Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
File: AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa (raw, json)
Hash identifier: dpO9qWXmcjwSNXdQMOyGLgy+cTX9g5BB2SS67qgg7p0=
Subject key identifier: 02:11:7A:B8:34:0C:B0:E9:17:82:6D:1C:38:08:CC:49:F8:39:C8:BC
Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial: 42
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
Signing time: Thu 13 Apr 2023 09:54:03 +0000
ROA not before: Thu 13 Apr 2023 09:54:03 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 18260
IP address blocks: 210.141.214.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Validity
Not Before: Apr 13 09:54:03 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=02117AB8340CB0E917826D1C3808CC49F839C8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:27:dd:3c:ec:1f:e3:9f:d5:4c:c1:33:a6:
13:25:57:67:21:1f:e3:9a:ca:43:50:0e:f4:e5:bb:
b0:8c:0b:b0:7d:58:ff:e8:a5:9e:3f:f5:e9:8c:8a:
37:fb:02:ac:d4:e3:21:12:a1:7d:7b:7d:eb:fb:ec:
cb:ee:9b:7b:65:4d:11:7a:bc:c1:cc:48:e9:72:33:
14:82:cb:14:5e:87:95:9d:8d:a5:6f:dc:b9:8f:59:
59:fe:bd:79:29:e9:18:43:6b:6e:2b:eb:a2:2d:7e:
e4:6b:18:fe:49:df:25:dd:d9:24:85:a8:5c:a0:b1:
8e:8a:d4:8e:6a:e2:b3:b6:0b:23:cc:fc:27:fd:c7:
a5:bf:2e:e4:e5:fb:3d:d8:41:3e:32:f3:e4:18:13:
39:1b:a7:0d:a6:6d:da:18:4c:37:53:db:62:2a:49:
da:2f:f9:c7:f9:2a:a1:f6:9a:6d:25:e2:db:2a:66:
2c:bf:b4:3e:cd:2b:8a:24:49:49:f9:c1:50:f3:a8:
41:a4:1f:28:28:b8:76:86:92:d6:cc:c5:b9:1d:45:
50:8e:47:51:ba:30:1e:50:7f:aa:3d:d4:b1:7e:0c:
c4:3f:2c:ec:e6:dc:dc:08:9f:9f:ad:79:f4:d4:74:
8b:58:1c:58:c0:88:9d:12:5d:58:c0:d4:ca:53:ca:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:7A:B8:34:0C:B0:E9:17:82:6D:1C:38:08:CC:49:F8:39:C8:BC
X509v3 Authority Key Identifier:
keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/AhF6uDQMsOkXgm0cOAjMSfg5yLw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.141.214.0/23
Signature Algorithm: sha256WithRSAEncryption
93:33:6d:17:f5:3f:cf:c6:b2:db:c4:25:77:ff:5c:9c:a3:8f:
c4:77:8e:da:c7:a5:b1:35:a8:8f:e3:6c:df:29:8c:84:ae:ce:
c8:a3:e5:18:a6:e5:23:28:88:f3:f5:69:7a:f3:9f:3a:02:b3:
24:a5:d9:04:55:56:15:ed:d0:f5:d0:a1:ef:6f:03:8e:dc:82:
f8:ce:4d:52:09:b6:57:b6:e8:e6:88:21:48:f0:57:c3:6f:8f:
18:d2:72:95:0b:f0:79:54:4f:a5:80:71:01:7e:b1:89:4b:cc:
93:6a:56:a7:3c:86:3f:ec:8f:9c:25:15:86:81:fb:c5:65:86:
63:ea:6d:a4:76:60:f5:09:bd:90:0f:49:a0:58:2b:e7:3e:44:
21:c4:a6:7a:f1:58:ca:34:56:1e:f3:04:ec:35:3e:80:7e:0a:
fb:ba:92:3b:11:b7:2a:67:21:c3:30:9a:7b:ac:23:5e:8c:ed:
28:06:9f:76:e4:e9:e8:ad:0a:f0:4e:95:49:ae:66:ef:56:76:
7d:24:c2:19:94:29:06:ab:57:a5:fd:d9:c2:ff:9a:e8:4e:69:
5e:05:e1:ce:22:c3:8e:91:eb:5d:da:c1:93:e6:83:93:56:16:
29:91:76:36:21:1c:74:4f:23:62:67:ce:a2:64:7c:f3:34:04:
8e:8f:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:24 2025 by rpki-client