Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
File: dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa (raw, json)
Hash identifier: eCMg7iAR1vRjmkCv3R7JisdFSbwgAj30vFWegoDaovE=
Subject key identifier: 74:D2:91:03:44:5A:58:E3:76:10:76:96:3E:07:C6:EA:0E:AB:04:E4
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01D5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
Signing time: Wed 01 Nov 2023 01:31:20 +0000
ROA not before: Wed 01 Nov 2023 01:31:20 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 210.224.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:31:20 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=74D29103445A58E3761076963E07C6EA0EAB04E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:83:9e:36:91:fe:22:0c:17:57:0a:cf:b0:
2f:71:8e:3a:0a:9d:77:2d:a1:3d:a1:56:7b:e6:2c:
33:4f:ca:a3:38:c0:60:6d:a5:a6:97:87:b8:45:83:
ed:27:55:64:21:85:1b:d6:3d:f8:fb:a5:0e:ac:63:
84:73:cf:3e:8e:a5:42:fe:d8:b4:0a:2b:24:32:14:
2f:9d:48:c4:50:60:b8:78:94:cc:14:6b:92:ed:a3:
c8:bc:91:68:02:af:2b:09:3d:d9:e8:87:bf:ec:83:
1a:a0:e9:27:60:89:b3:3a:c4:12:68:99:4c:d8:bf:
07:11:90:22:2d:08:32:76:16:96:e1:b2:6d:c0:84:
fe:ef:ea:b4:c1:fc:6f:51:05:af:2f:72:61:47:e1:
d4:83:63:40:74:66:1e:49:d4:90:27:d1:53:ab:f9:
2e:69:4d:fb:11:84:b9:2e:f9:c6:d5:b7:06:7b:81:
8a:fc:a5:ac:8d:fd:91:78:29:10:cc:43:73:54:cc:
e9:04:94:1b:7a:3e:64:26:71:3e:de:77:a9:89:1c:
92:fb:29:a8:ed:4a:ac:dc:dc:59:e3:4b:1d:ab:53:
60:bf:46:e5:51:ca:4a:23:bb:46:1e:f5:6b:70:9c:
3e:99:15:5d:ae:58:d9:8b:5f:4a:49:eb:21:3d:85:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:91:03:44:5A:58:E3:76:10:76:96:3E:07:C6:EA:0E:AB:04:E4
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.224.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:16:fe:3a:85:eb:8a:be:75:89:0d:fd:0d:fd:44:ce:b9:6b:
56:fb:cd:27:83:49:41:99:71:85:b6:e1:30:02:34:87:6a:75:
5d:75:ff:d0:22:55:a8:33:21:67:a7:37:b7:b0:c8:fe:ff:59:
6c:bf:b5:b1:52:20:20:49:a6:c1:98:57:16:b3:5f:e8:a9:81:
7d:b7:a1:9a:9d:53:50:4f:55:17:fd:73:7b:f6:f1:20:02:0a:
be:3d:28:ab:4b:a3:1c:13:44:f4:f3:a7:70:89:9b:96:70:93:
e1:02:36:a5:bb:a2:e3:49:85:b6:05:e9:6a:1d:f2:9c:b7:75:
90:72:99:40:86:78:6a:f9:c8:c4:a2:10:d2:58:3a:28:fc:49:
77:77:03:b5:f9:c2:98:17:3f:a8:08:28:50:4d:4e:68:f3:64:
8f:79:06:dc:06:e0:7b:5f:7b:43:c9:da:77:88:d4:45:0f:49:
e5:c0:0b:30:51:e7:46:67:d1:29:74:75:ae:c8:15:f9:7b:72:
87:b6:5c:12:e5:d4:45:e1:e4:c9:ff:22:cd:9b:3c:03:cc:ef:
28:22:79:17:ef:38:55:06:b8:7b:e3:63:d5:14:93:d5:91:03:
4a:d9:30:d7:1e:f0:c8:06:09:15:37:ca:77:ca:8b:20:72:81:
64:9e:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:25 2025 by rpki-client