Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
File: yd0sLfwMTANtSXXwktqRUQoeYyQ.roa (raw, json)
Hash identifier: 7MWJK2JbGF9zKHqPYltGikhZN8jIPiId8WNjO1J8Qrs=
Subject key identifier: C9:DD:2C:2D:FC:0C:4C:03:6D:49:75:F0:92:DA:91:51:0A:1E:63:24
Certificate issuer: /CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Certificate serial: 13
Authority key identifier: 0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
Signing time: Fri 17 Mar 2023 08:43:02 +0000
ROA not before: Fri 17 Mar 2023 08:43:02 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 63784
IP address blocks: 2406:ab40::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Validity
Not Before: Mar 17 08:43:02 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C9DD2C2DFC0C4C036D4975F092DA91510A1E6324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:88:01:e2:c4:80:7b:8d:ef:81:e5:0f:67:
0f:19:56:d8:26:c4:04:71:5f:2c:d9:f2:e4:2e:42:
b8:77:16:29:9e:b0:f9:3a:9e:0c:0f:2d:49:79:0c:
a6:d1:92:15:ff:d2:60:a0:f8:6f:e0:54:58:c4:74:
39:60:81:8e:7b:0e:3a:04:f8:9a:a7:ec:3b:8b:fb:
78:f1:92:df:15:d4:97:22:df:f3:ca:79:bd:3d:b7:
fd:47:13:c7:79:68:f5:06:f3:d8:59:de:8d:c9:22:
fe:ba:c9:74:56:35:dc:37:ba:fa:9d:b0:57:17:90:
45:6a:4a:ea:e9:b9:2d:0e:3f:c9:53:3e:4e:84:d8:
6a:95:f6:e0:e9:14:22:ff:e9:69:66:8b:a8:7c:fc:
28:52:6d:a6:a6:a9:8a:8b:13:ae:8a:93:f4:cc:a4:
6a:81:8a:91:ce:00:0e:44:da:da:19:8e:1a:74:e7:
b2:11:94:48:4b:84:d6:d3:e7:53:97:9b:3d:db:6f:
6c:4a:cb:f7:39:67:f3:f0:80:30:f9:33:03:7a:a9:
c7:0c:08:7d:0a:c4:9c:90:b4:85:ab:9d:bf:e6:a6:
14:0f:7b:21:a6:dd:e9:75:fe:a4:61:61:21:60:6a:
65:de:2c:7e:d6:ac:16:87:5f:cf:5e:89:a4:0e:e8:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:2C:2D:FC:0C:4C:03:6D:49:75:F0:92:DA:91:51:0A:1E:63:24
X509v3 Authority Key Identifier:
keyid:0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:ab40::/28
Signature Algorithm: sha256WithRSAEncryption
41:ea:40:6a:6d:3f:f8:5b:75:c6:03:33:38:47:bc:ef:20:f8:
77:ed:71:dc:f0:1f:05:bf:87:02:5f:7a:44:dc:19:85:51:8b:
d4:5b:90:df:0b:a8:31:76:83:90:7a:ad:7c:f4:1f:4e:ff:94:
e5:17:0b:3e:b7:69:7b:31:ec:fe:8a:ee:be:53:5d:10:fe:20:
b1:7f:a2:8d:81:28:18:66:fd:0f:9e:a4:1a:c8:4b:49:de:23:
8a:4e:e0:e5:ea:b1:7a:23:a4:1c:a8:0b:69:03:8f:f1:f4:c6:
aa:85:69:1c:5a:26:00:e5:ec:5c:77:44:0c:53:de:4c:f3:61:
e3:2e:c4:e9:51:44:d1:ed:45:45:1f:65:bb:53:77:44:df:ab:
18:a9:4e:3d:48:02:69:eb:29:e2:00:e8:3f:85:2a:06:d8:7c:
e1:dd:d1:f6:38:6c:3a:4a:eb:72:2f:9b:3e:de:7b:ee:95:89:
1c:f5:62:3b:44:e1:53:e4:47:77:cc:89:b6:26:ab:53:58:e1:
40:85:a1:d5:cd:b0:65:a0:69:7f:01:3c:ce:4b:f9:64:24:ea:
23:2e:0c:4a:28:75:fb:25:56:fc:a9:2d:ed:97:83:b7:30:b4:
af:dd:63:29:84:b3:3a:b9:a3:d7:f3:17:7a:bf:f9:f2:86:fa:
4e:31:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:21 2025 by rpki-client