Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KdJWZQlB3a6cxMSPOl6lCEO15WA.roa
File: KdJWZQlB3a6cxMSPOl6lCEO15WA.roa (raw, json)
Hash identifier: jMt+u6arExwzzF+bchyyWzn93gskodhh+lpMaj+M5R4=
Subject key identifier: 29:D2:56:65:09:41:DD:AE:9C:C4:C4:8F:3A:5E:A5:08:43:B5:E5:60
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 020F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KdJWZQlB3a6cxMSPOl6lCEO15WA.roa
Signing time: Mon 20 Feb 2023 07:57:38 +0000
ROA not before: Mon 20 Feb 2023 07:57:38 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.92.201/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:38 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=29D256650941DDAE9CC4C48F3A5EA50843B5E560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:8e:fe:ae:04:f2:88:5d:43:36:71:f1:39:
e8:fb:71:75:a0:11:4f:64:3f:35:95:47:e8:21:94:
89:7e:56:6a:b3:62:b2:94:3f:b5:17:f4:d7:23:04:
f4:f9:b5:5b:bd:8d:c3:6b:e7:27:28:74:ac:57:4c:
c4:05:e9:3a:63:dc:95:37:cd:6d:0c:c4:bc:b4:63:
1a:9a:c1:15:49:4c:bb:60:14:22:6d:f9:75:25:a1:
0f:91:f1:df:22:3e:a3:89:d2:34:06:bc:5b:50:af:
94:13:d3:cb:3b:a8:cc:be:12:a7:fc:60:dc:2d:45:
74:f5:c4:8a:09:44:cf:04:88:7a:0c:15:dd:6a:9d:
b1:61:df:d8:d7:f5:ad:e2:69:a9:5b:e5:b6:25:01:
28:29:c8:83:10:fd:27:f2:35:27:5e:cc:d9:9f:80:
0f:3f:53:10:61:f5:7b:81:1c:22:ca:d9:66:10:32:
7d:25:fe:2d:97:51:67:e9:f0:b7:ea:aa:0c:e5:5b:
34:0b:16:26:4b:26:12:5e:e4:99:67:5c:8c:b8:dc:
02:f8:7c:a3:e4:e9:e6:bf:97:bb:ad:e3:89:ab:3e:
75:62:77:aa:74:f7:ca:e8:6a:ed:44:0a:c3:07:5d:
18:83:8f:38:2c:af:df:60:54:87:66:01:81:5e:05:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:56:65:09:41:DD:AE:9C:C4:C4:8F:3A:5E:A5:08:43:B5:E5:60
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KdJWZQlB3a6cxMSPOl6lCEO15WA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.92.201/32
Signature Algorithm: sha256WithRSAEncryption
63:8d:86:41:2e:0c:66:16:ae:e6:2d:c8:35:fd:53:2c:15:0b:
a1:c0:05:e3:02:7d:61:74:6a:42:a6:38:e6:53:ef:90:66:fe:
7f:ce:7b:62:3d:b3:5a:a7:c7:ee:fe:ae:d9:96:23:79:02:64:
0b:e7:25:5d:c9:5d:05:62:74:93:52:a1:1a:e5:a0:35:45:1c:
6c:14:1c:b1:f0:10:d0:c7:1c:7f:e3:7e:b6:4e:56:6e:a8:e5:
b0:09:5b:1a:c6:4a:bb:c5:30:7f:3c:df:bf:09:1a:83:b6:4e:
fe:c9:f0:de:e4:65:01:38:54:22:59:fc:c8:51:4c:11:55:fc:
cb:8b:67:2d:12:40:53:85:61:a5:de:1a:ff:d4:f3:fc:23:67:
2b:39:cf:6b:fa:53:41:2e:e0:8f:2e:f0:d0:e3:13:6d:82:86:
94:8e:12:29:b6:f3:c6:24:3c:e7:a6:ed:ee:14:b7:c2:fa:6b:
d1:69:a9:0a:0f:37:1f:a1:75:59:94:ce:8f:32:8f:33:1a:ed:
b2:28:e5:c8:90:40:58:f4:b6:4a:93:33:b9:d7:74:29:4f:40:
39:c9:77:ca:f5:65:6a:99:96:29:b9:84:82:26:cf:ab:99:a5:
ad:cb:ba:ff:01:27:27:d3:7c:56:71:79:9f:c2:52:ee:94:26:
26:39:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org