Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/zvHBNQXEXLWCpPZFqMv5rWwrT8I.roa
File: zvHBNQXEXLWCpPZFqMv5rWwrT8I.roa (raw, json)
Hash identifier: ae+9srPWKI3baXYzxlWJQb84w3gUoR89r6AKvmBk8vY=
Subject key identifier: CE:F1:C1:35:05:C4:5C:B5:82:A4:F6:45:A8:CB:F9:AD:6C:2B:4F:C2
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: 24
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zvHBNQXEXLWCpPZFqMv5rWwrT8I.roa
Signing time: Wed 28 Feb 2024 05:03:58 +0000
ROA not before: Wed 28 Feb 2024 05:03:58 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 7679
IP address blocks: 218.40.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Feb 28 05:03:58 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=CEF1C13505C45CB582A4F645A8CBF9AD6C2B4FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:44:85:22:19:6e:19:83:de:74:09:cd:ba:
28:94:0d:bf:e9:68:1e:7e:77:6d:cf:be:fc:7c:fa:
65:8b:0b:d3:93:57:65:c1:ac:4b:9d:e0:b3:45:32:
3e:0c:8a:e4:95:c2:cf:a2:c0:d5:9a:49:5d:22:f5:
43:59:77:0c:f6:f8:6b:19:d2:38:38:5f:bd:72:08:
a7:50:67:77:1e:85:6c:b2:63:c1:be:ea:d3:52:c5:
2c:13:9a:6d:05:fc:96:a6:dc:2e:ae:fe:16:b1:89:
f4:3b:7a:23:fc:a1:10:33:e0:b4:bd:5c:be:12:d8:
8a:1a:2c:9f:8b:81:db:40:57:63:ea:7f:e3:17:a4:
2b:8f:d9:c0:25:26:23:1f:c8:e7:35:23:cf:76:3d:
5a:7b:09:ad:55:5a:5b:8c:51:68:b7:15:da:22:2f:
fd:0a:27:7e:39:6f:55:2f:74:d1:7f:80:57:7f:df:
36:18:28:b0:1f:bb:22:f5:a5:92:35:26:23:db:fe:
8c:fe:56:7d:22:ac:07:89:60:d5:6d:98:b8:6d:a4:
2d:92:57:91:91:28:bf:3e:2e:f3:0d:43:d3:c2:a4:
de:e7:f1:30:53:69:74:91:9c:9b:27:c0:2e:ef:5f:
ed:e6:83:da:a0:55:94:19:88:e3:9b:ba:e2:9f:2c:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:C1:35:05:C4:5C:B5:82:A4:F6:45:A8:CB:F9:AD:6C:2B:4F:C2
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zvHBNQXEXLWCpPZFqMv5rWwrT8I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
45:a6:c8:d7:ad:89:9f:8b:b7:91:98:9c:11:56:79:66:55:02:
ff:a6:ef:f5:26:7b:ec:f1:4a:fe:9c:0a:8c:0b:7f:a9:7d:6a:
67:b4:37:db:3c:ba:23:cb:45:b4:f3:69:4f:79:15:18:61:d8:
77:8f:bf:12:02:b0:4a:10:20:33:e6:5e:79:55:18:cb:fd:6f:
19:62:dd:2a:ed:87:d0:c7:c8:47:b2:30:13:6b:16:47:01:62:
55:37:de:f8:f9:bb:24:9d:05:ce:2f:7f:33:ee:ec:27:7f:d1:
96:2e:5d:af:cf:1f:ee:3b:0c:5a:a1:e1:20:ec:a2:34:57:25:
28:59:5d:7a:14:e4:c7:9d:a6:f3:4d:55:2a:63:c6:12:32:7c:
9c:7b:ed:e7:ab:ba:66:ae:98:55:06:7c:9e:2f:93:c2:74:6f:
da:5b:81:56:1a:b7:56:b1:8e:52:af:a6:8d:be:19:e4:73:6e:
83:3b:12:b8:7f:80:d3:6a:79:06:ec:0c:38:3d:ea:c3:59:ea:
fc:41:17:d3:ff:b2:70:89:e1:8b:72:b7:7e:6a:10:49:da:58:
57:77:94:73:4e:e6:8e:79:8c:36:a8:58:4b:a2:1b:9a:48:77:
2b:b9:e3:7d:59:50:b0:06:d7:98:d1:04:a2:2c:ba:a4:ce:cc:
11:65:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:51 2025 by rpki-client