:51:54:1a:b2:a1:95:34:5f:16:cb:e4:f9:03:0a:
03:5e:58:46:74:b7:fd:bc:5a:c5:77:9c:2f:6c:c6:ae:5e:b1:
5a:22:d7:8a:dd:20:4c:66:78:fd:46:5d:a4:ab:5b:f2:f6:17:
23:43:a5:a2:af:c4:7f:f4:fb:82:8e:50:66:1e:4f:84:1f:aa:
d6:d0:1a:d5:15:16:d4:3e:81:92:5b:3c:2d:7b:43:7c:e1:71:
5b:c9:f0:b7:f4:0e:04:7d:ea:1a:5d:20:80:b3:41:84:93:cb:
fe:d8:d5:1c:03:2d:1b:e8:71:90:04:e6:58:47:9b:0d:f7:8f:
9f:f8:6a:38:5d:92:47:9f:1b:f2:d5:0f:00:44:09:e3:ef:a1:
a7:ad:8f:94:e1:90:a3:f6:3b:50:da:d1:51:68:17:76:be:8d:
f6:ff:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:24 2025 by rpki-client