Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa
File: YaOVV4yeIwdMA4s83C9_QeAT-YY.roa (raw, json)
Hash identifier: EE0lRsSqfVbyeCpV8eeEgOax5Xj5XLzgpUcr8CYxPn0=
Subject key identifier: 61:A3:95:57:8C:9E:23:07:4C:03:8B:3C:DC:2F:7F:41:E0:13:F9:86
Certificate issuer: /CN=0CE9148428894A9D99226AC1F46D15383D64D856
Certificate serial: 1E
Authority key identifier: 0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa
Signing time: Mon 01 Jan 2024 01:31:00 +0000
ROA not before: Mon 01 Jan 2024 01:31:00 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 23805
IP address blocks: 2405:fc80::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE9148428894A9D99226AC1F46D15383D64D856
Validity
Not Before: Jan 1 01:31:00 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=61A395578C9E23074C038B3CDC2F7F41E013F986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:ad:f4:34:8a:77:8b:ca:0c:05:70:7d:95:
08:96:8f:59:61:b9:15:d9:1c:5e:b6:ad:97:5c:84:
d0:48:61:a9:a2:e7:f4:e1:14:57:cf:23:8b:f3:cd:
7c:76:e5:c1:56:6e:2f:e5:b1:1b:b6:71:78:0d:35:
af:64:8a:5a:9a:5e:01:35:98:28:b5:8f:a4:d1:30:
56:91:03:ce:dd:cf:93:00:a4:05:9a:5f:b5:5a:20:
fb:4b:87:f0:28:02:0e:8f:48:f5:bd:b3:f3:a2:26:
be:54:93:b8:e4:54:7a:02:2d:06:c5:52:83:52:d1:
71:e0:21:c7:89:e0:f8:9a:8b:0d:8a:a4:d9:e3:2f:
08:3e:e3:fd:83:cc:e8:26:8b:bc:99:34:9b:2b:31:
c9:0a:11:5a:e4:f8:e5:ea:a2:cc:1d:09:40:93:07:
e3:3f:38:76:d8:04:12:00:eb:89:2c:b6:6d:ce:40:
5a:34:7e:6c:17:da:d6:d5:0a:34:15:2b:14:c1:cd:
da:ea:3a:20:5e:d1:55:14:5f:96:42:53:08:da:31:
eb:7b:91:c3:69:0e:3a:ae:43:6d:de:85:eb:71:b4:
d3:3f:62:a3:d7:92:90:68:82:e6:ba:76:dd:ce:1d:
c9:d0:b1:7e:92:1b:73:59:ff:21:1b:50:36:ce:14:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:95:57:8C:9E:23:07:4C:03:8B:3C:DC:2F:7F:41:E0:13:F9:86
X509v3 Authority Key Identifier:
keyid:0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
0d:6f:f2:20:b9:65:2b:f9:5b:dc:b4:5e:7d:dc:5f:9d:81:cc:
84:79:6a:65:80:a5:75:94:3c:00:c4:d0:9c:e3:4c:5d:c4:9d:
6e:85:f8:50:ad:18:68:81:7e:c2:3d:93:7c:04:9b:4e:bc:b9:
87:a1:47:7e:5a:14:e1:8d:9e:0e:88:cc:15:82:b9:53:8a:42:
3e:d1:b3:f2:18:14:1a:2b:fd:17:7a:54:a1:5f:16:72:ba:79:
93:6f:54:29:5b:8f:7c:86:40:f6:f7:bf:cb:a8:7b:e1:53:b2:
39:ca:66:d5:96:e0:6c:e4:c3:1f:94:9f:00:bb:21:d6:b2:ca:
60:a7:8b:fd:be:e0:f2:65:54:43:c3:12:26:36:80:ad:b0:51:
0a:c3:c5:06:db:fe:d3:62:eb:00:d7:cf:0e:9d:d6:c3:24:ad:
fa:e3:a1:0c:d9:30:db:70:14:9f:8e:c1:23:26:0b:4a:3c:ef:
ef:f8:78:70:3a:77:67:24:b2:d3:78:93:7e:95:49:14:d4:b8:
88:d8:d6:42:3b:4a:24:3b:7b:a5:c2:b3:d0:59:a8:7e:1c:62:
eb:b7:65:0f:9e:bc:f4:0b:b7:8b:b3:07:ca:61:16:70:68:f5:
d7:bf:36:27:7b:0d:a7:1c:af:91:35:36:34:9a:6b:6f:e4:a1:
e1:32:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:11:43 2025 by rpki-client