Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkUNnLs7xQgo4qXP6tqUQgK1rds.roa
File: bkUNnLs7xQgo4qXP6tqUQgK1rds.roa (raw, json)
Hash identifier: XnnkRa+asw3/P3oMnMGq/5hsIstAXaMlthg2x5E5EP4=
Subject key identifier: 6E:45:0D:9C:BB:3B:C5:08:28:E2:A5:CF:EA:DA:94:42:02:B5:AD:DB
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: F4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkUNnLs7xQgo4qXP6tqUQgK1rds.roa
Signing time: Tue 30 May 2023 16:12:28 +0000
ROA not before: Tue 30 May 2023 16:12:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3f00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:12:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=6E450D9CBB3BC50828E2A5CFEADA944202B5ADDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:85:0d:ad:fe:0b:eb:5c:98:79:dd:22:22:
eb:de:64:4e:30:95:c9:3f:05:96:0a:ad:2a:d1:1a:
ad:7a:c3:f1:c7:12:de:e3:67:ce:d9:4c:a7:6a:94:
1c:5b:d8:d1:39:74:2c:7a:09:c5:17:a5:81:dd:80:
ae:c8:f4:0a:ec:26:d3:d2:c3:4e:a2:8f:e2:44:3a:
67:8c:f9:2a:ee:29:ac:06:61:f7:9e:ee:40:f8:09:
b1:93:67:04:5c:b2:fd:0d:d4:6b:f0:5d:7f:e8:79:
50:b2:ad:02:57:84:9e:ec:c4:db:4d:d0:a2:b0:55:
74:0a:d3:c5:72:a0:62:bd:f0:a2:42:e1:57:a7:32:
2f:a7:a9:7c:66:79:00:ab:c6:e1:08:08:f5:1d:3f:
10:b4:97:d6:df:02:2a:93:3b:62:fc:57:14:31:ed:
65:90:3c:4d:56:24:a1:ba:af:88:f0:9c:e6:6c:50:
ad:e8:9b:5b:0f:a4:a9:21:82:79:24:a8:3e:e0:0f:
75:91:c6:27:64:68:b4:f0:66:f5:ac:eb:e9:7e:61:
ee:4a:4e:5f:eb:d5:e2:ae:31:94:44:b7:b5:1e:94:
ce:f3:e1:6c:5e:e7:2b:da:cd:e7:d0:2d:de:09:7e:
5b:5b:9a:67:28:9e:41:e3:9f:34:91:f4:ae:0b:bb:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:0D:9C:BB:3B:C5:08:28:E2:A5:CF:EA:DA:94:42:02:B5:AD:DB
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkUNnLs7xQgo4qXP6tqUQgK1rds.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
20:f3:45:e5:b6:49:6d:1f:94:98:09:e5:87:48:db:2f:84:b9:
3e:73:fa:c3:29:af:02:a0:59:4e:68:b0:bc:af:c6:b3:18:7e:
9a:e5:e8:8e:06:79:46:e6:ea:b7:e3:8e:c5:9a:f3:d1:ba:e1:
a2:00:db:c7:2d:cb:ad:12:1b:4e:c6:25:2f:88:d8:4d:4b:32:
18:94:86:f6:2f:69:a8:73:86:e5:0d:b3:7c:43:80:e7:e9:74:
e0:b8:83:f1:51:e9:17:c2:38:14:c8:a0:a5:9c:74:d9:e8:ec:
80:f2:ac:72:6c:3c:a2:bc:4c:a5:35:46:70:4e:c8:67:ae:93:
2d:dd:d2:ea:85:96:d0:c7:25:5f:a6:e5:9b:a8:ed:f9:e1:fb:
3c:5b:a5:a8:39:fe:76:38:95:45:75:49:49:df:29:f9:38:7d:
47:a1:ae:e9:d6:0f:b4:83:a3:12:06:ad:54:a6:65:e8:66:ab:
d1:9c:86:82:af:8f:3a:c5:ec:32:e7:f3:a7:63:41:fa:52:40:
18:de:55:09:ca:e1:40:e9:38:c9:ee:30:18:8b:11:5c:bd:1c:
68:db:e5:ce:05:cb:7c:c7:86:ad:5f:fe:b6:f5:e3:59:21:18:
02:e0:72:47:2a:3d:d5:aa:19:d8:d3:6b:83:9d:db:48:b4:86:
66:8a:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:43:02 2025 by rpki-client