Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
File: FNfITITlCogItsSuhRzwQiq171g.roa (raw, json)
Hash identifier: FtDycxj/bR1hANLlw7Qh5vV4Y4yCwbve70iiiJGio5g=
Subject key identifier: 14:D7:C8:4C:84:E5:0A:88:08:B6:C4:AE:85:1C:F0:42:2A:B5:EF:58
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 2A
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
Signing time: Thu 25 Jan 2024 01:18:30 +0000
ROA not before: Thu 25 Jan 2024 01:18:30 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 210.136.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Jan 25 01:18:30 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=14D7C84C84E50A8808B6C4AE851CF0422AB5EF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:c2:6d:bc:ef:8d:dd:b3:93:6d:b5:01:34:87:
67:ea:5f:ae:4f:cc:7e:d7:08:ca:d5:bf:40:dd:b6:
f5:a6:ac:f6:b0:e7:53:92:2c:b2:11:af:20:28:53:
2b:aa:6b:e6:a9:e2:34:ce:50:53:28:8f:81:1d:5e:
6b:5a:bc:a1:85:d2:15:a9:12:5e:1a:6c:6d:8d:d5:
a9:13:92:d2:bc:fa:af:27:dc:df:ef:4b:3e:d9:52:
ea:35:3d:04:34:6e:57:4f:f3:05:03:5e:fd:4c:58:
d3:35:32:b5:a9:bf:62:0a:88:ac:db:1b:75:b8:ac:
e6:ba:43:c9:e5:11:27:c8:b4:20:fe:b7:4a:7a:4f:
71:10:13:c8:3a:c5:bc:50:f0:a0:38:b3:f3:a4:09:
1b:eb:f0:34:e6:25:3d:53:6a:d2:b1:1b:3c:15:bd:
d0:61:8b:bb:55:c6:6c:d4:f6:0e:c4:49:57:29:4c:
68:26:76:e2:9d:84:e0:58:45:91:65:6f:d4:c4:92:
b2:24:76:77:9d:08:27:e0:54:f6:bf:ef:cf:de:b5:
28:ea:06:2e:7a:16:94:73:ac:87:f0:78:ff:3f:34:
ac:ca:55:d7:92:a3:3e:e0:70:1b:33:d3:01:85:d3:
ed:dc:76:7c:c2:aa:cd:a5:33:a5:e5:d5:30:e7:0c:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:C8:4C:84:E5:0A:88:08:B6:C4:AE:85:1C:F0:42:2A:B5:EF:58
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/FNfITITlCogItsSuhRzwQiq171g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:99:38:ce:d7:74:33:71:04:7b:51:65:5c:d3:a9:6a:70:2e:
05:a7:06:c3:09:6e:04:b2:d9:64:4e:54:ab:5d:92:6c:bf:38:
1a:4f:e4:53:d8:22:0a:a4:ce:b6:cc:0a:aa:af:b3:28:a0:6d:
a3:7c:28:4f:4c:89:6c:93:a4:36:19:b7:c3:a8:4e:3e:7a:26:
90:5f:6e:3a:65:48:8e:09:aa:b2:81:59:43:20:c0:06:0b:4f:
ba:bd:cc:84:1a:74:21:22:e6:de:c0:a9:a0:ee:69:2e:2c:41:
9e:89:8a:e0:8d:eb:8b:31:7e:f0:9d:07:f4:e6:6f:28:e9:6d:
b6:fe:78:89:bb:99:5b:93:5a:2e:4c:7e:a9:de:3c:63:22:7a:
b4:db:1e:66:4c:0d:a0:cf:82:97:e9:8b:97:ae:c2:e0:92:03:
e6:34:f4:44:20:29:c2:5d:a6:0c:a5:57:40:89:7f:e0:52:b8:
20:a8:60:42:4a:1e:9a:46:38:16:51:10:a0:c3:b8:31:25:7b:
52:f9:a2:50:2c:68:d6:2b:95:7c:1a:ae:06:7b:72:a0:11:15:
c0:bd:dd:08:40:4c:27:bb:94:57:a4:40:60:82:d5:55:66:3c:
0d:93:63:93:7e:ad:7b:21:dd:85:a7:9c:de:67:cc:72:9e:be:
83:20:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:49 2025 by rpki-client