Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa
File: RfSDl3pqw1bFXTISsS5zUSk5ODE.roa (raw, json)
Hash identifier: IoqZ0cGXNYuvbXwedvMm2el/83o2eLQLPgyAkeVfiMc=
Subject key identifier: 45:F4:83:97:7A:6A:C3:56:C5:5D:32:12:B1:2E:73:51:29:39:38:31
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: E9
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa
Signing time: Thu 19 Oct 2023 09:24:15 +0000
ROA not before: Thu 19 Oct 2023 09:24:15 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 10021
IP address blocks: 117.55.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Oct 19 09:24:15 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=45F483977A6AC356C55D3212B12E735129393831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:8f:da:6a:12:28:8c:c7:0e:36:c3:97:21:
18:8e:76:91:00:11:d4:be:90:de:0b:ec:76:eb:fc:
eb:df:94:63:64:0e:5a:8f:a7:28:98:f3:49:5e:21:
cb:a9:fc:6d:c8:a8:2d:d1:97:67:22:a9:68:c1:64:
f0:49:23:aa:38:b8:ba:27:55:a3:91:1d:a2:05:ae:
9b:4c:35:4a:47:b2:f5:c8:0b:b3:57:8e:89:43:4d:
ba:3d:fc:94:74:86:e3:af:78:ca:02:e1:c5:72:b6:
30:81:7e:96:da:a4:f6:db:77:3e:af:8f:c1:99:3d:
32:76:ae:fe:a3:48:94:91:ee:d7:fe:9e:b9:0e:9f:
98:1b:67:34:39:a2:67:42:c1:61:8f:b9:72:33:d9:
10:6f:78:d1:5d:c9:35:88:95:b2:a7:fb:ee:c1:31:
d1:14:5b:52:93:b6:85:3b:99:f0:71:b5:2d:f7:ca:
34:25:aa:72:c3:3d:71:99:b6:50:4a:dd:40:61:1c:
76:bc:82:04:d4:94:93:6a:b7:4b:28:a2:cd:a9:62:
3b:57:f4:cd:ff:66:14:0a:0c:66:7f:e3:94:88:cb:
8d:ca:46:b5:1a:38:4e:a8:e3:de:60:53:cb:15:c9:
91:2a:e5:cf:4d:49:90:04:3e:09:8a:05:d1:48:5c:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:83:97:7A:6A:C3:56:C5:5D:32:12:B1:2E:73:51:29:39:38:31
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.208.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:f6:53:f8:df:bc:96:62:ab:85:42:e8:17:69:e8:da:50:04:
61:b0:7d:ab:7e:b0:44:6b:15:63:73:43:ab:39:e8:44:57:52:
d3:ed:e7:2e:63:29:bb:00:fd:ea:84:78:9d:1a:7c:18:47:54:
4a:4a:e6:dd:e3:f8:b3:67:f1:e5:4a:fb:a2:c0:c8:5b:39:09:
b0:8a:fd:4c:df:dd:fa:93:cf:9b:78:8f:5c:db:3c:b4:13:de:
89:1f:3f:d8:b9:45:71:01:46:7e:d1:e3:36:e3:1e:f2:00:63:
01:1e:72:0a:9b:76:62:f2:ec:1d:45:6b:b5:5e:87:e4:71:d6:
4b:52:6d:30:e9:22:c4:af:7c:c3:d5:9c:f1:74:66:cb:41:8f:
fc:1e:f9:14:66:2c:6c:8a:f9:12:77:c3:f9:d5:fc:2f:a5:a9:
7d:79:d9:d1:fe:3e:40:b9:66:8c:16:99:62:c0:f1:f5:10:05:
87:e4:9f:00:24:0d:ce:c5:d1:b6:af:bf:7b:a2:7e:91:55:2d:
cf:03:e2:4c:90:8f:52:71:1f:64:f1:a8:21:d9:42:68:07:79:
98:13:16:73:da:67:f5:16:31:02:e1:d0:50:f5:9c:6b:41:df:
4b:55:13:aa:89:ab:da:36:46:89:15:bc:a7:3c:6c:ff:3e:6b:
a3:63:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:24:12 2025 by rpki-client