Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
File: RAshu6cbRvHpZw55i7guatIw1WA.roa (raw, json)
Hash identifier: NUi/VS9r9WdsCeB/7gT/QB9FwgglNhjojTj8K+WSMg0=
Subject key identifier: 44:0B:21:BB:A7:1B:46:F1:E9:67:0E:79:8B:B8:2E:6A:D2:30:D5:60
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 46
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
Signing time: Thu 25 Jan 2024 01:10:38 +0000
ROA not before: Thu 25 Jan 2024 01:10:38 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 161.34.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 25 01:10:38 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=440B21BBA71B46F1E9670E798BB82E6AD230D560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:20:d8:41:bd:c6:ec:9a:1c:2c:64:5b:31:
18:3d:c1:5f:97:7b:08:02:19:c5:a7:db:3a:9a:3d:
e7:bb:44:77:c7:c9:7d:da:b5:54:cd:d4:c1:2e:30:
74:2d:08:15:02:48:fe:2d:91:e6:23:9e:96:f3:bd:
62:65:23:3a:45:c7:85:1a:a1:8d:51:ba:3c:1f:44:
63:1d:b7:39:06:9a:86:69:96:78:a0:83:8a:e6:a0:
da:10:a9:f8:e5:e0:c3:f0:31:a5:11:45:9c:bc:5b:
f8:94:b9:fc:8b:2f:ad:cc:06:82:14:a2:20:c5:bb:
d9:cd:51:6c:66:a7:70:f6:ca:f9:05:56:a0:39:4b:
3e:8a:a8:fc:50:a7:a8:e7:8b:c1:85:59:57:41:f4:
cc:15:f9:0c:37:6b:ae:70:6e:89:da:6d:43:ab:f4:
86:63:e2:9c:21:aa:f3:61:ae:13:7a:e5:62:9f:90:
7c:1c:b7:62:6c:b1:72:d5:d8:aa:1a:81:b9:9a:be:
a1:2a:ac:64:38:61:6d:8e:09:44:43:2a:98:99:92:
a3:92:6e:6e:0a:71:28:e6:88:92:a1:9e:74:8d:2a:
4e:bd:10:00:07:23:7e:63:a7:2a:87:92:89:43:b8:
88:9e:8a:ea:d3:2e:0e:8c:18:03:8e:40:cd:bb:5c:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:21:BB:A7:1B:46:F1:E9:67:0E:79:8B:B8:2E:6A:D2:30:D5:60
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:d9:1a:30:58:64:09:7e:df:66:88:c1:01:82:60:b3:4f:31:
fc:12:e9:05:48:2d:af:48:91:a3:7f:65:20:5e:23:54:c5:e3:
c7:15:d6:03:ad:ea:64:76:1f:9d:0d:89:3a:b2:1b:43:0c:9c:
4a:93:e7:f4:83:99:e2:75:49:de:55:71:7f:b0:4d:7c:70:e4:
8e:18:9d:54:c4:40:70:9b:e7:fb:82:fb:c9:ed:cf:f1:18:f0:
54:72:38:f0:61:22:e2:45:20:0e:63:d1:f7:d8:53:13:89:10:
6f:37:d2:95:9a:cb:c6:d3:54:e9:c0:1d:40:ac:be:0e:ec:57:
35:b0:e4:77:c5:f1:0a:26:d7:c6:3c:45:0f:38:9d:0e:93:6f:
8c:48:e7:46:12:e0:89:09:c5:4c:a3:71:55:f7:3a:1f:de:78:
21:b8:df:72:c1:22:ab:21:74:42:fe:a5:71:ac:9c:46:64:0b:
3f:1a:35:26:46:17:14:a3:42:39:32:40:f2:9e:e9:20:fd:dc:
9e:bd:11:fa:1e:e5:3d:36:da:73:37:a2:46:92:20:64:ef:c5:
09:2a:06:34:82:c8:64:fd:19:7a:70:25:69:10:4a:0e:ae:c3:
1d:45:22:00:14:b5:95:af:d8:d9:77:5c:5d:c6:ff:08:3d:46:
32:6a:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:38 2025 by rpki-client