Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
File: SQpxKVIicQyESomyJ6WJr47TNRo.roa (raw, json)
Hash identifier: wAPfkuzaAHAYgJzil7blDKqL2bjHJHaUoyfLVgb+MpE=
Subject key identifier: 49:0A:71:29:52:22:71:0C:84:4A:89:B2:27:A5:89:AF:8E:D3:35:1A
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0377
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
Signing time: Thu 09 Mar 2023 07:22:55 +0000
ROA not before: Thu 09 Mar 2023 07:22:55 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Mar 9 07:22:55 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=490A71295222710C844A89B227A589AF8ED3351A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:88:85:fa:ff:c3:9d:3e:bd:75:7d:de:67:
d0:0e:e3:0f:f1:53:c0:30:87:59:9f:98:bb:fa:dd:
af:fe:46:20:e5:e9:b3:98:53:d7:d2:09:7c:58:c1:
1b:51:75:27:92:f5:ca:32:7f:17:f0:62:f4:ce:e7:
fa:78:81:04:2e:65:b9:7f:2d:73:05:1d:a5:fc:97:
b7:54:d1:e2:fa:17:c5:b6:b9:f3:6c:2a:3e:ca:fa:
24:0e:a9:83:36:f7:24:c4:e1:c1:92:f5:d0:cd:6b:
fd:d1:61:a4:24:eb:56:4d:d0:9a:35:72:84:f2:61:
0f:a6:53:1b:c5:36:56:de:08:64:d9:aa:e2:68:50:
d8:f1:b5:59:47:53:fb:87:36:81:af:46:0b:35:de:
55:c3:ab:3d:b7:15:15:bf:05:05:d6:ea:c4:1d:bd:
79:dd:24:53:87:9e:0f:f9:94:26:20:4c:31:eb:f7:
49:0f:a9:95:05:fa:7a:99:81:50:d1:44:1f:22:f5:
75:6a:9c:4c:38:a8:df:12:a3:ce:d0:db:08:98:2d:
86:14:a0:ec:8a:c9:99:37:3e:2b:81:be:ad:e1:c3:
ce:bf:88:4f:c9:e7:f6:8a:85:32:71:d7:ce:de:9d:
75:53:63:34:47:b8:36:e3:ee:d8:56:67:ba:aa:8d:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:71:29:52:22:71:0C:84:4A:89:B2:27:A5:89:AF:8E:D3:35:1A
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0a:76:34:2e:79:86:31:f0:4e:f6:55:03:09:b1:69:03:de:
85:7f:cc:75:96:b9:a0:d3:a8:67:cf:d5:5c:2c:6e:0d:30:69:
da:39:b3:24:f1:d9:3a:04:c7:06:d1:d5:87:48:bd:6d:e3:88:
be:6b:a4:15:82:f9:4e:b3:da:5e:c1:17:c0:18:93:aa:7c:f2:
b4:8a:e8:89:0f:8c:d3:53:ac:a6:4a:5b:e0:c5:8e:e7:08:47:
7a:80:b5:00:8e:e2:7c:0b:af:26:c6:db:a6:f2:71:ca:e9:0d:
5f:42:be:85:e1:4a:2b:31:29:3b:40:cf:8e:bb:b9:9e:fe:b1:
24:1b:1a:16:d1:a8:52:fa:47:2a:97:5f:43:1c:06:ea:c0:16:
59:af:ae:aa:ba:c7:26:08:fe:8d:cd:52:cf:a9:9a:5f:0c:0d:
ff:90:75:de:34:90:85:e9:21:d5:a3:49:4d:65:f7:76:fc:9d:
1c:db:9a:3d:94:51:0a:18:dd:f2:89:1a:4c:19:59:55:e9:12:
1e:eb:77:e0:57:44:d9:42:4d:3a:07:14:27:ba:71:25:c7:0e:
7b:c7:03:23:f9:63:3c:e3:58:c9:3b:4d:5c:5d:e2:d9:9a:76:
41:8d:40:46:29:35:df:4f:95:6e:3e:c1:11:3d:c4:d3:ea:da:
0c:ba:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:32 2025 by rpki-client