Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/7Sh6y_mXtDFK6ltHlXeUVaeaNjE.roa
File: 7Sh6y_mXtDFK6ltHlXeUVaeaNjE.roa (raw, json)
Hash identifier: bb0oJTHHv6OcBDv3/FbkXyiEra/WZyS03g2e4fFdhzk=
Subject key identifier: ED:28:7A:CB:F9:97:B4:31:4A:EA:5B:47:95:77:94:55:A7:9A:36:31
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 5A
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7Sh6y_mXtDFK6ltHlXeUVaeaNjE.roa
Signing time: Wed 01 Feb 2023 01:30:01 +0000
ROA not before: Wed 01 Feb 2023 01:30:01 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 9351
IP address blocks: 122.152.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Feb 1 01:30:01 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=ED287ACBF997B4314AEA5B4795779455A79A3631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:df:7d:2c:b6:53:fa:f8:8d:21:ed:bf:88:
a4:14:57:7d:c6:6a:2d:b7:de:05:d4:1c:b5:d0:f9:
45:4d:74:ed:fb:d6:35:6e:14:46:f4:fb:17:e1:00:
e1:63:96:9f:61:97:05:7e:69:55:34:fb:60:0f:3f:
24:81:5a:b5:72:05:35:e6:5f:84:10:1d:96:f6:03:
28:da:4a:f9:28:79:a8:d5:84:a7:6c:36:cc:00:ba:
e4:c4:62:aa:7d:76:87:42:60:4f:ff:7a:8b:bc:32:
7b:94:9e:09:ae:cd:83:ef:07:16:5a:5e:05:11:84:
27:ab:17:6d:68:5d:ec:c4:23:5b:59:ec:53:53:73:
1a:b3:04:dc:bf:c4:0d:5b:d6:c2:0f:a9:7b:ea:0d:
17:d8:1d:1b:2d:5e:38:74:47:68:ab:63:51:60:48:
84:1b:df:04:df:98:6d:bd:86:f4:f3:4c:2d:e1:57:
88:4a:61:dc:7b:ff:6a:23:4c:c8:82:d7:f8:f7:fd:
d7:18:43:20:cd:2b:a2:08:33:2c:1f:ee:be:4c:3b:
7d:a6:1d:80:31:c8:86:2d:b5:10:1d:3b:75:53:b2:
cd:e4:b5:32:fe:c9:2e:14:7c:a7:91:cd:f9:c8:ba:
b8:c9:5d:b0:05:d9:bc:06:a5:e5:c5:c5:32:c0:71:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:28:7A:CB:F9:97:B4:31:4A:EA:5B:47:95:77:94:55:A7:9A:36:31
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7Sh6y_mXtDFK6ltHlXeUVaeaNjE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.152.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:9b:4d:ef:ca:2d:74:e1:bb:57:c5:42:95:96:c1:60:e7:f4:
6e:98:90:14:24:65:4a:db:7c:b2:4d:c1:8b:cc:55:a3:37:b5:
1e:13:2b:e1:32:01:5d:ad:8e:17:f3:1d:f5:f2:2f:8c:ce:86:
d6:70:22:19:8a:2d:41:46:ed:04:16:31:2c:62:b2:17:da:67:
df:13:c3:99:87:4a:e1:f3:61:36:ad:8d:5b:99:c0:2c:f8:c2:
6e:4c:57:f0:4c:21:87:65:17:ef:c6:aa:d9:2e:6a:11:78:0a:
64:78:8f:81:a1:52:b8:46:71:49:8c:e2:15:7f:36:18:42:42:
80:cc:02:3d:e9:6a:2d:8d:c9:ef:6b:0c:f4:d0:96:2a:be:6a:
b3:93:94:4b:af:17:64:ed:4d:1b:ab:38:a1:82:74:8a:7c:5a:
6a:42:5b:b4:56:e4:23:1b:e7:26:45:bb:62:08:c8:d5:fb:82:
75:14:13:01:b5:f2:20:83:78:1f:7f:08:9c:39:b8:bb:30:7f:
82:e3:79:2c:97:78:e1:90:d0:8e:ef:d8:0b:18:f5:5d:09:c1:
81:bd:c0:90:32:41:e9:2c:f3:d0:81:bb:0e:af:0f:5b:04:a6:
18:f2:68:13:20:01:44:7a:b8:4b:56:61:be:12:20:06:43:d4:
46:f6:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:26 2025 by rpki-client