Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
File: a5knKdYo1u3X1BnMwzTJEA1OJwU.roa (raw, json)
Hash identifier: IY9HaxQvC96RdLaiqjxk+olbGkxNmMoYZ49jKxeVRtw=
Subject key identifier: 6B:99:27:29:D6:28:D6:ED:D7:D4:19:CC:C3:34:C9:10:0D:4E:27:05
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0251
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
Signing time: Thu 08 Jun 2023 16:26:15 +0000
ROA not before: Thu 08 Jun 2023 16:26:15 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:3:bcc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 8 16:26:15 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=6B992729D628D6EDD7D419CCC334C9100D4E2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:6a:93:1d:6a:64:05:f1:be:9f:b7:8c:4f:
b5:f5:5f:56:48:24:0e:1b:f4:27:9d:4f:ce:9c:05:
19:cc:e3:e5:ae:51:e4:1e:46:5e:c1:00:20:99:22:
c4:e0:f1:fa:88:8c:cf:12:6d:aa:1e:3d:db:a7:e0:
91:09:9f:53:0b:ec:db:50:0b:30:17:e5:5b:aa:dd:
a8:ca:c9:d1:d2:e7:96:79:46:25:36:c0:72:e4:75:
26:5f:70:fa:37:03:de:b3:45:cf:d1:0c:a9:a6:71:
62:d6:6c:32:75:be:18:b7:9d:26:89:06:64:69:61:
01:89:e9:51:a6:eb:28:15:a9:54:57:eb:65:3d:86:
67:e5:ae:a3:a9:0a:6a:53:4c:8e:12:d8:16:68:0f:
9c:bf:33:26:6b:b8:50:f5:8f:6f:1d:a1:5b:da:0d:
fb:1c:ea:6d:92:9c:bb:48:6b:e9:5d:d6:2e:2e:38:
af:c3:ec:84:5b:e8:72:d0:89:4c:cf:95:22:36:67:
1a:12:8c:24:13:d2:5e:a7:f9:72:54:e0:3f:c7:3b:
9f:d8:c3:60:82:54:de:b6:bc:e8:3d:39:46:82:c0:
fb:d4:fa:fc:dd:63:92:85:81:4c:ee:15:61:57:b7:
af:96:c3:9d:df:5d:d5:be:f2:d7:76:11:d1:bd:07:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:27:29:D6:28:D6:ED:D7:D4:19:CC:C3:34:C9:10:0D:4E:27:05
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:3:bcc::/48
Signature Algorithm: sha256WithRSAEncryption
67:2c:0b:37:30:aa:83:b8:57:84:53:bf:d9:ed:59:71:11:b5:
f4:20:61:a3:27:52:a5:cd:86:84:8b:83:00:b0:d3:c2:74:d4:
cf:74:70:eb:b1:64:0f:3c:dd:a3:e4:43:e4:63:73:04:2d:48:
c8:d9:14:f8:a0:5e:6a:99:2d:53:b8:01:21:7b:75:c3:b2:f8:
79:86:4d:61:d7:db:b8:a3:83:37:af:ad:12:75:2f:ea:d6:d7:
96:9c:d3:ab:e7:26:85:e3:6a:21:d0:1a:1e:86:53:60:dd:7d:
a1:93:ad:ce:5c:eb:56:aa:da:6e:95:ab:36:11:be:ac:ab:ab:
75:35:ab:8e:a9:50:9e:29:29:37:fa:97:41:c6:d1:64:0c:e9:
ef:0f:f1:0f:3c:db:7e:04:dd:85:0a:8d:88:44:27:65:97:6b:
c3:c8:97:43:60:3e:4b:51:7c:8c:6a:34:d4:aa:49:ae:e0:ea:
a0:1e:28:ce:7c:3f:27:e5:d8:bd:a6:2c:bd:44:95:04:14:36:
7a:1f:10:a0:0f:31:9f:29:25:be:d4:4d:c2:b9:ee:d4:28:86:
e9:5a:7c:f2:c1:62:7d:05:ad:f7:34:e7:8e:bc:8b:97:11:4a:
09:40:65:21:45:7c:b6:ec:fa:b0:26:7f:7d:35:64:6d:2f:5a:
ab:7d:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:06 2025 by rpki-client