Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oBN934X-3Rcehlg39OQiFtIbzT0.roa
File: oBN934X-3Rcehlg39OQiFtIbzT0.roa (raw, json)
Hash identifier: S9AeYybgZ+ktf63TpVnWv03V2S3d12qovzoQXx1dulg=
Subject key identifier: A0:13:7D:DF:85:FE:DD:17:1E:86:58:37:F4:E4:22:16:D2:1B:CD:3D
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01AE
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oBN934X-3Rcehlg39OQiFtIbzT0.roa
Signing time: Mon 20 Feb 2023 07:53:14 +0000
ROA not before: Mon 20 Feb 2023 07:53:14 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.92.49/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:53:14 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=A0137DDF85FEDD171E865837F4E42216D21BCD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:78:c1:13:ba:64:6c:3e:48:68:01:05:c8:
47:69:fc:ed:72:1c:ae:1f:03:9d:4c:8c:9e:d8:7e:
5a:2b:2c:d3:f8:3b:5e:48:ce:cf:b2:78:ec:eb:64:
1c:f0:0b:ec:70:6d:25:d6:bc:16:4a:c2:fe:f0:39:
48:83:78:2c:7e:5d:9a:4e:da:eb:db:6b:40:34:67:
6a:1d:40:46:0c:30:94:78:2a:a3:1b:03:95:cd:96:
2e:18:85:7b:45:2c:ac:3d:97:cd:79:54:62:88:b9:
ac:75:f8:21:0c:6b:41:81:ff:b8:d3:8b:fd:7a:01:
f5:67:b7:51:68:1d:2a:92:aa:2e:b0:f2:15:a7:e9:
87:b7:d1:6a:72:78:4e:e0:a3:4a:0a:e7:82:03:df:
8a:d6:b2:a7:75:c9:16:9d:3e:db:df:56:62:2c:b2:
a7:2d:37:f9:1e:e8:1d:05:19:88:fc:ba:8f:f8:56:
15:02:c8:0e:c1:22:73:d5:a4:b7:b2:c6:ce:8f:69:
f4:55:c6:3a:09:76:f5:16:d9:28:78:07:de:b0:0f:
77:81:fc:a6:8d:5e:70:e0:62:81:28:3c:51:60:d3:
7a:2f:06:c3:88:f8:df:34:92:ea:73:8a:aa:15:ea:
38:ba:ba:ca:5a:0e:e5:25:d6:10:c9:fc:18:b0:99:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:13:7D:DF:85:FE:DD:17:1E:86:58:37:F4:E4:22:16:D2:1B:CD:3D
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oBN934X-3Rcehlg39OQiFtIbzT0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.92.49/32
Signature Algorithm: sha256WithRSAEncryption
0b:5a:fc:a0:01:cc:2b:75:79:b0:1b:bb:73:e9:ee:40:c2:2f:
bd:32:bd:38:b0:8d:e6:d1:20:a6:95:ce:51:68:82:4f:a8:c3:
33:25:44:8b:73:cd:77:1e:be:53:05:5b:b2:45:2e:69:3c:10:
80:a0:36:92:8a:ec:c7:e6:cc:de:3b:dc:cf:bc:f3:ec:37:23:
38:52:01:d9:b9:d1:e6:61:79:aa:07:ce:b3:0e:c1:8e:36:88:
bf:c6:15:20:54:fd:51:fb:e5:15:f0:76:77:b1:7e:af:01:68:
66:c3:6e:03:27:71:a2:0d:0b:0f:ad:9c:f2:5c:72:2b:9d:df:
4d:48:f1:98:46:49:72:83:b3:da:22:23:85:39:4b:2a:06:65:
a8:03:33:5d:1e:69:7c:7f:cc:a3:28:9a:5e:a6:ba:b7:b9:cf:
20:6b:f3:c5:53:e6:ea:6c:fc:c9:fc:c8:8b:d7:01:66:44:64:
ec:09:30:a3:b5:c6:f4:a5:b9:8b:80:69:6e:14:43:7c:5a:9b:
ec:ce:ae:cf:f2:12:e3:0c:0e:88:34:d2:b8:1c:55:cd:19:a6:
c8:8f:69:d9:c7:50:2d:a2:11:b2:d8:73:61:42:8b:22:38:f1:
4a:7c:47:a1:ad:1a:a6:2b:29:bb:fc:72:d8:bc:d8:d1:16:81:
13:d9:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:44 2025 by rpki-client