Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
File: TWYHy3LvEWn3BWW7glrpCGcelzo.roa (raw, json)
Hash identifier: ihvbCCwCJo8YtmsW3FFsHIUX0j2YhiGWyqZ6/RaNccg=
Subject key identifier: 4D:66:07:CB:72:EF:11:69:F7:05:65:BB:82:5A:E9:08:67:1E:97:3A
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 19
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
Signing time: Wed 06 Dec 2023 01:40:37 +0000
ROA not before: Wed 06 Dec 2023 01:40:37 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2514
IP address blocks: 103.2.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Dec 6 01:40:37 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=4D6607CB72EF1169F70565BB825AE908671E973A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:ce:35:98:51:2f:c0:0f:7b:35:e1:da:b6:
bb:fb:30:85:db:b0:7d:df:ea:17:fe:79:27:3b:d7:
e4:a0:50:92:31:f9:34:7a:5b:71:9b:a0:88:d0:4b:
0c:f3:66:8b:c9:3c:82:3b:e2:8c:0f:a8:fe:40:aa:
5a:b3:0b:1c:57:c9:f8:e2:81:d1:d8:41:49:58:5e:
f7:be:86:14:a1:be:b2:d8:a6:32:5d:0c:f4:ea:30:
5a:17:9b:4e:62:11:8f:aa:0b:19:55:db:81:74:4e:
79:21:e9:66:de:f0:27:41:bc:61:1a:98:d6:78:61:
e9:0c:42:3b:df:46:dd:f0:46:6a:77:fd:aa:6c:fa:
98:db:d3:2e:65:1b:de:b2:56:ca:fd:b9:77:d5:48:
8b:14:81:0b:7c:ce:85:b7:15:56:4f:45:7b:d8:e1:
df:da:cd:2c:eb:c6:29:82:5c:b9:0f:9e:b6:e9:ad:
ae:da:9a:18:d5:13:26:ba:f2:4b:12:78:fb:13:bd:
3f:ab:71:3f:c5:db:38:a9:2a:db:2c:ab:a7:d3:b6:
fe:cb:e8:8d:4a:ba:54:c7:16:42:bb:1d:28:52:ac:
b2:e3:9f:5f:4a:89:4e:dc:fb:eb:cc:cd:60:67:80:
c3:2d:b5:8a:7d:3a:40:37:9c:d0:bb:d4:25:43:ce:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:66:07:CB:72:EF:11:69:F7:05:65:BB:82:5A:E9:08:67:1E:97:3A
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TWYHy3LvEWn3BWW7glrpCGcelzo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:16:6f:da:af:ce:eb:c4:02:ce:10:48:0a:9f:f6:d0:05:47:
21:73:dd:b5:fc:00:70:48:6c:7b:8e:e0:80:7f:69:54:2b:5e:
75:7c:84:37:9f:3a:cb:2a:7d:28:5c:a9:a8:da:46:ac:d1:02:
79:6f:f7:25:64:44:43:39:67:6c:85:c1:33:fc:99:ed:eb:30:
22:3f:6c:7f:0b:f1:60:7d:40:07:85:2b:7e:f1:2d:8f:f8:f0:
cb:d5:f2:c5:50:e3:50:2c:26:82:9a:95:ca:d6:59:ba:52:84:
99:91:fd:68:e6:89:2b:cf:fe:0c:6e:b2:53:22:c5:85:37:0c:
ac:55:cc:25:fd:47:a3:1b:ef:71:f7:f8:11:a7:e2:95:49:b0:
82:03:32:3f:f4:4c:38:5a:29:46:18:f1:33:32:c0:29:38:e1:
ac:9c:81:44:18:c7:ed:dd:3b:8d:91:37:0c:6b:1f:0c:b3:e5:
1d:67:4b:73:76:f2:cb:5e:ef:a9:cd:ec:21:4c:9a:52:f6:dd:
25:4d:da:46:fd:a5:5b:8d:13:90:82:e5:5f:7d:17:b9:c9:34:
23:c6:15:24:75:b2:64:e3:ab:f0:d1:92:24:61:36:ef:1b:0b:
b0:94:05:50:92:29:0b:c9:95:7f:b7:59:92:e8:5a:9b:39:ef:
e5:b6:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:30 2025 by rpki-client