Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
File: qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa (raw, json)
Hash identifier: zj5LDBOnYjwXcV7k536xSNa01f/csDd9wK4VepRfvWY=
Subject key identifier: AA:14:2A:40:BE:4D:FF:2E:99:53:91:F2:C3:A2:3B:F1:7E:E3:55:D5
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 43
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
Signing time: Thu 25 Jan 2024 01:10:37 +0000
ROA not before: Thu 25 Jan 2024 01:10:37 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 25 01:10:37 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=AA142A40BE4DFF2E995391F2C3A23BF17EE355D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:58:a2:d6:6e:b7:5e:ae:6c:e1:a3:db:f9:
41:8e:e6:f9:29:ae:3d:d1:52:38:b3:c3:e2:89:3c:
4b:53:53:9b:e1:f9:db:cb:35:4a:9d:42:67:72:2b:
56:dd:2c:36:e9:47:ac:b3:f4:f7:ff:11:46:49:5c:
65:2d:b0:8b:97:a9:4c:3d:be:97:62:76:3f:fa:ec:
b5:b2:98:49:d7:63:4c:b5:6b:16:93:ab:bd:a9:c2:
d8:9b:1b:c0:ec:2b:6d:26:31:8a:df:56:ac:c2:54:
dc:d2:e0:ae:f9:16:fa:08:b1:b3:f1:57:8c:85:aa:
cf:12:c6:df:40:40:78:ac:aa:d1:f6:0b:37:32:f4:
d6:2a:91:bb:bb:05:fe:36:2c:da:05:2a:e0:98:b5:
7c:e3:ab:68:f5:63:08:46:f8:80:54:d8:9b:38:33:
11:3a:c3:75:5f:36:3b:25:81:bd:e5:f2:9b:08:e3:
5b:57:f8:a4:d6:33:30:b6:5a:82:77:13:49:d9:9b:
8c:ff:f0:bb:17:dc:1c:ba:45:1b:f1:9e:76:9c:53:
fd:d9:64:99:7a:72:0a:88:f5:44:fb:1d:68:7b:6d:
54:be:6f:23:db:8d:db:f5:1e:37:99:8a:a7:fc:f9:
88:16:96:f2:87:ef:f9:3b:cc:fd:35:d1:47:26:93:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:2A:40:BE:4D:FF:2E:99:53:91:F2:C3:A2:3B:F1:7E:E3:55:D5
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.248.0/22
Signature Algorithm: sha256WithRSAEncryption
39:00:91:83:8c:55:31:9f:7e:0c:ee:27:a5:ce:d7:66:ca:e0:
a0:0d:c5:ba:63:3a:cb:36:aa:5a:77:73:f0:f7:cc:d2:91:d4:
5e:68:60:2c:5e:5d:26:56:f8:d5:84:9f:99:8f:aa:1f:00:e9:
9d:f9:d6:bd:29:64:e4:7c:cd:6e:38:30:af:8a:5f:8d:50:b7:
cd:de:45:60:37:45:3e:66:f7:f7:84:b4:7e:83:e9:cb:5d:7f:
b5:76:34:de:a4:16:74:3c:27:54:8b:3c:4e:1e:6e:55:cd:df:
79:f4:82:88:00:58:16:e1:e8:02:8a:a0:29:4c:75:79:22:e1:
fa:40:b4:20:18:d0:43:e8:cd:f7:92:6f:dd:2e:5e:5a:17:e7:
7f:1c:17:be:6e:4b:dd:82:e4:ab:fe:69:ca:53:e3:24:69:74:
bb:19:f9:53:d9:9e:8e:08:fc:2e:2d:f7:3e:a4:7d:96:41:e8:
59:52:24:44:89:05:02:26:52:ef:17:f6:6d:4e:be:5d:18:f7:
ad:07:ba:68:93:b0:79:38:1d:17:7e:ea:d0:30:9c:8c:7d:36:
eb:cb:a1:7b:63:c7:11:6d:0f:05:55:f2:b6:c3:f2:ec:f8:41:
c9:66:f6:ba:35:2c:fc:a9:a7:13:d6:66:e7:70:78:8b:49:59:
bd:a6:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:00 2025 by rpki-client