Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa
File: iijop03_XzHo3vwpkLTYNg5RZzI.roa (raw, json)
Hash identifier: XVc49XroNNrfNvIn6mwvZUWeKo3GuX/yO+gMVOt5HmU=
Subject key identifier: 8A:28:E8:A7:4D:FF:5F:31:E8:DE:FC:29:90:B4:D8:36:0E:51:67:32
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 04C9
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa
Signing time: Thu 29 Feb 2024 01:33:13 +0000
ROA not before: Thu 29 Feb 2024 01:33:13 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 10010
IP address blocks: 203.114.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Feb 29 01:33:13 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=8A28E8A74DFF5F31E8DEFC2990B4D8360E516732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:eb:54:6f:04:e9:99:d8:07:04:a7:0e:48:
c7:4f:11:27:32:2c:59:bc:96:3f:65:ad:5c:45:a7:
b4:45:e7:48:da:5b:fd:e1:60:b5:50:a9:95:ea:92:
89:ed:8f:eb:e8:98:06:dd:f1:29:e3:09:4a:f8:49:
0c:86:96:96:83:98:e1:9e:8d:68:f0:fb:6a:6a:67:
f0:7b:f8:b1:ae:89:ef:8e:51:cb:df:a9:be:5a:36:
98:42:e4:9b:4e:48:85:59:0a:2d:fe:4c:e6:82:bc:
fb:69:2e:89:04:e1:6e:60:2e:8e:75:e4:53:08:50:
fc:cc:c4:da:fb:d7:28:75:b8:ab:89:1f:20:6a:90:
ca:93:19:ab:64:28:90:e0:58:f8:c9:a4:ae:73:d3:
32:bd:3a:33:dd:c7:0a:f8:5c:c3:e6:c5:b8:6f:21:
1e:4d:4a:d1:28:94:53:74:6f:8e:56:3a:ce:80:8c:
b3:a5:62:70:3b:58:db:09:84:9f:94:84:f1:3e:d6:
b5:c6:57:94:70:b2:68:ec:c7:ea:37:7d:b9:21:0e:
aa:13:4b:a6:4f:ed:43:7f:f7:27:be:09:f0:f7:bf:
91:c1:fd:59:95:cd:67:d9:8c:a4:bd:1e:8b:41:da:
b0:98:2c:0f:93:6e:b8:ad:e5:83:5d:75:0e:60:24:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:E8:A7:4D:FF:5F:31:E8:DE:FC:29:90:B4:D8:36:0E:51:67:32
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/iijop03_XzHo3vwpkLTYNg5RZzI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.114.228.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:83:cc:5b:17:e1:f6:a6:81:53:ec:43:1e:51:48:98:13:58:
c0:50:fc:00:2e:6a:ff:4d:ff:e7:6f:8f:55:e8:a6:cd:3d:95:
50:09:38:51:73:54:5c:e1:62:b2:b5:3d:c1:ea:fc:5e:8b:55:
0f:73:c6:2d:2c:40:dc:63:b3:e4:4f:f1:c7:18:6a:dc:86:a0:
63:c7:05:89:c3:00:19:ab:6f:54:e2:50:e0:53:69:ed:06:47:
f4:5a:d1:47:26:29:79:6b:40:10:ee:fb:b4:ce:ba:11:c9:e5:
6a:84:6b:d0:85:9d:42:a0:3e:21:44:43:47:b4:f0:17:21:ff:
d9:df:52:fc:6d:ef:1a:11:39:03:b9:d1:4d:64:6f:76:ef:e9:
f6:ce:c8:36:a5:b0:22:96:fe:05:8b:d8:1f:c4:32:d4:d2:30:
95:63:16:1c:d7:c1:70:f1:5b:9f:1f:cc:c4:b0:be:59:8f:85:
11:7f:b6:e6:6a:01:46:2e:89:49:2c:63:79:0a:72:54:f1:49:
f4:6c:5a:68:e7:55:1e:d8:37:43:24:7a:a0:b2:ed:bc:ed:8e:
7e:06:1e:1c:ee:73:27:59:d7:89:06:a4:df:cf:ee:5d:b6:87:
5b:7d:fe:a4:12:f2:c6:bb:13:59:28:d4:00:99:e6:15:2f:86:
05:50:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:02:58 2025 by rpki-client