Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/On3aMX-48vWsaxuKzKSVql2OG-s.roa
File: On3aMX-48vWsaxuKzKSVql2OG-s.roa (raw, json)
Hash identifier: toivM4sA1+7PRrd6cY2e+9nUUuoMUaN7P6hzy5iWjB0=
Subject key identifier: 3A:7D:DA:31:7F:B8:F2:F5:AC:6B:1B:8A:CC:A4:95:AA:5D:8E:1B:EB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 19
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/On3aMX-48vWsaxuKzKSVql2OG-s.roa
Signing time: Thu 21 Jul 2022 08:33:57 +0000
ROA not before: Thu 21 Jul 2022 08:33:57 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 36.52.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 21 08:33:57 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=3A7DDA317FB8F2F5AC6B1B8ACCA495AA5D8E1BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:f0:c6:f4:41:33:e5:84:20:49:46:cb:80:
ee:16:bb:39:2f:b0:df:93:c0:0d:7e:0a:6f:67:b2:
17:2d:04:c4:90:51:44:69:b9:df:30:7c:bd:97:39:
32:cd:c4:23:45:79:98:00:8e:5e:df:ca:95:22:3b:
89:26:d4:31:9f:bc:aa:1f:dd:77:1a:26:87:79:ff:
8e:78:e0:12:1e:8f:7a:a4:14:7b:14:61:d5:4f:0c:
8e:19:eb:40:41:6b:8a:d1:19:f5:67:01:7f:f9:0e:
b1:31:07:32:7d:d7:e1:2e:56:56:f1:e0:69:17:93:
61:9f:28:07:ca:aa:28:00:74:e4:28:82:5f:86:4a:
a6:d1:90:18:04:42:ef:0c:5c:e3:a0:9c:4e:75:77:
1b:2e:67:70:53:ad:1e:70:82:84:e7:f5:cc:0b:4e:
fa:0e:25:fc:92:69:54:ab:5a:5e:d8:9f:76:80:57:
4e:e3:b6:17:bc:bb:40:34:11:5e:17:5f:bf:62:2e:
7c:69:3d:cc:e1:e6:d9:00:93:7e:b0:9e:fb:1d:fa:
ee:41:41:0d:36:dd:b0:57:ed:2d:86:5f:3a:69:61:
d5:bd:f3:42:66:a0:d3:f5:d0:6c:e1:1e:94:48:36:
65:06:9f:41:35:1c:75:94:18:71:6a:3f:71:c6:26:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7D:DA:31:7F:B8:F2:F5:AC:6B:1B:8A:CC:A4:95:AA:5D:8E:1B:EB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/On3aMX-48vWsaxuKzKSVql2OG-s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.52.176.0/20
Signature Algorithm: sha256WithRSAEncryption
52:46:a2:41:93:ee:e1:3e:de:e7:f3:2b:c2:85:58:62:d0:c2:
8c:0b:59:35:e3:53:3e:a0:fe:d6:5b:42:ca:e1:20:f3:7b:fe:
49:0c:b6:18:a4:ab:84:b3:97:3c:ee:6f:93:74:55:5b:f4:21:
96:12:5c:c6:45:f8:32:e9:26:cd:cf:9a:aa:00:8a:c0:b8:42:
78:db:2e:b8:bc:ab:21:8c:97:7c:c1:84:14:1e:39:ee:5b:5a:
8e:c8:72:43:b7:49:ac:62:db:23:ba:3a:03:a0:19:58:8e:0c:
d2:25:26:d6:43:19:b9:13:11:d5:7b:23:7d:ab:65:0a:d9:11:
94:e6:d5:3f:96:bc:c3:80:9e:1c:20:dd:32:89:00:50:a3:8f:
d6:82:f6:20:a4:d2:8e:f6:66:f8:dc:33:e7:63:8a:c3:30:db:
2e:7a:57:a1:8d:6d:4a:4c:d9:ba:3c:29:86:ea:d2:84:ee:c2:
30:fc:21:48:74:86:4a:d5:1e:ce:50:54:9d:f1:72:07:d0:3b:
12:e4:b8:0d:21:bc:72:11:f6:58:d9:53:e3:7b:a9:c2:aa:a1:
35:ef:9d:a8:b8:0e:7a:da:6c:d9:e1:e0:b8:74:fd:e6:14:b9:
b2:8d:a2:7e:0e:18:f0:3d:a7:c0:35:19:43:c5:3c:73:f8:e9:
8e:db:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:52 2025 by rpki-client