Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
File: tScTorGllCuTb4a1IxX1JXDpj6g.roa (raw, json)
Hash identifier: D9hoBL7ixFc4rHgS3Opj+KLeKnt7EO3W/Q/u9KXPG94=
Subject key identifier: B5:27:13:A2:B1:A5:94:2B:93:6F:86:B5:23:15:F5:25:70:E9:8F:A8
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 1C
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
Signing time: Wed 10 Jan 2024 01:02:59 +0000
ROA not before: Wed 10 Jan 2024 01:02:59 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 157.120.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 10 01:02:59 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=B52713A2B1A5942B936F86B52315F52570E98FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:c1:88:dd:78:62:c9:dc:b8:e0:3d:8e:a5:
63:06:7d:90:d2:4d:5a:06:15:67:72:b7:53:43:1e:
7b:a3:93:1a:21:15:4a:60:7b:01:1d:59:f2:1d:c7:
44:5d:ec:9f:e9:15:c1:13:93:ca:d8:98:4f:1f:9a:
10:eb:df:1e:37:39:5c:b6:05:e4:40:7f:ce:5e:19:
8b:1a:45:ad:cb:7e:08:47:3e:9b:79:50:ad:78:79:
f5:b3:3c:c1:97:e2:28:27:8b:3f:79:4d:55:94:79:
92:16:ba:51:8a:00:c7:bf:73:fd:bc:04:50:cc:5a:
cd:a3:0f:c7:9e:b1:9f:b5:20:97:8a:86:46:50:5c:
0e:d1:a2:9e:f9:88:ff:44:2e:ec:f1:f7:d9:d7:c6:
32:00:36:9f:24:0e:cc:88:88:54:91:7d:ec:f0:45:
67:3c:3e:05:b0:5a:8c:5a:6e:01:ba:fa:e2:88:9f:
0a:66:23:7f:2a:a5:8e:c6:07:a4:78:97:c4:17:91:
5c:db:b0:43:4f:0e:d2:b7:64:1d:05:9c:88:60:be:
e6:6f:0c:a1:df:9c:66:5a:bf:64:78:6b:c1:54:87:
c3:74:e3:a3:5b:57:71:6d:18:84:c0:68:0b:90:9d:
f4:c3:8b:75:e1:4e:4f:20:d2:40:24:bd:d1:43:bb:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:13:A2:B1:A5:94:2B:93:6F:86:B5:23:15:F5:25:70:E9:8F:A8
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:44:63:03:40:50:75:e2:f9:5e:fd:e3:2d:d1:3d:2f:87:da:
66:80:2d:7e:ae:14:bb:b7:f6:35:8d:17:2b:e3:a6:08:34:60:
8d:43:08:f0:c7:e2:89:80:3d:c9:43:eb:bc:45:a8:58:91:b4:
2c:f0:a1:2b:91:54:6d:3d:af:d4:6b:97:cd:8d:df:db:3a:e5:
43:82:fd:6e:31:78:68:31:79:de:dd:38:d6:b7:ca:66:1a:c7:
c5:0b:e8:b1:f2:5e:c9:43:66:43:92:5b:37:0e:06:78:a1:5c:
9a:46:65:8a:22:bc:33:44:f1:b5:8c:f7:ed:41:d4:d2:95:7e:
35:7f:ba:3c:d1:61:c6:98:34:51:ea:88:92:e7:b7:eb:f7:b0:
81:25:e3:7f:b3:9e:19:94:8c:0b:cc:76:33:83:a9:4b:14:ca:
d3:df:b0:b8:ac:0c:49:90:3f:c1:fd:c0:74:e9:07:1f:72:78:
26:3d:d8:30:36:13:8d:36:9c:ef:28:2c:ee:c8:8e:c6:62:cd:
61:b1:04:d3:df:b4:e8:c9:95:18:2e:ff:d6:2c:97:0a:87:f7:
6d:69:c9:54:02:0b:76:6f:fb:bf:94:22:2c:26:56:ff:ae:9d:
41:0d:be:5a:ef:53:0f:2f:0a:46:b7:66:8c:cd:b2:ba:fe:22:
ae:cc:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:02 2025 by rpki-client