Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eAl-xr1I6Kafq7yZY-iYRKR2yjo.roa
File: eAl-xr1I6Kafq7yZY-iYRKR2yjo.roa (raw, json)
Hash identifier: qqYvOPP9bGImjRvYEVZKSn/CbhVuVN0YPPlF6LeqcD0=
Subject key identifier: 78:09:7E:C6:BD:48:E8:A6:9F:AB:BC:99:63:E8:98:44:A4:76:CA:3A
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01AD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eAl-xr1I6Kafq7yZY-iYRKR2yjo.roa
Signing time: Mon 20 Feb 2023 07:53:13 +0000
ROA not before: Mon 20 Feb 2023 07:53:13 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.250/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:53:13 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=78097EC6BD48E8A69FABBC9963E89844A476CA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:9c:cb:8c:46:0f:11:d6:10:1c:41:09:20:
1a:ee:21:00:21:be:c3:63:76:ba:f4:7e:05:8a:a3:
6d:c8:bc:51:a2:22:f3:3b:38:ba:11:9c:71:63:40:
8c:36:02:4a:fd:51:80:cb:46:00:b6:77:a4:11:b2:
05:f9:d7:28:5a:47:b0:3b:4b:6b:94:dd:d5:01:e3:
af:20:b8:28:e5:ab:8e:0c:64:68:f5:d8:5b:53:b4:
b0:df:51:b1:f0:2c:73:59:82:56:a5:1c:1e:77:2e:
64:94:7d:94:8b:30:3f:b0:2e:a9:ef:47:eb:c0:73:
bf:54:0c:9c:61:74:22:cc:32:e2:80:ad:96:54:03:
9b:32:33:7b:29:4c:5c:66:9b:4d:19:2c:f9:d0:40:
f9:a7:d1:ad:c7:28:a4:1b:8d:8d:d9:f4:57:8a:30:
3e:94:33:7c:ed:26:12:10:e8:6d:4b:c0:a5:f8:d9:
8b:bb:6f:88:8e:26:e5:37:50:57:91:72:9e:f2:c6:
d8:37:72:d1:45:12:11:f0:17:03:db:32:2e:65:8c:
e4:c3:60:b6:bf:11:7e:14:ee:0b:32:b3:b0:ce:f7:
8e:e6:57:67:2b:35:79:29:36:b9:1f:f3:8f:92:b3:
69:29:60:ed:da:6b:d2:a4:ab:9e:7c:d2:2f:fc:d8:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:7E:C6:BD:48:E8:A6:9F:AB:BC:99:63:E8:98:44:A4:76:CA:3A
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eAl-xr1I6Kafq7yZY-iYRKR2yjo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.250/32
Signature Algorithm: sha256WithRSAEncryption
ad:65:b5:a9:08:0d:7c:6b:e5:56:84:75:5b:18:0e:0b:cc:fd:
11:b4:a9:fa:0c:39:ea:f5:8a:16:92:71:8c:b0:e7:f1:47:26:
c1:36:2e:3f:ff:d9:83:bf:8a:70:81:90:ad:d1:0d:89:94:85:
1e:ea:79:88:1a:4a:7a:41:f3:ad:e7:dd:2d:a0:a0:a6:2e:02:
14:a1:3c:74:10:c6:b7:fc:2b:48:57:f4:87:aa:49:8d:6e:e0:
1b:c9:8e:c9:49:24:75:52:fd:8f:ac:8e:62:cc:36:3b:d0:80:
90:a4:13:fb:46:1b:4c:72:4d:15:b9:05:bf:a1:94:2a:69:c6:
86:61:87:2b:aa:92:5b:4d:3f:35:a5:e7:b7:74:83:98:e6:0e:
ed:b6:1e:a8:62:b3:9c:49:61:95:a4:5b:91:7a:1f:99:4d:9a:
a4:b7:05:11:34:1e:3b:b2:a0:f0:b2:21:2e:e9:40:19:fa:78:
62:30:4e:5f:5a:6a:fb:17:b5:9e:8f:d2:0c:29:19:71:46:2b:
df:86:d5:bb:66:0b:52:8d:78:8b:48:3b:4e:9c:2c:b7:ad:12:
67:69:7f:f3:8e:54:20:95:9a:74:13:d7:ed:8a:af:47:6c:6f:
32:04:31:f1:be:2f:d0:72:36:58:49:cf:80:29:49:7f:5a:64:
52:23:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client