Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
File: uApnkOfWwwlCtZNfFSAe8S9tkLo.roa (raw, json)
Hash identifier: zvMWhMinbQNuCOAz5uYuAYLhCBBFDYknBxk6g4b7SLI=
Subject key identifier: B8:0A:67:90:E7:D6:C3:09:42:B5:93:5F:15:20:1E:F1:2F:6D:90:BA
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 2C
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
Signing time: Thu 01 Feb 2024 01:30:24 +0000
ROA not before: Thu 01 Feb 2024 01:30:24 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 17683
IP address blocks: 202.227.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Feb 1 01:30:24 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=B80A6790E7D6C30942B5935F15201EF12F6D90BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ff:ff:54:67:47:8c:76:60:19:c5:74:f3:2d:
ea:48:58:d9:15:c7:0e:e4:54:52:ba:24:2a:d4:f3:
31:37:7e:3a:af:e4:fa:3f:45:ed:0e:00:73:7b:ab:
1d:a4:99:e0:6c:66:06:36:bd:a8:1c:5f:a9:44:95:
56:23:5d:72:b7:7a:49:31:9b:5e:ca:15:c8:3a:ae:
36:28:14:4a:54:8c:9a:df:84:d2:a4:b5:39:70:df:
ac:ea:d5:0e:34:c3:9c:18:71:17:de:eb:2f:2b:6f:
41:7c:13:6e:f1:06:0c:c4:a1:18:a1:15:e0:6e:36:
bc:cd:d3:2d:c5:d7:b1:91:fd:64:2b:43:bb:d4:9c:
d3:11:b0:91:5f:7b:31:52:43:f8:9c:d7:7b:f2:6e:
ab:b3:22:d1:ac:17:6d:09:ed:bf:82:8a:38:5c:52:
86:71:07:85:0c:9f:e0:88:e6:0d:ce:8f:24:ed:d5:
d3:16:d3:ce:71:df:2e:47:aa:ef:ea:22:3d:cc:86:
d1:9e:5f:ad:b6:83:6b:f5:6f:2b:5c:9e:fc:ae:6c:
23:18:57:6d:07:22:ae:d9:0f:51:8c:9f:19:6a:ea:
7b:d5:06:54:c0:80:fb:db:53:c0:e1:1d:76:92:83:
c9:f5:49:40:92:be:0d:77:6b:3c:7e:94:bf:0d:fb:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:67:90:E7:D6:C3:09:42:B5:93:5F:15:20:1E:F1:2F:6D:90:BA
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.227.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:e3:9c:a1:ab:65:e0:5f:10:28:36:cb:49:56:83:89:ee:98:
b8:83:3f:e1:f8:40:6c:98:12:9b:cd:b7:ba:4e:d0:30:d3:24:
25:15:8a:ec:ca:f7:1f:c6:08:6e:3e:f5:6b:88:8f:21:5f:77:
2b:40:84:40:5d:9e:03:80:08:b4:d2:73:fa:96:84:cc:dc:d7:
ca:fb:b8:34:23:0b:e0:a0:72:69:ed:68:89:56:2e:4f:02:7e:
9a:9f:4d:3c:4a:b5:e8:ae:5b:e1:79:2f:08:f2:38:93:a6:b6:
f8:36:1c:e5:33:43:da:c1:36:a6:61:83:3c:b3:ff:2e:af:6c:
87:8b:f7:5c:af:c0:1b:49:57:c9:67:ac:ec:eb:82:cd:0e:8b:
22:a9:c6:a6:44:2a:1e:87:37:0c:b5:c6:14:2a:02:c7:40:6a:
03:99:2b:58:08:e2:df:6b:4d:00:d5:20:93:33:ca:a6:3e:ac:
fd:9e:fb:23:be:a9:82:d4:d9:96:3e:c3:80:67:25:c6:43:74:
8b:95:a1:eb:49:cb:6a:31:da:81:d5:e4:df:81:f0:a9:14:24:
cb:21:c4:46:6b:dc:16:8e:8d:08:51:ad:06:1f:57:77:ea:d7:
c4:ac:4c:3b:05:b5:9e:50:55:cc:db:93:fe:41:7b:94:54:15:
3e:da:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:04:49 2025 by rpki-client