Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
File: okUGfK7tzyKi8iRHeenj7C2MTSw.roa (raw, json)
Hash identifier: z9VJkEdzQSixuwW7u28BcQlvinxjoWltC2fJ/AD4JZg=
Subject key identifier: A2:45:06:7C:AE:ED:CF:22:A2:F2:24:47:79:E9:E3:EC:2D:8C:4D:2C
Certificate issuer: /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial: 17
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
Signing time: Sat 01 Apr 2023 01:28:03 +0000
ROA not before: Sat 01 Apr 2023 01:28:03 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 131929
IP address blocks: 103.108.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Validity
Not Before: Apr 1 01:28:03 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A245067CAEEDCF22A2F2244779E9E3EC2D8C4D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:80:39:d2:7e:99:04:88:e2:26:a3:be:36:
c0:92:76:a0:16:bc:75:eb:40:d5:54:50:fe:10:4e:
68:76:f1:a7:29:15:1d:89:38:bf:6b:3e:60:b7:46:
03:3d:c9:6b:76:e3:60:53:43:d8:8b:68:7e:8c:48:
da:11:90:f2:11:f6:00:3d:6f:e2:ff:09:d6:59:49:
9c:53:9e:6c:4d:44:8f:f3:59:e1:da:e9:23:db:26:
3e:0f:70:88:a9:88:f1:42:3e:69:a1:cf:ff:56:97:
80:e6:38:bf:1e:3d:5f:dd:23:9a:48:3f:cf:37:71:
8e:37:2d:37:01:1c:f7:78:dc:2e:f7:2f:5b:87:88:
e9:5f:b9:4c:42:12:2d:4e:bd:43:1c:dc:b9:d3:0d:
1f:1c:4c:da:75:4f:55:fe:0a:e6:b1:0a:4c:f3:a4:
14:d1:19:e6:58:66:95:40:3a:21:05:c0:92:e4:65:
e3:37:bd:7d:76:a5:ee:78:20:20:f0:00:df:a2:a2:
a2:14:be:c1:bb:2e:ab:07:86:c2:24:a8:f5:cb:a2:
a2:10:46:b2:a9:29:eb:0f:6c:e4:a4:2c:20:2f:35:
f9:dc:54:f7:92:25:9c:ba:31:87:d3:7b:db:48:db:
58:bb:bd:01:14:24:df:16:6d:a3:4e:45:4f:cd:f6:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:06:7C:AE:ED:CF:22:A2:F2:24:47:79:E9:E3:EC:2D:8C:4D:2C
X509v3 Authority Key Identifier:
keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/okUGfK7tzyKi8iRHeenj7C2MTSw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.232.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3e:01:99:62:be:45:15:54:b5:41:f9:2b:77:01:95:44:c1:
91:0a:a2:91:8e:e4:81:80:17:cb:e0:3c:83:5b:13:3f:49:66:
88:9a:2c:9b:7e:6e:f3:47:b0:2d:0e:6e:83:4d:2d:c0:eb:08:
22:a3:b5:83:f8:27:90:8c:c2:8e:a2:aa:65:95:56:35:fe:1a:
ad:6d:92:23:78:63:a0:24:45:9f:43:05:14:5a:c7:d4:24:9c:
d3:99:f8:42:c3:0d:77:12:d9:f1:e4:9c:b6:23:e1:e0:59:d0:
3b:74:50:3a:0d:23:7e:af:e6:40:c2:c5:3a:c9:38:e8:12:25:
b5:74:b0:1e:a4:7e:81:92:f5:a3:de:2f:4f:27:5c:d3:89:a8:
76:4d:31:67:b1:4d:bc:a3:c4:1f:77:19:37:13:c9:32:5f:56:
a2:8c:9e:41:33:8f:e1:30:95:c9:e6:52:05:5e:d8:7e:8e:53:
2d:53:2a:38:ef:8f:6b:2f:27:52:36:5e:aa:c3:61:8f:d3:bb:
2c:ce:ec:26:96:88:34:d0:49:df:0c:96:b5:e8:a1:7a:15:a1:
e1:64:c9:a4:73:1d:9e:08:8d:9b:05:71:42:95:1e:23:19:7b:
a7:4b:c4:98:07:69:dd:ff:c0:79:8a:1d:16:69:5a:bc:a2:ef:
3a:3d:a1:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:42 2025 by rpki-client