Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kEoLc8_cn7Pof86iUbx2Z3JdvQ8.roa
File: kEoLc8_cn7Pof86iUbx2Z3JdvQ8.roa (raw, json)
Hash identifier: SDmpYHMJVhIYl5Q9XFtYODR9KMlDGKNPGJqnzB+am30=
Subject key identifier: 90:4A:0B:73:CF:DC:9F:B3:E8:7F:CE:A2:51:BC:76:67:72:5D:BD:0F
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 34
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kEoLc8_cn7Pof86iUbx2Z3JdvQ8.roa
Signing time: Thu 22 Jun 2023 00:34:01 +0000
ROA not before: Thu 22 Jun 2023 00:34:01 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 203.160.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:34:01 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=904A0B73CFDC9FB3E87FCEA251BC7667725DBD0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:25:54:2e:e9:96:46:29:74:cb:f0:d9:7d:
d0:43:b2:65:21:db:33:c0:2b:9f:f8:5e:91:24:e7:
3b:4b:3d:1c:5d:85:bb:6e:31:b2:e9:af:fa:9e:4e:
83:e4:d4:13:df:8d:87:29:1d:08:83:45:92:01:51:
a6:7c:59:76:86:b9:1c:a0:d3:1a:3a:7d:df:59:df:
0a:41:6d:cb:88:47:19:4b:44:4d:c9:81:56:da:95:
b1:43:f6:b9:da:41:2f:01:43:7c:22:f4:5d:51:4d:
96:8c:6e:cb:3f:b3:f3:3c:b7:59:e9:09:ca:a5:05:
d5:a8:aa:57:62:b1:0f:91:1d:0d:4b:8e:cc:82:b1:
4f:5f:57:70:95:36:a9:75:af:bc:36:c5:1d:5a:07:
56:ea:8a:04:49:e6:c5:4f:e0:b9:ea:b7:0f:a4:70:
f3:4f:bb:b9:f9:11:3e:ff:b1:a0:df:37:95:c1:8c:
b6:27:ca:39:30:33:50:c2:54:81:1e:f0:ea:17:e4:
de:f6:b2:91:d9:2d:01:b8:2e:29:c2:e8:2e:75:83:
23:e0:db:3f:91:42:c6:95:5c:aa:f9:6f:a7:50:92:
a4:39:59:3a:d3:93:f0:24:70:b2:d7:8f:11:90:a7:
dc:47:cf:4f:2e:54:16:3a:45:41:fe:ff:ec:2b:d0:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:0B:73:CF:DC:9F:B3:E8:7F:CE:A2:51:BC:76:67:72:5D:BD:0F
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kEoLc8_cn7Pof86iUbx2Z3JdvQ8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
24:36:50:19:c0:74:b2:8c:0a:d3:07:57:c5:82:a5:fe:6e:0d:
fa:69:47:4b:51:fd:fd:9f:ba:ee:39:fd:16:97:a3:3b:e3:23:
07:2c:fc:61:c3:a6:b9:90:84:0c:d3:d9:c4:af:e3:1d:62:ba:
2c:b0:aa:a8:2f:f4:b1:8a:63:c7:19:f5:99:06:64:65:59:3a:
d6:7b:7d:74:67:fa:bf:5e:66:6a:ac:64:38:7a:1a:49:c0:4b:
44:8c:75:1e:1a:7b:54:99:ea:b7:a2:82:e5:e6:07:29:69:4d:
89:91:f7:e6:21:58:b2:ca:35:56:d9:a6:f3:f0:5d:11:b2:e5:
76:46:b7:25:e2:9b:b1:10:68:f1:f0:9b:a9:f9:3b:58:0a:cd:
63:73:74:19:b8:2d:36:cd:7e:fb:7a:da:8e:97:70:48:b2:84:
b9:c1:5e:5e:c7:25:df:04:c6:79:9a:e0:1c:ce:68:1d:53:0f:
41:76:e7:5b:7b:07:6b:42:dd:b5:28:7a:ef:a7:25:6f:b4:ca:
5c:46:62:2b:24:10:b4:54:1a:40:a8:5b:64:72:4d:46:09:2d:
81:9d:2e:57:b3:a4:b2:2e:cd:fa:f9:20:21:b1:d7:4d:50:4b:
ec:74:2e:7d:d5:0f:e9:a8:23:33:cf:52:28:ea:a0:68:bf:4e:
17:fd:13:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:13 2025 by rpki-client