Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
File: WjV1032ohPHFHD9Z42LcNmaacF4.roa (raw, json)
Hash identifier: cu/x4J0MRRG06bMOfxelxr019v9Oorq2lhMJjmQASCY=
Subject key identifier: 5A:35:75:D3:7D:A8:84:F1:C5:1C:3F:59:E3:62:DC:36:66:9A:70:5E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 045D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
Signing time: Thu 27 Jul 2023 16:43:19 +0000
ROA not before: Thu 27 Jul 2023 16:43:19 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:43:19 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=5A3575D37DA884F1C51C3F59E362DC36669A705E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:35:03:99:e6:d1:dd:12:51:82:51:0e:c2:
a0:f4:d2:cd:84:78:06:22:5d:7a:b0:f0:aa:61:2e:
c7:bd:87:83:e6:1b:c9:14:5c:41:8f:92:bf:92:6f:
b8:b2:58:4a:39:1c:b4:9f:78:5b:c7:bb:39:84:1b:
a9:1a:b3:26:92:13:21:a0:13:72:fa:78:67:ed:7c:
48:8a:3b:8d:d4:32:12:13:53:55:18:0f:2f:9a:10:
e4:fb:1f:ea:e0:d6:63:cb:14:d3:87:17:c8:19:61:
ba:5c:2a:99:9a:d6:f0:93:e2:40:7b:b2:c5:53:34:
5c:7b:89:10:6d:8b:46:5d:ed:12:e8:c9:c3:5c:c8:
ad:1a:ec:0f:74:d6:63:f3:62:dd:70:cd:bb:23:d1:
fb:1d:3d:20:f2:d1:46:de:be:11:13:70:e9:15:03:
41:00:8c:4b:48:c6:8f:b4:a5:cc:3f:09:90:e3:7e:
fa:81:69:21:05:aa:d6:82:1f:74:f2:4d:1a:e0:48:
dc:4e:43:98:c4:74:0d:f5:1f:fd:57:10:b4:a9:ec:
2c:67:51:55:5f:94:e4:f4:fa:09:03:c6:d9:78:1f:
6f:42:45:1c:9b:cd:86:79:ac:cf:3c:61:99:b7:b5:
7c:10:b9:68:40:18:bc:03:b0:9b:3a:05:b0:06:6b:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:75:D3:7D:A8:84:F1:C5:1C:3F:59:E3:62:DC:36:66:9A:70:5E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WjV1032ohPHFHD9Z42LcNmaacF4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:09:5f:d0:db:17:c5:03:13:ee:33:19:fc:d3:d1:2f:63:1b:
d4:ba:a6:89:c7:f3:e5:7a:3d:55:d8:f6:11:96:71:a7:a1:0a:
7a:95:54:94:f6:89:0b:d8:e3:a5:2f:c4:65:b5:04:8c:a8:44:
27:79:b8:17:a4:7d:d7:50:36:54:c2:58:7a:bd:7c:64:e5:e8:
cb:a6:3e:e4:6e:80:c0:57:5b:82:6d:b4:70:dc:48:e4:8b:d7:
7e:26:76:74:44:89:60:85:9c:76:a8:0f:10:8b:7b:be:44:08:
24:1f:fd:2f:48:24:4e:b6:5b:bf:da:8a:40:ab:6a:66:56:19:
9f:c9:da:c8:03:2f:de:2b:67:53:46:33:9c:61:5f:1d:07:19:
8f:60:31:2c:1d:2e:a4:99:81:21:14:d1:7e:1a:95:e1:49:79:
16:1a:e7:cd:59:bd:c6:fb:4b:35:5e:fa:0d:12:85:c2:a0:5d:
9c:86:d8:33:1b:d3:ae:5e:61:76:37:bc:67:fc:37:88:0d:e9:
69:8b:55:e7:44:a2:4f:73:66:b2:8d:7c:cc:1b:db:6a:a6:ad:
3c:4e:d2:c4:d4:ee:1b:78:6f:97:38:65:80:03:da:07:21:d6:
03:89:8f:ce:92:ef:77:f2:2b:f7:df:87:02:be:6a:52:0c:7b:
cf:fc:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:15 2025 by rpki-client