Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa
File: d2_X8NmPfsk2abx7IGLz8SNLGvM.roa (raw, json)
Hash identifier: 9Js2ZgaNWtiXIDSh7P6BZITJnNdukaODUiQXS+rrPjQ=
Subject key identifier: 77:6F:D7:F0:D9:8F:7E:C9:36:69:BC:7B:20:62:F3:F1:23:4B:1A:F3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 014B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa
Signing time: Wed 24 May 2023 16:31:15 +0000
ROA not before: Wed 24 May 2023 16:31:15 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:31:15 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=776FD7F0D98F7EC93669BC7B2062F3F1234B1AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:d3:05:d7:8a:18:a9:cd:d8:1d:71:d5:80:
c7:d4:ff:f9:4f:f3:b3:8e:9f:0f:24:db:e8:93:5d:
f7:17:7d:24:ac:b5:86:a9:bd:f4:0a:7e:c4:dc:c3:
a0:4d:37:45:7f:48:ad:50:c2:ed:aa:4e:d5:82:e3:
c9:50:8d:f9:b2:39:6a:36:57:bc:3b:ea:e3:e2:f7:
87:f3:9f:b9:21:0e:9e:ad:c0:b7:95:17:e8:6f:77:
22:cd:fe:a3:5e:fc:c0:05:8f:30:9b:06:32:7a:53:
31:d2:ba:33:2c:1c:1a:8f:2e:2f:31:72:c1:40:5a:
77:de:73:5b:de:22:5b:81:52:a9:9e:2c:af:05:90:
64:74:cb:03:e8:6f:7f:43:42:8e:ed:be:ee:7d:fd:
f4:34:97:7c:27:ae:dc:e0:f4:dc:fc:25:16:e3:61:
71:1a:76:da:c8:60:2a:51:41:0b:c8:27:b9:da:8a:
64:34:82:92:01:34:2c:14:12:42:04:e2:a6:b2:83:
82:1a:d4:c9:c5:8d:fa:13:5f:84:37:3a:36:b9:05:
49:a5:98:f3:e3:07:2b:33:cb:29:8e:0b:d9:3a:08:
00:cd:2c:c2:7f:d4:c5:1d:96:45:f3:90:76:8c:96:
3b:59:06:46:56:bf:fe:c9:45:1d:ec:47:ac:85:d6:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:D7:F0:D9:8F:7E:C9:36:69:BC:7B:20:62:F3:F1:23:4B:1A:F3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d2_X8NmPfsk2abx7IGLz8SNLGvM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.38.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f3:50:49:2c:b6:0d:15:69:0a:f0:01:c1:37:9b:c9:91:05:
95:b1:26:8f:f2:4c:5e:26:6c:35:5e:07:ce:7d:57:ec:b7:3e:
04:67:34:1c:f0:4f:eb:3a:d7:9b:ec:a4:76:ee:b1:1c:60:b8:
b3:ba:20:ff:b9:bb:f7:d2:5d:62:66:fa:90:fe:45:0a:ce:a8:
16:7b:f4:e3:06:bc:cd:39:03:55:55:8f:03:c1:c0:20:c8:d1:
d2:94:0f:4b:41:28:72:eb:22:36:78:a5:97:40:fd:cf:9b:9d:
67:b5:69:ad:41:e3:fd:e7:40:fd:1b:eb:88:56:23:a4:00:d2:
3c:35:20:85:9a:32:c3:91:54:b8:90:2a:9f:55:0f:78:7c:59:
43:12:62:f9:a4:1c:2b:1a:2e:07:34:15:f0:ef:89:0e:d7:95:
5e:67:05:63:fb:ee:45:8a:be:9f:13:ec:53:0b:e2:01:2e:2a:
31:b3:eb:95:e5:bf:8d:6d:5b:13:4a:a0:06:c5:e0:6b:51:d7:
ef:d6:ac:d5:a4:6c:fe:82:d8:c7:32:4e:1c:d3:65:3e:f0:7c:
83:34:45:9f:15:c3:d8:2a:2b:c8:ab:12:56:58:98:88:f6:fe:
21:4c:6e:f8:31:cc:81:fb:72:14:2c:40:93:df:45:b1:2c:c1:
7b:ef:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:50 2025 by rpki-client