Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/XJTzSgL_R_O7DxUOODbvUwi0q7w.roa
File: XJTzSgL_R_O7DxUOODbvUwi0q7w.roa (raw, json)
Hash identifier: 9mqRY7+u/iDSOI3+Egji7DeOK917B8WR23QakVLcVZw=
Subject key identifier: 5C:94:F3:4A:02:FF:47:F3:BB:0F:15:0E:38:36:EF:53:08:B4:AB:BC
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 25
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/XJTzSgL_R_O7DxUOODbvUwi0q7w.roa
Signing time: Fri 01 Dec 2023 01:30:47 +0000
ROA not before: Fri 01 Dec 2023 01:30:47 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 9351
IP address blocks: 157.70.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Dec 1 01:30:47 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=5C94F34A02FF47F3BB0F150E3836EF5308B4ABBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:d8:1b:1c:17:8b:b0:79:1c:4e:0c:e3:27:
58:14:b0:f8:57:29:3b:59:bf:97:95:e7:a6:71:bc:
b0:9c:a2:05:f1:1f:57:6a:d3:a5:f5:24:97:7e:6e:
bf:05:ce:4d:ac:c1:c6:f1:20:d3:a8:eb:7b:ec:af:
69:45:ad:1c:ce:df:e9:ca:cc:9d:2f:31:c4:e3:1d:
92:62:a6:a0:72:c6:ab:b8:00:bf:d8:65:cf:92:d9:
31:5a:2b:37:33:c5:d3:f0:79:45:52:d4:c7:95:4b:
95:7e:29:a2:ea:12:46:45:08:54:d3:71:d0:31:3a:
b6:e5:b7:74:7f:c6:43:0c:ee:2e:65:21:13:f8:7d:
a2:69:1e:32:14:10:35:8f:93:cd:47:8b:2a:a3:c4:
59:e7:d1:7a:b6:4a:63:2a:bf:1e:33:9f:48:50:0b:
1b:7c:d0:5f:92:13:b7:6a:1d:e1:c4:72:c0:64:7a:
54:fb:26:40:07:29:46:6f:8a:ad:08:f7:b6:8b:11:
5e:95:85:0d:5c:48:af:00:e7:ce:7f:7d:15:f2:98:
c2:02:27:0b:a1:6c:e4:4e:5c:fd:c8:51:8b:78:9f:
b6:1e:b6:b8:3e:60:95:59:f1:c2:7b:33:d7:af:1f:
3f:eb:bf:3b:cf:df:21:7a:80:e0:e0:e0:33:e0:ba:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:F3:4A:02:FF:47:F3:BB:0F:15:0E:38:36:EF:53:08:B4:AB:BC
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/XJTzSgL_R_O7DxUOODbvUwi0q7w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.70.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:c8:ff:41:7f:ff:09:48:10:96:a1:5f:e2:ae:a6:7d:b8:d8:
55:3e:a9:d5:ab:64:66:17:77:a5:9f:eb:c1:b4:57:6e:f6:7f:
51:59:f1:f1:ad:f1:38:d5:45:0e:72:4a:b9:87:a2:76:81:74:
5c:1f:6d:8f:13:35:84:8e:55:b9:f9:a4:2f:5a:15:8d:fd:d7:
b4:ef:f7:45:1f:f6:56:15:67:f4:90:e4:9e:44:27:a5:bc:ca:
72:35:d8:2e:8f:4c:9a:f9:e1:8c:83:ad:a8:8d:a1:70:b8:cf:
3a:56:3a:60:1c:e5:04:c0:f8:b9:73:80:99:f6:b7:92:98:1c:
be:e0:1a:1b:38:b9:26:f7:a5:8a:1a:a0:aa:71:c4:a7:59:d9:
96:c4:7d:27:ff:5c:82:24:95:7f:05:30:5f:3c:96:80:6e:b5:
b9:58:b2:2d:f2:3b:ba:f8:4e:30:49:63:09:81:fe:ee:3f:23:
e5:b7:f9:75:15:d4:d7:71:b7:71:6a:b9:7b:6f:6f:4f:e1:1e:
4e:a9:5a:27:09:9d:63:1e:73:0f:ed:4e:63:ba:92:27:7b:0e:
f7:21:e4:b3:c5:5b:3f:58:00:b1:2e:90:0d:9b:52:d6:d2:f6:
fb:b1:dd:8b:80:02:4a:d4:dc:89:b3:28:5c:ec:d0:08:d6:59:
56:41:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:39 2025 by rpki-client