Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa
File: lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa (raw, json)
Hash identifier: +zCikY2fRWiRsrDx7fmRcrhaR2kF0gCO71VglCShll8=
Subject key identifier: 94:1C:D6:FB:C0:7C:84:9F:3F:C9:3A:7D:3B:65:7B:AD:F4:86:61:F4
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 27
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa
Signing time: Wed 10 Jan 2024 01:11:09 +0000
ROA not before: Wed 10 Jan 2024 01:11:09 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 10 01:11:09 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=941CD6FBC07C849F3FC93A7D3B657BADF48661F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:67:13:69:73:a0:3d:9f:46:87:50:5b:ef:
ba:33:61:03:26:c4:3e:ae:63:02:5c:c1:6e:63:f4:
53:1c:74:44:5f:fa:12:75:5c:d3:3f:7f:f5:af:d7:
58:5c:64:6e:da:de:ab:16:39:81:b7:6c:21:fa:28:
4c:66:88:6d:c4:4a:69:a2:06:0e:cf:8c:6f:41:28:
6f:a6:c7:57:ca:68:ee:8a:27:a1:ab:eb:6f:3d:70:
a9:07:8d:01:c6:1c:bd:c6:a7:00:e9:cb:28:cb:0b:
41:23:22:89:ed:23:09:18:14:df:61:91:8f:7b:d4:
99:c0:27:01:7b:63:f2:50:b7:d9:7a:d3:fa:f7:a2:
ee:85:47:59:c2:78:e1:bf:4c:7b:a5:75:b7:a4:01:
70:e2:62:c7:28:20:9d:d0:c2:b6:c9:03:ad:aa:73:
f9:ff:d8:6a:5e:b3:7d:65:7c:0f:a7:aa:98:6a:e6:
42:c8:60:39:e9:0d:46:b3:c0:39:67:d3:5f:62:e1:
e9:c4:50:fc:8c:1c:97:f2:33:85:a0:d0:7d:69:05:
29:2c:3f:c5:3a:a5:52:35:a8:0a:7a:a7:77:5f:7f:
b1:21:4f:17:b5:8a:c4:7c:46:1e:34:26:73:a8:31:
5b:61:ec:8e:84:a3:9f:e1:98:b2:6b:48:82:b3:4f:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:D6:FB:C0:7C:84:9F:3F:C9:3A:7D:3B:65:7B:AD:F4:86:61:F4
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lBzW-8B8hJ8_yTp9O2V7rfSGYfQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:d7:6c:29:ff:b9:7b:98:c8:9d:9f:90:d4:25:41:a7:dd:28:
6e:5f:3b:0c:19:f4:0c:d2:ec:79:6a:14:1f:fc:91:09:9a:64:
5a:71:ca:0f:88:f5:88:00:ec:b4:73:3a:95:cb:17:a0:bc:1c:
49:ae:72:3b:4b:b0:78:ee:46:bc:e3:31:24:be:63:db:61:19:
f8:91:ac:9e:eb:47:c6:45:b1:b2:d1:f1:e9:c0:ad:0e:16:45:
3e:ea:5b:3e:f1:7e:8c:96:ce:21:18:fc:74:d4:33:21:58:19:
12:1e:8f:d2:46:85:75:8a:b2:c5:a3:b7:63:5e:77:ba:58:8a:
13:68:41:69:cb:2c:73:69:24:6b:9a:25:8e:6f:11:ac:22:e7:
77:ac:82:18:c7:13:96:cc:75:e2:ba:e1:f6:e7:c3:7b:37:46:
da:fd:41:11:2f:73:58:8b:37:be:fc:35:4d:bb:1a:38:7e:ac:
7d:5e:da:f8:35:f6:e5:e2:04:bd:bd:53:78:71:dd:d0:65:a6:
f6:7a:09:e1:e0:80:c2:af:7a:c2:fd:91:cf:eb:88:14:ec:d7:
56:b2:59:71:12:42:a9:92:8f:84:76:01:12:b1:c5:16:55:f8:
b9:92:06:98:f4:d2:60:be:a3:fb:49:31:29:e3:50:3b:ee:8a:
96:30:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:12 2025 by rpki-client