Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
File: Ot3g85Oy5ix1cAnII-etiguD6Ew.roa (raw, json)
Hash identifier: Fc4RWTX2P8+oYPf/xv4U/nXwEXOQJbeMVQnMrMn62N0=
Subject key identifier: 3A:DD:E0:F3:93:B2:E6:2C:75:70:09:C8:23:E7:AD:8A:0B:83:E8:4C
Certificate issuer: /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial: 4C
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
Signing time: Sun 31 Mar 2024 01:28:49 +0000
ROA not before: Sun 31 Mar 2024 01:28:49 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 7530
IP address blocks: 2405:f000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Validity
Not Before: Mar 31 01:28:49 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=3ADDE0F393B2E62C757009C823E7AD8A0B83E84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:ea:fa:e1:a8:4c:cf:33:01:5c:60:15:ff:
38:55:48:09:bd:ec:75:3e:3e:98:f6:d0:d8:f2:dd:
9c:db:31:ac:ce:aa:21:c6:19:f2:c7:8a:8d:52:a8:
a2:08:3a:14:0b:b6:62:06:b9:5a:7d:2c:ec:93:26:
59:65:ec:c8:b8:1b:01:e4:66:33:b9:f8:fd:97:90:
37:58:c5:b5:be:33:88:09:29:1e:01:d8:d1:28:c7:
48:c7:28:40:e3:ba:d5:4b:a5:26:97:d8:41:4c:3a:
2b:29:fa:dd:0a:80:9f:fe:b8:72:a9:65:16:72:38:
41:46:1a:cb:29:46:44:7e:03:ae:cd:32:eb:66:3c:
9b:fe:b2:fc:33:51:32:a2:41:52:79:4d:b7:9b:73:
33:13:46:b8:08:42:18:f8:f0:eb:09:4b:34:6f:ea:
29:b6:f1:cb:51:5b:98:82:c4:f4:9e:e2:b8:6c:60:
a9:b3:3b:51:87:83:ca:cd:24:e4:80:5c:1a:aa:51:
3b:40:f9:14:52:18:07:3c:f9:55:f4:b8:a4:3f:71:
c5:44:52:33:2b:19:23:09:d8:14:8b:3f:d5:21:02:
4d:c2:2f:81:e0:33:39:b6:c0:3c:f4:80:45:ba:73:
65:d9:de:56:91:c8:24:77:8b:a8:9b:1c:a2:37:92:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:E0:F3:93:B2:E6:2C:75:70:09:C8:23:E7:AD:8A:0B:83:E8:4C
X509v3 Authority Key Identifier:
keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:f000::/32
Signature Algorithm: sha256WithRSAEncryption
a4:a5:6a:9c:8e:12:90:db:5b:49:23:d4:fb:20:46:21:bc:67:
71:12:db:f4:a1:ca:e0:ad:eb:cd:68:88:c9:8f:a2:f7:96:3b:
56:29:00:dd:bb:23:73:29:ea:b2:a2:64:7d:e4:36:6c:07:cb:
fa:3b:5c:75:71:ad:64:3d:71:59:54:e7:68:91:78:34:c3:8e:
a1:90:c0:27:9b:f0:4c:07:3d:05:ab:fa:ac:bc:b6:67:26:5f:
64:03:91:37:ea:86:bf:a7:f3:a7:75:a5:dc:bf:32:b0:16:74:
fd:8b:94:c5:82:17:8a:1d:0d:7e:4e:7d:4f:90:16:69:d7:5f:
f1:0e:20:0e:7c:6d:d5:e9:02:c1:45:2c:6d:1e:7d:71:3e:61:
01:ab:95:1e:c3:b4:62:93:b2:23:8f:2c:34:ef:11:21:49:0e:
d7:5f:1b:f4:9f:9f:d4:40:05:d1:19:7e:ec:3b:90:c5:b3:21:
cc:c7:77:2d:3f:f9:e6:58:8a:6c:68:ea:58:38:17:96:37:b5:
dd:6b:0d:0f:97:66:fb:d5:3e:bf:cf:82:f3:53:5b:27:21:3a:
e3:90:27:73:b0:10:6e:f4:b2:aa:4d:f8:26:00:99:76:81:43:
e8:b8:19:1d:ae:c8:8f:08:5f:5a:58:09:52:29:e7:f2:2e:ee:
c8:d8:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:39 2025 by rpki-client