Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
File: 7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa (raw, json)
Hash identifier: UIWLldihpkgJk+awyw4so+PmVJVb2SvtQdVA9f/zE3E=
Subject key identifier: EE:C4:25:73:12:C7:C0:B5:4B:75:74:C0:FF:B3:AF:DC:7F:92:17:AA
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3231
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
Signing time: Thu 29 Feb 2024 01:29:50 +0000
ROA not before: Thu 29 Feb 2024 01:29:50 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 7671
IP address blocks: 125.252.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12849 (0x3231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Feb 29 01:29:50 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=EEC4257312C7C0B54B7574C0FFB3AFDC7F9217AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:ca:68:10:f8:88:d9:bc:52:ce:ad:a3:28:
30:11:18:62:17:6e:ef:3a:26:68:bf:f0:04:5e:ac:
9c:03:90:d5:f4:5c:fc:60:c7:9a:bb:a8:5b:5e:14:
dc:09:8e:34:50:56:a3:82:76:ea:cb:00:20:de:22:
4d:3b:1a:33:e5:68:2e:aa:f6:80:75:cb:ab:06:00:
4a:d6:e1:3f:6f:9f:02:89:da:b3:72:8d:dd:f9:84:
a3:ba:c9:9f:99:27:3c:dc:42:9d:46:12:fa:17:e7:
a8:54:80:8e:06:29:d6:35:20:64:52:e1:01:a1:ff:
cc:0f:5f:43:89:75:c4:12:51:dd:90:ea:09:8f:df:
36:44:3a:ff:dc:c0:9a:6e:32:f4:d1:94:0e:b0:18:
a5:e0:03:04:50:9a:b6:68:3a:bd:5a:50:e7:ff:f8:
62:2b:53:e5:e3:a5:6d:fe:3f:41:56:f5:f0:ad:91:
9b:d9:f6:13:31:74:56:d8:d6:4e:30:23:d1:56:1f:
d0:2f:56:36:15:29:b6:08:df:9d:f4:61:e5:59:64:
59:64:97:e2:e2:cf:17:46:67:49:78:dd:9b:6c:64:
52:1a:50:3d:65:60:ab:ba:c6:05:f7:26:2e:f7:2b:
50:55:52:aa:84:08:44:ed:6f:97:b9:ca:60:18:32:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:25:73:12:C7:C0:B5:4B:75:74:C0:FF:B3:AF:DC:7F:92:17:AA
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.252.128.0/18
Signature Algorithm: sha256WithRSAEncryption
11:b4:de:82:22:3c:26:59:35:81:ec:21:1e:ba:21:ba:c8:b3:
95:87:d0:1b:ca:18:2e:da:e8:18:35:67:c4:01:d3:ef:a0:75:
1c:7a:5c:53:b9:12:72:5f:f7:29:48:ab:02:be:75:bb:46:7d:
1b:79:88:07:db:7d:64:b5:61:e0:f9:d7:f9:e7:e4:e5:00:bc:
70:78:6e:3d:4c:21:43:5a:07:4f:f8:ba:7c:75:c3:e0:42:12:
4d:1c:0b:ba:bd:91:6d:66:b0:75:48:97:1c:09:37:b6:0c:6e:
e9:08:fe:2b:c8:c7:29:75:a0:1a:2a:34:33:86:a1:c9:f6:2b:
40:c9:77:af:bf:0a:30:59:8f:7d:cb:ff:37:d7:1d:35:4f:cd:
2b:cf:52:19:10:44:4a:f0:d8:35:b3:15:68:4f:84:09:e5:ef:
cb:85:58:08:3e:25:f3:0d:5c:92:77:06:63:d2:dc:14:a9:2a:
fc:8f:8b:4c:bb:8b:cc:15:97:f7:33:d9:fd:c8:fd:f9:06:3d:
c7:0b:97:0c:38:68:32:50:85:08:f5:b0:04:53:53:00:f2:a9:
9b:67:84:f2:68:17:46:17:0f:e7:44:07:bc:05:09:31:95:f4:
51:8e:0e:52:9d:2a:45:dc:cd:37:b5:55:cd:ac:3e:7c:13:f4:
e8:45:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:23 2025 by rpki-client