Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/nOSesJSx1MZXrQ7Z250xCfqiGaQ.roa
File: nOSesJSx1MZXrQ7Z250xCfqiGaQ.roa (raw, json)
Hash identifier: 09eVsMyawdwQv3lO6Rk95KhGCTQqeqXdSMItfG7LrIM=
Subject key identifier: 9C:E4:9E:B0:94:B1:D4:C6:57:AD:0E:D9:DB:9D:31:09:FA:A2:19:A4
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 5D
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nOSesJSx1MZXrQ7Z250xCfqiGaQ.roa
Signing time: Wed 01 Feb 2023 01:30:03 +0000
ROA not before: Wed 01 Feb 2023 01:30:03 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 9351
IP address blocks: 61.125.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Feb 1 01:30:03 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=9CE49EB094B1D4C657AD0ED9DB9D3109FAA219A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:d9:e1:16:39:7e:8f:d2:d9:ca:1e:fe:f1:
32:b9:a8:ae:98:ec:4e:ae:a3:5c:05:6c:c8:cf:68:
69:0f:bf:ff:b1:bd:ef:28:e9:14:f5:50:c9:65:da:
8b:3a:46:14:b0:6c:dc:03:cf:f9:be:4f:a7:a3:51:
bf:09:09:83:86:64:8d:3d:05:5e:6f:8f:93:42:fd:
c3:42:23:5a:86:bb:45:3a:fc:6c:35:3e:39:e6:92:
90:98:d3:fe:16:fd:c1:09:16:a2:53:e2:9f:32:08:
a0:d1:31:ae:a7:82:d3:4f:bd:f6:df:46:66:42:97:
3e:a3:ca:35:88:57:a3:d5:57:2d:c6:8d:2b:e1:ec:
4a:7f:72:b3:0c:2d:0c:d3:41:57:ec:1d:70:83:20:
92:41:d9:d2:dd:f1:74:2b:78:6c:a2:af:a8:20:5b:
1d:31:17:84:6c:5e:91:4d:df:b9:8e:5d:ab:1b:41:
53:e3:42:5c:3a:17:4c:de:f9:7e:f2:78:90:e0:14:
9d:ae:cb:f1:7e:4f:94:f5:9f:23:b1:d6:51:ff:c2:
0b:0c:4e:06:9e:d9:ba:34:e9:b2:26:a9:a1:31:32:
2d:6a:be:42:14:8f:62:30:29:51:95:de:9d:d2:ae:
96:45:db:2e:3c:fc:5a:57:02:11:bc:93:e7:2b:6b:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:9E:B0:94:B1:D4:C6:57:AD:0E:D9:DB:9D:31:09:FA:A2:19:A4
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nOSesJSx1MZXrQ7Z250xCfqiGaQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.125.144.0/20
Signature Algorithm: sha256WithRSAEncryption
57:a2:cc:9f:ea:e0:5a:a4:b3:b4:fb:e3:60:86:b5:21:c3:6a:
b8:0c:86:e9:e8:68:04:de:d7:2c:6e:61:34:17:3e:a4:80:45:
35:cc:5b:6c:61:a1:9c:43:b5:9b:93:64:32:ed:4c:4c:d2:20:
a8:35:0a:55:3f:81:6e:dc:ba:f1:39:08:b4:54:2f:e5:f1:b0:
42:5b:95:61:6c:4f:42:3d:bf:ff:56:8a:8e:9c:12:46:52:63:
00:15:79:76:cc:02:4d:49:77:77:94:07:55:d0:0f:7d:b7:e3:
a3:99:80:70:90:65:f7:1c:ca:9f:f8:a5:f9:f5:b7:4a:57:b8:
3e:27:34:5d:dc:50:3c:21:8e:14:c5:7c:ee:cc:31:34:16:b1:
8e:07:27:51:f4:8d:1a:99:49:2b:bd:a5:06:90:d3:0b:9e:10:
63:a6:e4:bb:f3:50:ad:a3:4f:9d:92:a8:61:fa:5b:a8:42:72:
76:b3:52:52:f3:13:73:64:73:a8:31:1a:53:fe:88:13:71:44:
d8:b0:f5:03:8d:2c:8d:e2:b3:53:1c:62:5e:f3:29:3b:61:33:
c4:f5:a7:78:8c:72:7b:a1:dc:46:20:4f:d9:c6:a0:46:d2:21:
a1:b9:e0:de:87:3f:c1:95:3d:18:44:fe:f3:f8:0c:17:32:42:
18:b5:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:03 2025 by rpki-client