Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wsk56Q3FN9gCXK2_jKbd42GADlI.roa
File: Wsk56Q3FN9gCXK2_jKbd42GADlI.roa (raw, json)
Hash identifier: tuK1EXGIxmBmT67GPzvp/SIcmRE4Cgw9XCFjqsMuTSg=
Subject key identifier: 5A:C9:39:E9:0D:C5:37:D8:02:5C:AD:BF:8C:A6:DD:E3:61:80:0E:52
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0183
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wsk56Q3FN9gCXK2_jKbd42GADlI.roa
Signing time: Wed 24 May 2023 16:33:25 +0000
ROA not before: Wed 24 May 2023 16:33:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5AC939E90DC537D8025CADBF8CA6DDE361800E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:8a:ef:6d:22:a4:21:0c:16:27:f9:5c:5b:
39:c3:7d:bd:40:ca:68:b3:92:15:35:79:8e:90:ac:
2b:ec:ff:24:6c:77:75:9b:d2:a0:96:8c:7c:21:11:
7e:64:3d:ae:a0:ff:65:79:8a:ff:e8:a8:f9:8a:df:
98:6f:0a:b9:9d:1f:4c:f7:39:90:53:04:cf:fa:a4:
9c:4a:45:d1:8f:83:13:97:d4:ed:33:53:7c:1f:7b:
a9:6e:1e:7e:4c:a8:bb:f6:7e:9c:4e:9a:64:c2:23:
c1:b8:ad:34:a3:23:50:f5:53:e8:8e:1b:77:79:f3:
28:1f:e8:2f:57:4a:cd:b8:2d:41:b9:8f:49:ed:e8:
67:d6:b2:03:ab:7c:aa:a5:43:2a:d5:85:29:77:03:
3a:a9:37:02:ab:4b:3e:c2:9b:70:80:ed:d5:c9:b0:
b1:4d:fe:d2:04:39:b9:79:b9:5d:8b:dd:5c:fb:67:
8e:d9:80:b2:54:03:77:53:e1:46:a0:eb:7b:33:0a:
d6:7f:20:21:ad:27:61:d7:d7:1a:62:e3:56:1f:ce:
78:c1:20:d6:88:b9:29:01:a7:6d:3b:2c:5d:fc:90:
42:c1:2d:e6:4a:e6:13:9f:e9:94:c6:56:5a:0e:ef:
dd:57:ef:c1:57:54:a1:90:f9:dc:1a:d1:e4:9d:29:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:39:E9:0D:C5:37:D8:02:5C:AD:BF:8C:A6:DD:E3:61:80:0E:52
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wsk56Q3FN9gCXK2_jKbd42GADlI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:4a:8d:7d:31:95:09:29:be:97:66:c5:b6:aa:b3:03:a2:e6:
73:ea:44:e5:2f:02:ca:ea:94:51:e1:4d:bc:e9:0e:0e:31:bb:
3d:58:5b:d9:6f:53:04:86:b3:bc:c3:c4:1d:9b:cb:84:72:31:
b6:e7:29:6e:01:09:fc:e0:2f:75:a6:74:e5:a8:6e:f8:57:e2:
ce:72:9a:5b:07:4d:45:b5:e5:11:1a:fc:80:b9:01:ca:84:09:
3d:de:26:80:13:de:bb:7b:82:b3:03:3a:6b:d3:03:be:a4:70:
4c:22:fa:84:7d:2a:be:e8:cd:14:db:0f:a9:a9:00:36:13:5c:
8d:cb:48:2e:bd:87:b4:9a:37:c5:47:19:99:65:75:58:5c:80:
9d:34:5d:56:66:78:06:fd:8c:eb:bd:e2:14:3b:60:3e:24:4b:
de:a4:c8:23:b2:18:db:d9:06:a3:99:cc:f1:84:98:bc:ed:1d:
e4:0c:95:33:6f:74:dd:e1:e8:a1:3d:f5:70:64:76:16:e1:ed:
93:b4:16:e5:04:c9:0d:3d:c7:d5:69:ce:35:17:e4:9b:59:5d:
0c:c6:9d:f9:50:7b:4f:e1:2f:ac:72:b6:89:f8:7e:15:ae:97:
77:8d:6a:45:e2:e0:e1:42:0c:8b:be:45:66:c7:6e:7d:cf:b7:
38:8b:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:16 2025 by rpki-client