Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
File: FSBMgdj9SdaRH7kVmyWmZI0U308.roa (raw, json)
Hash identifier: hvLPcVV3y7ZCCqvyrGkHhFFdH/jS2fXyfX0mfvbjJmg=
Subject key identifier: 15:20:4C:81:D8:FD:49:D6:91:1F:B9:15:9B:25:A6:64:8D:14:DF:4F
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: 2F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
Signing time: Sun 31 Mar 2024 01:32:55 +0000
ROA not before: Sun 31 Mar 2024 01:32:55 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2915
IP address blocks: 211.14.208.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Mar 31 01:32:55 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=15204C81D8FD49D6911FB9159B25A6648D14DF4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:3d:cd:9e:7c:26:a2:49:25:96:e1:2e:41:
2c:35:77:51:c0:de:b5:02:99:5b:56:f2:e1:e8:83:
35:2b:11:ae:76:5d:43:82:ba:4a:10:a0:cf:f0:63:
24:25:cc:d9:e7:83:a2:34:3b:d2:fe:75:dc:a8:73:
f0:da:90:5d:87:9a:a4:82:3f:ac:bb:d2:c0:c9:83:
06:e5:03:a5:2c:13:d5:c7:36:25:3b:c7:a6:b5:e2:
4d:5a:0b:ef:d4:1d:e6:4b:50:19:53:83:92:fc:50:
59:67:7e:cf:1d:aa:70:14:27:52:d1:61:51:e6:b6:
24:3a:63:a2:31:11:5a:90:fc:e2:31:a7:96:10:df:
7c:9b:a2:f5:39:87:b2:af:8b:c2:72:3a:bc:e9:65:
2f:d9:66:45:85:d2:ab:6d:f4:14:bf:33:e4:e8:a2:
99:df:fc:00:cd:15:44:23:81:fc:41:94:91:1a:e6:
1c:eb:69:d1:02:39:7c:7e:bd:f7:8d:65:e5:0e:da:
32:ef:b5:d2:34:8d:fa:ba:9b:89:99:24:ce:9a:77:
ff:38:84:f7:60:d8:7e:82:d4:a3:21:00:65:2d:a9:
d9:d7:ea:3b:bb:69:19:10:9f:f4:c7:95:0c:31:15:
38:9e:88:d2:95:5a:bf:85:64:f5:bf:ef:7f:31:00:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:4C:81:D8:FD:49:D6:91:1F:B9:15:9B:25:A6:64:8D:14:DF:4F
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/FSBMgdj9SdaRH7kVmyWmZI0U308.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.208.0/20
Signature Algorithm: sha256WithRSAEncryption
40:f4:c7:86:eb:78:a0:bc:67:ba:02:80:03:e0:8c:9b:c2:17:
f4:ba:98:06:75:c4:d3:40:53:d9:83:63:42:9d:a1:6c:fc:ee:
80:d5:75:71:62:76:fc:dc:1c:f0:b5:76:00:85:d9:d0:41:99:
53:a4:21:8d:00:f8:f0:ca:dd:a7:d8:18:92:b0:0b:b0:5d:99:
ab:da:fc:8b:9c:f3:6e:fa:47:32:0c:4b:88:d9:72:17:cb:45:
0c:42:e9:1e:75:a2:97:ef:8a:11:73:1c:bd:0c:eb:39:c6:a7:
c4:1a:7c:46:6c:de:68:02:36:a9:b3:c5:9f:c8:54:41:47:25:
ae:5b:a5:2b:a5:93:6b:c5:6d:7f:13:05:8f:94:87:51:6c:c9:
e0:08:e1:32:71:64:0c:70:9d:16:35:93:fe:8c:d5:be:ed:c6:
71:a1:bd:db:27:e6:28:8f:cc:db:f0:4c:c3:5a:32:97:8a:86:
a9:88:bc:10:f8:f5:90:66:b5:3f:ae:e7:8e:84:b6:f4:03:ed:
07:ed:e7:10:cc:af:2b:b1:cd:dd:5d:3a:99:0c:94:52:f5:d4:
6b:b5:dd:d5:39:a4:b7:d8:5b:5b:82:87:bb:7a:99:22:6a:30:
e6:eb:97:e5:a7:18:43:af:2a:9e:29:9d:45:11:ca:40:73:df:
0a:37:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:30 2025 by rpki-client