Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa
File: xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa (raw, json)
Hash identifier: DR0VUU8ux7/XPN3l/p80IEsH+Mxe8Odp9unnPiddIJc=
Subject key identifier: C5:D8:99:D4:D7:AE:4D:A5:60:F8:96:11:84:D8:F2:67:B2:BB:FD:FE
Certificate issuer: /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial: 0C
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa
Signing time: Tue 19 Mar 2024 15:38:10 +0000
ROA not before: Tue 19 Mar 2024 15:38:10 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 59098
IP address blocks: 103.149.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Validity
Not Before: Mar 19 15:38:10 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=C5D899D4D7AE4DA560F8961184D8F267B2BBFDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:2d:b8:b4:b9:f4:56:7c:2f:25:e1:3b:96:
f6:21:45:32:95:5c:52:5b:0f:66:fd:d1:a8:71:20:
62:9e:80:45:c1:c2:1a:29:65:84:7b:41:1d:b7:a3:
fe:f6:ce:34:e9:15:67:be:b0:ae:0d:09:b3:ba:21:
16:b2:f6:c5:4d:9e:a9:56:bb:c5:0f:42:67:29:73:
d7:2c:72:56:cb:2e:aa:61:e1:79:fe:73:d8:36:1f:
9b:c7:db:be:3b:ca:c3:8b:c4:68:35:fb:25:9e:83:
e5:c3:b8:1b:48:72:f2:a3:77:b7:30:46:54:be:10:
7c:5d:2a:94:dc:2c:e9:4c:16:e8:ca:0d:4f:8c:69:
2b:00:48:52:c9:08:5e:75:4b:98:68:26:b5:da:dd:
23:d9:32:bd:a6:9b:6b:0a:76:f8:b5:d3:93:ef:74:
d2:a7:39:4e:46:81:b9:3b:b5:3e:4d:44:27:92:cf:
d4:12:c0:e7:32:d7:82:29:8d:1b:e1:06:fd:a3:b1:
1d:d9:10:61:2c:2c:29:50:47:13:4b:30:98:a0:7c:
5d:5f:c0:48:c9:64:45:10:ff:1c:8d:ef:7e:e5:91:
c1:b2:5f:b5:a6:a0:0d:3c:13:97:28:ff:a7:96:88:
2f:04:05:fe:d0:0e:ba:cb:11:3c:de:82:3b:ab:81:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:99:D4:D7:AE:4D:A5:60:F8:96:11:84:D8:F2:67:B2:BB:FD:FE
X509v3 Authority Key Identifier:
keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/xdiZ1NeuTaVg-JYRhNjyZ7K7_f4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.4.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a9:d6:41:ac:45:84:0f:c3:22:2d:18:5b:ea:99:a2:a2:5b:
55:b1:07:52:96:22:c2:45:41:81:07:6f:58:13:79:65:dd:41:
b9:b8:92:53:dc:c1:6d:64:b1:33:ac:a7:3c:21:ac:63:68:bf:
62:76:2e:11:5f:bb:69:04:1e:1e:41:a7:07:2f:b9:8a:61:9b:
86:d5:5f:f5:6c:7f:ef:86:e4:10:58:51:72:54:3d:00:80:76:
07:db:f9:dd:65:4a:77:d8:23:87:7e:76:78:ab:9c:4f:90:ec:
b6:f2:89:0e:ed:32:d6:6d:81:c4:6f:a3:fd:bf:33:eb:76:8b:
38:e8:71:cc:42:1b:35:ee:f4:79:b9:d7:c9:d4:df:fa:6c:a1:
22:1f:e2:7c:2b:73:4f:dc:a0:35:d1:03:3a:7a:19:a1:ed:1f:
36:65:ed:ad:87:78:74:92:1e:2a:f7:4a:25:d1:74:83:b7:14:
0c:fc:5e:8b:11:d1:b0:af:2c:b3:a8:19:69:98:36:e7:32:af:
93:0d:4f:4b:7b:7b:30:3c:cb:16:06:a4:00:f9:bb:7d:78:e6:
99:ad:01:ac:72:6e:f1:02:c6:ac:10:90:94:b3:d7:02:ca:06:
0b:02:e4:1e:55:b8:f1:3a:62:de:34:6f:7d:10:ca:63:7e:1f:
66:82:9e:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:26 2025 by rpki-client