Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
File: qPKonaBl-0YpHeNxVFMTBeewm68.roa (raw, json)
Hash identifier: qZTMO93/whNBy0RWVpxmJlSSVGglWawdsPDgvnoroBc=
Subject key identifier: A8:F2:A8:9D:A0:65:FB:46:29:1D:E3:71:54:53:13:05:E7:B0:9B:AF
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 45
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
Signing time: Thu 25 Jan 2024 01:10:38 +0000
ROA not before: Thu 25 Jan 2024 01:10:38 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 25 01:10:38 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=A8F2A89DA065FB46291DE37154531305E7B09BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:ee:76:1a:82:4b:a6:2d:34:a3:20:01:9f:
e7:43:5c:11:8e:99:ab:cc:06:45:d8:a9:da:c2:6d:
ca:bf:3d:80:1e:53:a2:6b:87:c6:2b:66:3a:84:0e:
bb:80:f2:1d:7f:d8:48:2d:cb:81:06:70:6e:e6:8d:
5b:28:01:b3:f0:b1:22:4c:81:ce:8e:f0:e2:82:f6:
cc:d4:5f:f5:f5:32:20:91:87:bc:fb:6b:e2:56:b0:
99:c6:b8:a6:7c:dd:a9:a3:a8:9d:5d:f9:3a:1a:07:
48:a0:50:56:28:e8:95:5f:88:9c:00:ff:5b:9d:ff:
9c:fe:55:11:d6:bf:bf:63:bf:5d:de:31:09:b2:2e:
0b:af:86:12:03:f1:90:e1:78:53:49:9c:03:a8:9c:
1b:b5:39:1f:70:74:45:ab:41:55:be:be:f2:e6:ad:
89:ac:36:a8:e7:bb:79:54:e0:e7:bd:d8:8f:c5:14:
65:52:5d:12:17:04:de:69:ef:bc:18:c7:a3:69:cb:
c5:d2:ed:dc:ae:cf:cb:14:ba:a4:b6:c0:f6:1e:7d:
94:7e:e0:51:07:11:d3:4a:0e:5e:b7:8e:15:ff:68:
30:7b:a9:28:c3:9c:07:b9:6f:db:80:a8:36:26:21:
bd:82:02:46:5a:10:94:c1:8f:03:aa:de:ff:9d:43:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:A8:9D:A0:65:FB:46:29:1D:E3:71:54:53:13:05:E7:B0:9B:AF
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9f:fb:ea:ee:1f:cb:76:6b:ff:b3:02:64:53:bb:b2:92:8b:
27:4b:d8:93:e8:c9:9c:fd:8a:db:cb:a9:f6:43:16:05:6e:c7:
3c:9c:48:b7:ad:2d:a6:d3:a6:84:fd:5a:50:0a:b2:23:82:2b:
f0:6b:2c:93:2f:86:e1:ad:bc:94:95:af:b7:47:b8:45:52:a3:
f0:31:64:be:d6:e0:22:96:99:7e:82:80:1f:9b:40:99:72:ef:
98:a2:cd:9b:77:46:67:89:a1:12:eb:c8:61:78:9f:dc:49:39:
65:34:0d:af:40:da:86:89:87:16:7c:7c:90:83:8b:7c:bb:22:
ec:17:77:1f:fa:f9:66:4c:71:74:f2:0d:06:3d:6c:03:0c:df:
1a:33:4b:4f:84:ca:df:47:d2:05:89:15:bd:d5:aa:93:45:e5:
93:f1:bf:75:f2:1b:f9:4d:7e:ec:fc:b6:61:89:78:c9:90:1a:
1b:9f:ac:89:90:34:44:6d:b0:2e:ea:9a:99:98:c9:45:20:bd:
d9:c3:b6:5b:14:c2:af:56:2c:f0:59:84:24:2a:ab:66:a4:e5:
27:e9:44:66:1d:44:e4:b0:6c:e0:2b:65:37:37:50:06:0d:69:
6d:ce:9c:34:4a:60:2d:8b:e9:12:04:a0:a3:90:11:84:6d:f5:
ae:9d:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:44 2025 by rpki-client