Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/ye3xvtCfvEZ8C5utPB_xoF8ut2E.roa
File: ye3xvtCfvEZ8C5utPB_xoF8ut2E.roa (raw, json)
Hash identifier: BsHNI0J43UL4dPgU9q1Qh8ZEvhWKw5nEGzmiRJqn9Sk=
Subject key identifier: C9:ED:F1:BE:D0:9F:BC:46:7C:0B:9B:AD:3C:1F:F1:A0:5F:2E:B7:61
Certificate issuer: /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial: 29
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ye3xvtCfvEZ8C5utPB_xoF8ut2E.roa
Signing time: Thu 29 Feb 2024 01:34:23 +0000
ROA not before: Thu 29 Feb 2024 01:34:23 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 18094
IP address blocks: 219.118.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
Validity
Not Before: Feb 29 01:34:23 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C9EDF1BED09FBC467C0B9BAD3C1FF1A05F2EB761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:fd:fd:6a:fe:57:01:30:87:58:22:82:54:
3d:fe:6c:ac:64:40:f2:bd:91:02:0f:29:ee:d8:e8:
e3:9d:3f:9d:2f:54:6b:b0:13:48:4f:89:2e:eb:d7:
01:8b:35:a6:c2:9d:63:a6:81:c9:59:57:92:2d:9b:
87:45:f9:89:4f:d4:e1:4a:62:ed:e9:e1:42:d8:dd:
8f:f4:d8:51:86:e1:3e:7a:3c:11:16:f5:cc:b4:51:
36:94:a4:83:bd:5b:ff:4c:22:fa:35:97:8c:c9:d3:
75:83:50:d1:bb:00:2b:79:aa:ae:42:5b:a1:e8:18:
14:aa:df:e6:e4:2f:36:6c:c3:4d:f5:85:f0:e4:a6:
b0:44:93:14:5c:3a:ff:10:bc:1e:8a:6a:46:1e:9b:
ab:c6:f4:ee:02:d0:d8:44:8c:d1:42:95:e2:4b:e7:
7d:f3:a8:a1:f0:54:49:0c:04:82:a7:62:36:2e:b2:
dd:40:8a:47:b3:49:a3:b1:86:ab:52:8f:4c:8c:a8:
af:c8:cd:dc:5e:b9:e8:ae:13:89:7a:89:36:f9:00:
6f:5a:3a:47:27:a9:1d:16:52:25:c5:3c:8c:1e:14:
1d:90:74:44:0b:a4:83:44:89:b4:b4:22:c0:10:a4:
8b:d2:66:93:c7:67:74:8f:f2:c9:c9:65:69:eb:b9:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:F1:BE:D0:9F:BC:46:7C:0B:9B:AD:3C:1F:F1:A0:5F:2E:B7:61
X509v3 Authority Key Identifier:
keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/ye3xvtCfvEZ8C5utPB_xoF8ut2E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.118.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:5d:37:9e:2f:ca:05:40:90:ba:70:8c:c7:f0:8f:42:cb:9b:
13:bc:a6:91:53:be:b2:52:9b:6c:7c:cd:62:6a:5f:18:55:9f:
de:3d:8d:16:e7:eb:7f:2f:59:1c:ea:97:0e:fe:31:87:0a:45:
d2:8d:af:df:2f:b4:73:bc:14:4e:c1:c6:88:c0:54:fb:b6:b8:
b2:72:dd:e6:46:2c:d7:14:c3:56:99:5e:60:19:0f:aa:aa:1a:
01:b2:f6:3d:7d:46:75:38:25:14:3c:e0:1e:08:7d:fb:61:f3:
f7:8c:fb:fd:0f:e9:a9:70:84:f7:64:b7:40:8d:21:df:a8:00:
98:db:9d:a2:b1:73:69:ee:1e:de:f7:d8:8b:b0:08:ea:e2:17:
4c:61:84:1c:90:ad:c3:b2:cf:65:89:30:80:08:75:8f:47:13:
04:f0:5a:c8:cf:c6:f6:c0:b1:6e:10:7f:a9:3a:93:0b:16:74:
1b:6a:20:81:46:13:65:5a:b1:fb:1e:b9:69:d8:55:a3:f9:20:
1a:51:f2:57:2f:2b:99:2d:4a:99:51:c7:5e:af:98:d4:25:d7:
d2:99:94:82:ca:c7:a3:95:62:4b:fd:cd:83:b8:21:40:8a:76:
68:ad:7e:d4:be:05:64:ce:51:33:cc:38:05:aa:5d:ad:3f:7e:
33:e7:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:22 2025 by rpki-client