Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/fXBEgRVlYRpNW9nJu-x3lbWmAF0.roa
File: fXBEgRVlYRpNW9nJu-x3lbWmAF0.roa (raw, json)
Hash identifier: qWCaGVaT+iHcKzbHCrjNhMoRQ7gCRgoXWjUtpqObsSc=
Subject key identifier: 7D:70:44:81:15:65:61:1A:4D:5B:D9:C9:BB:EC:77:95:B5:A6:00:5D
Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Certificate serial: 0F
Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/fXBEgRVlYRpNW9nJu-x3lbWmAF0.roa
Signing time: Fri 29 Sep 2023 07:00:42 +0000
ROA not before: Fri 29 Sep 2023 07:00:42 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 2405:ed00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Validity
Not Before: Sep 29 07:00:42 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=7D7044811565611A4D5BD9C9BBEC7795B5A6005D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:a2:0d:38:f8:da:7b:c9:ea:c4:f0:e3:d4:
ae:f2:5e:ce:06:c4:13:77:df:1f:94:70:34:fd:71:
fd:0d:12:54:44:7a:a4:59:21:5c:2b:26:7d:d5:99:
fd:85:40:46:5f:56:57:18:58:a1:78:cc:cf:6b:f6:
3f:55:f5:a7:01:04:45:57:e3:4a:2a:43:a9:d2:f5:
89:62:34:69:c2:1b:d0:73:8a:b0:7b:d8:81:84:59:
45:0f:b0:94:51:9d:f3:24:7a:ba:8d:0b:df:2d:f6:
a9:ae:72:e8:45:fc:39:95:0a:e9:36:70:a3:f4:0b:
85:20:f2:eb:f2:70:86:fa:dd:d5:ee:ce:a7:4b:f8:
58:f2:26:f1:3b:07:34:fd:62:fa:44:ad:8b:ce:cb:
9b:d2:a9:2f:96:61:ec:1f:08:ba:37:8f:fd:21:16:
fd:1d:23:99:12:ff:f3:a7:f9:9c:f9:9d:f7:81:e7:
b6:cb:76:2f:cc:ae:fc:5c:50:fc:28:19:b6:45:d6:
72:2d:a2:12:75:98:95:6b:d6:0f:c4:14:b0:34:db:
8c:01:e5:79:e0:e8:5a:19:ae:1d:02:8e:46:af:43:
ac:22:b7:1c:7a:e1:e8:56:31:28:c6:ff:37:2f:26:
25:3b:c3:86:db:20:90:a0:ed:e1:f2:14:14:bc:54:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:44:81:15:65:61:1A:4D:5B:D9:C9:BB:EC:77:95:B5:A6:00:5D
X509v3 Authority Key Identifier:
keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/fXBEgRVlYRpNW9nJu-x3lbWmAF0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
3e:0b:91:d4:7f:69:06:ec:fa:f1:1a:e6:0a:34:23:42:c6:82:
87:df:40:b9:b3:83:99:9d:9d:a1:54:47:af:b9:41:dd:87:3b:
51:06:1f:2b:bc:f7:60:52:03:e7:05:e1:b4:65:81:bc:b0:6e:
fd:98:81:44:ba:6a:a4:eb:25:6e:e7:05:3a:90:e8:8d:52:8a:
fd:4b:b0:06:da:9f:70:2c:40:4b:4b:44:5c:f5:3e:ff:dd:91:
3c:35:ca:11:23:d8:ad:c9:91:c7:8e:59:0f:e9:d4:39:5f:60:
f1:e2:9c:09:3d:8a:da:ca:b4:31:cc:66:f3:8c:c2:e6:48:bc:
48:15:3b:b8:d7:e7:71:48:cb:85:a5:b7:9e:40:79:80:7b:3a:
3a:c2:f5:52:fe:1c:cc:97:ed:c0:6d:83:9e:8e:9e:2d:66:40:
ec:14:a7:0a:b7:a0:48:1c:95:d7:4b:5a:d2:12:24:45:91:1a:
6d:a0:dc:51:8a:75:80:a0:a6:d8:a9:23:ea:03:87:68:80:21:
94:01:79:26:b5:9a:50:1a:38:03:06:74:9b:0d:7b:eb:6b:2d:
8d:39:fa:26:fe:d1:25:35:31:3e:43:57:93:cc:ae:a8:e1:6e:
18:40:eb:71:8f:3d:40:eb:31:35:25:9a:d1:fa:8a:e4:e9:8c:
36:fb:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:41 2025 by rpki-client