Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMxKSouPCEFOs7phSUvZCJS2dbU.roa
File: pMxKSouPCEFOs7phSUvZCJS2dbU.roa (raw, json)
Hash identifier: 08zj6u0s2n0VX5FDMenD3KVkCOeEWMhUsTZjbDrFaB8=
Subject key identifier: A4:CC:4A:4A:8B:8F:08:41:4E:B3:BA:61:49:4B:D9:08:94:B6:75:B5
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: F0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMxKSouPCEFOs7phSUvZCJS2dbU.roa
Signing time: Wed 24 Aug 2022 01:50:59 +0000
ROA not before: Wed 24 Aug 2022 01:50:59 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 4686
IP address blocks: 218.225.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Aug 24 01:50:59 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=A4CC4A4A8B8F08414EB3BA61494BD90894B675B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:0e:79:37:de:3a:52:2f:3e:bd:73:6f:72:
4a:a5:26:04:28:18:3b:c5:63:26:84:d9:62:19:29:
83:5f:70:9a:ce:ff:80:a4:a0:3e:ea:89:91:f2:c3:
8f:f7:07:bb:55:e5:33:99:ae:66:cf:20:09:3e:27:
c6:b1:7e:d1:16:a3:62:0c:93:fa:8f:9e:1b:1d:92:
cd:6f:fc:75:72:b5:ea:63:61:5a:90:98:ec:f8:07:
e5:eb:8d:be:64:cc:c7:ae:33:4f:57:11:05:4f:b6:
a5:9a:89:ec:4d:da:3a:47:09:df:73:31:4e:32:35:
2f:03:75:70:c6:62:37:2c:5c:37:c0:6f:f4:62:fd:
ed:54:6e:b1:23:f7:06:c8:1b:75:12:71:1b:30:6e:
69:31:0a:51:8e:ba:ff:b6:dc:58:cd:bb:9f:de:dc:
60:3f:9a:94:65:17:04:1f:e5:da:b5:39:0d:e7:d3:
77:ad:e4:d6:bc:5d:3b:b4:41:fa:66:f5:85:7f:55:
22:d4:cb:e3:7e:15:ae:39:8a:9c:64:3e:25:b7:08:
7d:a3:a1:e4:e8:01:74:e3:05:c2:22:e6:5d:51:e6:
49:00:24:04:dc:3f:49:d7:8a:54:34:78:6f:cb:8a:
0e:44:54:87:fc:b7:f2:03:c3:25:f9:f1:50:d8:b9:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CC:4A:4A:8B:8F:08:41:4E:B3:BA:61:49:4B:D9:08:94:B6:75:B5
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pMxKSouPCEFOs7phSUvZCJS2dbU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.225.224.0/20
Signature Algorithm: sha256WithRSAEncryption
41:a8:a7:eb:2e:bc:34:3f:f3:b7:84:cf:b8:6b:56:32:09:62:
6f:be:66:d4:44:b6:f9:50:1a:6b:e8:42:fd:4c:7a:b6:05:04:
de:6b:3e:9f:a7:e0:02:66:fc:bd:e8:38:47:d1:48:63:2e:b0:
6a:e1:72:b7:d4:13:ad:57:b0:35:06:7c:8d:09:4a:22:72:3e:
25:51:56:e6:2b:00:19:96:9b:16:90:2d:ef:87:0d:bc:2d:38:
df:5b:68:c2:fa:13:9c:ff:0e:9d:bd:ec:8c:7d:5b:a5:a5:0e:
32:9b:28:72:38:b3:93:89:11:26:0a:a3:72:40:6f:6a:bc:f8:
84:32:65:e0:57:e2:50:c9:99:1d:90:bb:b5:58:79:39:14:91:
7b:56:93:76:6d:14:20:a5:77:b9:25:6c:46:31:2b:a2:9c:30:
75:5a:08:94:50:32:92:1c:e9:53:e5:fa:f9:2f:ae:9a:51:88:
c3:7e:cc:51:86:b4:bc:72:b2:5a:f7:d9:13:1c:e3:b8:c7:4c:
cb:81:56:6f:bd:65:fe:77:e7:51:f9:67:19:a5:d5:6e:c4:51:
69:6c:0a:c4:39:47:06:c1:0c:2f:57:e0:a5:a4:99:fc:47:11:
59:97:f3:51:7e:ce:94:be:b3:fb:f8:00:bd:48:61:86:82:dd:
eb:2e:a6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:58 2025 by rpki-client