Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_gomlWYyV2gtnFucb9304NUbco.roa
File: -_gomlWYyV2gtnFucb9304NUbco.roa (raw, json)
Hash identifier: n2aaj9r/EI/MjXKwgEWJN/lywc+L1eQJMk/t+MTRaWY=
Subject key identifier: FB:F8:28:9A:55:98:C9:5D:A0:B6:71:6E:71:BF:77:D3:83:54:6D:CA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0244
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_gomlWYyV2gtnFucb9304NUbco.roa
Signing time: Tue 30 May 2023 16:32:25 +0000
ROA not before: Tue 30 May 2023 16:32:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:32:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=FBF8289A5598C95DA0B6716E71BF77D383546DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:ac:b6:c0:82:bb:80:a7:11:7d:18:3e:ef:
29:cc:75:e9:97:3f:55:08:d7:b2:bb:34:68:f8:87:
09:4a:0f:48:3d:b4:83:54:dc:b8:14:0f:b4:19:7b:
ad:0c:fb:b0:b2:b9:3d:c9:58:f4:e9:2d:a5:93:09:
4b:a0:e7:e5:96:c9:bc:5a:ee:c2:c4:2a:61:9e:8b:
97:95:53:f2:93:e0:f7:50:7b:1e:1c:6e:2c:35:9c:
f9:d1:7d:0f:a4:45:ad:38:74:60:e2:9a:59:70:f9:
e7:49:14:26:2a:56:0c:5e:09:85:b8:27:db:aa:c3:
e5:e3:7a:80:7a:63:3a:11:b7:c3:82:14:6e:7d:6e:
4c:82:a1:7b:31:12:83:1e:f2:21:41:9f:43:7e:39:
85:f6:6e:b3:06:b8:b4:b4:3c:19:1d:e1:0a:34:1e:
c1:2c:0d:dc:7c:5f:0c:cf:03:0d:e3:6d:4f:e0:95:
67:d8:d8:47:87:54:1c:21:93:92:b4:68:df:61:77:
2a:1a:fe:5c:b2:eb:7e:54:b0:e3:84:b3:78:eb:15:
99:37:01:39:c1:93:af:8b:e5:18:87:78:ad:38:2b:
f0:be:51:d9:60:ea:76:2d:5f:4f:50:0a:e0:31:ac:
e2:f7:f0:c9:96:c0:91:34:f7:be:e4:d6:e2:23:5d:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:28:9A:55:98:C9:5D:A0:B6:71:6E:71:BF:77:D3:83:54:6D:CA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-_gomlWYyV2gtnFucb9304NUbco.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.112.0/20
Signature Algorithm: sha256WithRSAEncryption
48:a8:56:02:05:de:63:1f:37:46:d2:f6:99:fe:55:3a:d7:91:
26:1f:66:a2:9d:c2:12:28:bf:98:de:0f:99:72:b4:8d:49:60:
bf:42:6c:f5:6b:08:de:89:28:7e:1e:25:8a:f1:02:4e:8f:f9:
a8:75:aa:7d:86:4c:9c:fe:32:3c:b0:ab:5f:db:a4:be:0a:89:
74:b5:f0:a1:b8:33:c5:00:70:7d:8c:cf:d7:47:d0:1e:48:b4:
ec:94:6b:b1:70:8a:73:c4:4e:93:0a:a2:b2:fd:8d:3d:99:e1:
32:2d:26:f1:53:17:23:04:3f:fd:5b:5b:87:a0:18:36:9f:dd:
ba:e7:26:9b:e9:58:b3:6f:a9:78:e6:13:36:59:86:38:1a:cc:
d8:75:8f:f2:57:e7:43:2d:9b:07:49:35:8b:07:17:91:05:93:
90:6b:ac:1e:f5:98:e5:12:58:3a:19:b0:22:61:05:1f:b9:aa:
73:d6:a6:a8:bf:bc:e1:0c:22:ca:cf:84:70:b2:6d:33:ae:fd:
b6:93:0a:a8:1f:42:34:a4:18:aa:f3:6a:88:9f:8d:ee:9a:b1:
a0:90:98:71:7d:25:27:68:74:b3:1f:a5:b4:a1:a2:d4:c9:ad:
28:b5:1e:4e:5e:e0:f2:48:04:4d:c7:d9:71:73:35:3c:09:15:
f0:33:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:43:14 2025 by rpki-client