Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa
File: rXkPE4gh7X5I1jPWRvishCokeSA.roa (raw, json)
Hash identifier: K1NvtGypQtM9pwawIZJoz92+XPzmvMiCfrGgb76YTyA=
Subject key identifier: AD:79:0F:13:88:21:ED:7E:48:D6:33:D6:46:F8:AC:84:2A:24:79:20
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: E4
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa
Signing time: Fri 31 May 2024 01:31:26 +0000
ROA not before: Fri 31 May 2024 01:31:26 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 9370
IP address blocks: 153.121.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 31 01:31:26 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=AD790F138821ED7E48D633D646F8AC842A247920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:f6:2d:de:f1:de:6a:3b:e8:75:d6:8d:cb:
88:0c:46:56:da:4a:58:8f:d2:cb:95:91:89:1d:af:
1b:b4:12:97:af:22:bc:11:63:d0:a8:41:a0:67:1e:
88:c0:4c:bb:c4:5d:f1:bc:5a:f6:fb:9a:62:77:dc:
75:d7:3f:4a:d5:0f:73:49:5d:81:64:56:c3:d8:80:
40:d8:3e:91:b3:aa:0a:2b:ef:d1:ae:c9:b9:32:ba:
ba:77:3c:31:7c:5a:47:9f:6d:4c:1d:7d:15:5a:18:
da:48:ea:3a:35:15:22:73:59:16:aa:6b:95:eb:a2:
bb:f2:cd:18:0f:f2:59:a3:bc:75:3d:8a:06:40:94:
4e:d9:20:cf:94:66:ae:3c:0b:95:55:d3:99:e4:05:
39:e5:c3:8e:ef:e2:8d:1b:78:8e:92:aa:46:0c:47:
a3:97:c5:5f:20:5e:fd:c5:e1:fc:03:70:da:d6:c3:
81:11:ed:29:6f:29:f3:84:05:8b:76:8e:e6:cd:95:
0b:a3:73:5d:30:d0:43:f9:fa:f7:ad:27:70:7c:75:
09:aa:94:7f:a2:26:f7:67:59:9c:c5:45:41:11:1e:
a0:d4:83:8a:1a:e0:c9:01:bf:76:83:9e:98:a4:d1:
6f:e8:16:d9:d9:6e:43:23:e2:c4:83:9f:8e:80:3b:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:79:0F:13:88:21:ED:7E:48:D6:33:D6:46:F8:AC:84:2A:24:79:20
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/rXkPE4gh7X5I1jPWRvishCokeSA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.121.32.0/19
Signature Algorithm: sha256WithRSAEncryption
24:ab:31:85:e9:04:3c:38:9b:93:be:aa:ee:bb:1c:bb:f6:a7:
e9:1e:ea:e5:99:10:9d:79:67:2e:a1:5f:ef:85:78:9a:76:98:
38:31:23:7e:93:62:f1:b5:c6:7d:d8:95:b6:3d:ee:af:fa:f5:
87:b7:97:d8:63:70:c5:d2:b4:50:aa:10:dc:c8:c0:c2:93:70:
d1:44:cd:26:ba:3d:5b:1a:93:32:6d:e3:e8:ef:9d:50:96:b9:
d3:91:00:cf:6a:a9:7e:b9:cf:c6:7f:6a:d4:92:ba:43:eb:16:
91:66:67:07:8e:47:c3:68:f5:a2:a6:9f:ef:74:41:62:46:46:
92:3e:4c:99:8e:5e:08:56:bc:e1:7c:4d:23:4e:96:07:32:fa:
6d:6a:81:6a:3d:be:84:05:3b:bb:26:e0:04:07:d1:53:76:d8:
62:48:2d:8f:49:13:1c:47:da:7a:9d:1b:04:1f:a6:ba:fe:87:
62:00:e7:16:33:67:8b:db:3f:2f:77:d0:ba:f0:b9:05:a3:3e:
c1:9b:60:83:62:67:7c:5a:19:47:70:0c:4f:cd:05:0b:af:7b:
f6:75:76:99:6d:7f:a9:af:fa:86:66:b5:07:61:dd:5b:14:fe:
8a:c3:d6:37:e8:62:7a:3f:43:90:7b:f4:10:27:c8:34:b5:86:
46:cb:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:04:23 2025 by rpki-client