Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa
File: D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa (raw, json)
Hash identifier: uUWTvRG53x1CaNCrNgtvAPRwLCzlOJKmkwRtCsrWJuI=
Subject key identifier: 0F:60:23:9A:AE:93:4B:FC:B0:0E:39:AE:12:71:B6:F1:F7:B6:90:5B
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 12
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa
Signing time: Thu 16 Nov 2023 02:56:44 +0000
ROA not before: Thu 16 Nov 2023 02:56:44 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 23783
IP address blocks: 219.124.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Nov 16 02:56:44 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=0F60239AAE934BFCB00E39AE1271B6F1F7B6905B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:ad:69:f9:95:85:a5:ca:35:2a:40:b0:62:
fe:a7:c6:c6:d9:f2:c1:1f:d9:ac:5c:0b:d9:d4:32:
d1:00:96:67:53:59:af:6d:d4:36:ca:51:c0:41:d9:
0d:1d:14:ca:92:e2:e2:6f:f6:d4:15:88:5a:ae:17:
25:ce:34:26:56:5a:88:86:75:8d:94:9d:46:a2:68:
44:2e:28:ca:5f:b6:37:cd:f7:ff:4e:cb:bf:d8:8b:
e7:3c:20:13:83:69:36:eb:10:47:de:3d:92:0d:b4:
12:85:3a:84:99:b8:86:50:fc:62:92:89:e6:89:9e:
5e:7a:7f:ca:db:90:72:df:3a:2a:2a:35:83:55:3d:
01:ec:cc:69:14:cb:5a:27:05:42:63:b1:91:04:96:
48:f5:10:bd:86:fc:90:c4:3f:27:7d:d2:e5:b3:ce:
c2:48:f3:14:14:72:4a:37:5b:57:46:c1:4b:a1:df:
f1:f7:97:e7:d1:2d:65:69:8e:05:00:11:4c:6e:7b:
74:6d:0e:77:36:64:cb:b9:a6:06:72:64:2c:38:46:
e6:9f:47:56:02:4f:1c:03:83:af:c5:d5:d5:83:14:
90:75:1b:b6:9c:c8:36:9f:9c:fc:d7:13:ff:3b:91:
a7:40:5e:a1:7b:ff:60:ce:c2:f1:9f:4a:56:a6:43:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:23:9A:AE:93:4B:FC:B0:0E:39:AE:12:71:B6:F1:F7:B6:90:5B
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/D2Ajmq6TS_ywDjmuEnG28fe2kFs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.124.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:37:be:00:5d:ea:5a:f8:94:6c:61:f7:c9:a7:bc:b1:f2:53:
b3:82:19:06:27:3b:4c:78:39:35:32:e5:bb:bb:96:40:88:9a:
7f:2a:16:89:23:6b:5d:12:6a:27:b1:e0:fd:44:1d:66:2a:38:
59:70:3f:ae:fa:a4:a8:ce:92:e9:e7:8a:66:4a:4a:c0:e2:23:
49:48:5b:b4:5c:06:57:fc:77:05:cd:62:a4:5c:ce:e0:50:c7:
8e:17:d5:04:c4:61:cb:8d:b3:1f:4d:ba:ec:f8:31:c0:6a:cd:
62:ba:6c:74:21:dc:ca:68:b9:2d:ac:0e:35:f2:82:a7:90:48:
0d:01:07:dd:59:63:8a:10:02:d0:79:ce:03:e1:a3:da:83:9f:
6f:7e:85:93:be:4f:ae:0b:d3:28:28:96:d1:02:e6:2c:7a:c4:
e4:79:20:04:68:f2:21:45:a6:4e:82:a4:1b:f5:67:59:be:54:
27:0c:ea:30:e6:e1:ac:31:ac:55:01:0b:66:85:cd:3f:ba:c7:
3b:17:de:45:6d:35:46:b4:ee:0e:a8:c4:e5:30:84:45:48:43:
a1:76:aa:6e:ae:de:86:a6:83:3a:6c:fd:4a:6b:68:6e:64:fb:
41:e5:9c:75:40:a4:3d:a4:42:70:60:a7:12:f7:6a:2c:9a:53:
6f:0a:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:12 2025 by rpki-client