Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa
File: KxCHaFbcsEjT6on0V226aJAZxq8.roa (raw, json)
Hash identifier: X82Y0krMZ/+E7WSNrI3I5CdDA7Dh1CYbbXZPhiLHOIo=
Subject key identifier: 2B:10:87:68:56:DC:B0:48:D3:EA:89:F4:57:6D:BA:68:90:19:C6:AF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 061A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa
Signing time: Thu 29 Feb 2024 01:38:33 +0000
ROA not before: Thu 29 Feb 2024 01:38:33 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:38:33 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=2B10876856DCB048D3EA89F4576DBA689019C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3f:75:25:fc:54:db:9a:6c:57:d1:31:ff:63:
48:c6:67:b4:fc:c9:fa:05:70:bf:a1:da:ba:8e:2c:
bc:0c:2e:40:b5:70:a4:97:2b:4c:37:1b:08:1f:62:
d1:1d:cb:7b:98:32:ec:b7:9e:5c:b9:6c:f8:04:7a:
be:55:00:95:de:95:e4:5f:43:18:44:68:bd:83:93:
f9:6d:95:93:1f:08:68:9d:d7:9c:cd:2c:b2:ce:7d:
95:66:dd:62:84:12:8c:51:1d:20:e0:b8:49:38:bb:
ff:4e:e6:7b:c5:30:6b:48:46:6e:ed:5a:d2:6e:78:
5b:17:5b:32:08:76:02:e2:52:f5:d1:96:c5:2f:35:
87:d9:97:d9:3f:57:eb:15:47:3c:a1:53:ea:b4:ac:
e1:99:d0:9d:18:20:ab:3e:ef:50:2f:e9:ce:d2:04:
a5:f9:30:b7:07:6d:c5:8c:f4:bc:a6:c4:06:43:b5:
53:ce:e1:8a:cf:38:08:f9:a2:74:5a:0c:8c:a8:fc:
c1:c5:62:b2:dd:22:db:7f:95:fc:5c:2c:f3:dd:30:
9f:52:78:6d:37:94:a1:c1:f7:07:9f:a4:e5:27:f9:
12:fa:33:07:16:9a:96:17:53:88:ee:0a:4a:a2:33:
16:56:ba:e9:05:a7:5d:0a:59:39:5c:bd:65:ce:3a:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:87:68:56:DC:B0:48:D3:EA:89:F4:57:6D:BA:68:90:19:C6:AF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KxCHaFbcsEjT6on0V226aJAZxq8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.8.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:c9:32:63:31:d6:da:31:1d:64:37:3a:ad:27:52:74:63:92:
81:93:fc:03:cd:69:6f:93:f6:2d:c0:7c:86:b5:ca:5a:bb:ad:
d2:7b:8d:f0:6e:64:d3:12:71:26:43:90:6b:dd:10:4e:e2:6c:
4b:61:0d:a3:82:8d:aa:63:88:6a:51:02:cb:0e:be:1b:2c:9e:
28:80:a3:db:c5:00:0e:77:84:f3:db:3a:dc:56:0f:9f:ba:67:
de:43:99:4c:cf:15:2e:6a:76:49:9d:bb:89:44:c3:70:99:09:
13:e4:86:7e:de:ff:37:84:f5:04:a1:d3:23:70:7b:9c:e6:70:
41:bb:3e:46:23:dd:58:5c:5f:c9:37:2c:f3:10:5f:ec:cd:82:
80:84:ed:16:e4:5c:50:92:ed:05:d6:f9:8d:7e:34:8d:52:fc:
15:a3:8c:21:f4:f0:c3:f7:a3:48:40:84:4a:2c:54:bf:ae:7f:
77:44:c2:8d:e5:df:ce:57:96:62:c8:62:0e:92:64:fb:0a:1d:
20:ee:48:86:24:9f:94:20:e2:ef:dd:25:1a:14:73:0d:f7:41:
5e:19:b2:bc:09:e4:27:7d:a2:56:50:e5:1e:94:80:30:d7:73:
89:e5:bb:b3:58:32:0b:80:e0:ac:27:04:b4:24:a4:05:b6:fd:
22:09:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:28 2025 by rpki-client