Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa
File: IijCDX2r60IB6_73_KbKNGP0mjQ.roa (raw, json)
Hash identifier: 5IXh0Ok+fvVI/Quq//BTnDEz4PnL6l88uqaJ7hBBvXw=
Subject key identifier: 22:28:C2:0D:7D:AB:EB:42:01:EB:FE:F7:FC:A6:CA:34:63:F4:9A:34
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 11
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa
Signing time: Thu 16 Nov 2023 02:56:43 +0000
ROA not before: Thu 16 Nov 2023 02:56:43 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 23783
IP address blocks: 219.124.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Nov 16 02:56:43 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=2228C20D7DABEB4201EBFEF7FCA6CA3463F49A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:28:92:16:45:f5:3e:fb:ae:38:7f:92:d6:
1e:73:ea:7c:b4:2e:c2:95:f9:41:69:0d:25:92:3e:
c7:15:62:70:b6:1e:92:55:e2:e9:ad:67:a4:9c:e3:
eb:30:14:2a:43:69:a2:1f:bb:68:2d:5c:fc:9e:52:
34:a5:99:6d:76:98:60:e0:61:c9:6a:93:e0:ad:30:
0d:1b:e7:0b:03:12:ab:6a:cf:e3:51:4c:00:59:1b:
d5:9c:a5:1a:9b:95:b2:d7:ce:7e:ac:82:48:d2:90:
b4:a2:50:19:6d:40:53:af:29:4c:c4:74:13:95:8a:
36:f9:0e:be:0c:26:74:a8:06:f3:20:0b:46:12:89:
15:01:74:dc:af:52:03:4a:4f:ea:e0:7e:5b:f0:fc:
e8:e5:3a:0e:71:c7:29:aa:7f:77:0d:74:4a:fd:f5:
70:0c:4b:61:dd:98:01:8b:39:f9:90:64:78:c3:65:
56:1b:ee:cc:62:6d:84:1a:0c:66:38:01:72:1e:1b:
a0:ca:0e:b8:d0:02:5b:b8:c4:cc:89:06:f1:97:77:
6f:9f:ef:1f:f6:4c:8b:9b:8b:ae:d5:c1:f4:a1:72:
03:81:30:64:7c:5b:a5:9f:72:8d:87:2a:e2:b8:79:
62:91:0d:5e:da:64:b1:01:92:58:80:b8:48:96:20:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:C2:0D:7D:AB:EB:42:01:EB:FE:F7:FC:A6:CA:34:63:F4:9A:34
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/IijCDX2r60IB6_73_KbKNGP0mjQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.124.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:8c:af:bd:11:2e:98:56:bb:6f:1c:f6:c4:0a:82:1d:8b:da:
20:10:6e:57:0e:2c:a9:b0:d5:8b:b8:f2:65:24:0b:a0:d8:d4:
b2:73:68:7f:6a:4b:5a:01:10:1d:4e:f5:20:0e:14:7e:11:d6:
d0:ad:e6:5b:72:27:dd:70:03:eb:e2:83:86:d7:8b:c8:0c:10:
e9:0c:52:91:41:b1:a4:f1:2b:ff:41:a7:27:fb:7a:61:e0:f4:
61:10:6f:e0:a4:b4:0d:4c:82:1c:03:3c:cf:31:94:ba:e4:22:
4a:68:fb:1c:9c:91:06:08:67:4e:ed:bd:21:58:94:ac:00:75:
b6:9d:39:b9:b5:1b:23:82:29:db:8d:e1:38:41:0e:f2:09:5a:
80:69:6b:6b:12:52:9e:a1:b9:c3:0b:59:5b:9a:12:14:13:4e:
bb:c2:3b:71:ed:0f:1a:74:81:76:43:d7:0a:f2:65:45:54:97:
5e:6f:9a:d4:4c:b7:cd:04:6d:1d:93:59:52:22:06:13:55:c8:
51:41:3a:08:c0:b0:f1:1c:77:62:8e:92:b3:70:ff:bb:03:54:
c0:e5:3d:ed:fa:34:64:51:f8:1e:98:f1:52:11:4c:68:1a:23:
06:54:76:b1:33:9a:7b:d1:64:29:13:e8:a8:f1:bc:7b:38:e7:
df:33:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:36 2025 by rpki-client