Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/g57BY0htGbBkHPf46gOUaJrinM4.roa
File: g57BY0htGbBkHPf46gOUaJrinM4.roa (raw, json)
Hash identifier: /6n0w2nUGVoM66vczegJsRfbE0bCZ0j5pvwK+YtoNDk=
Subject key identifier: 83:9E:C1:63:48:6D:19:B0:64:1C:F7:F8:EA:03:94:68:9A:E2:9C:CE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0255
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g57BY0htGbBkHPf46gOUaJrinM4.roa
Signing time: Tue 30 May 2023 16:32:31 +0000
ROA not before: Tue 30 May 2023 16:32:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:32:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=839EC163486D19B0641CF7F8EA0394689AE29CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:29:a7:6c:83:e4:e0:1d:b1:b5:b1:a3:d6:
b1:0a:94:15:ce:05:38:21:fe:d5:3b:d0:35:fd:b8:
a7:82:2e:a5:f0:0a:ef:87:b4:81:f5:c3:f0:b3:a0:
00:6f:d1:01:26:db:f9:3c:26:22:3b:7d:62:e2:14:
67:1b:1f:5b:0c:1c:00:fb:fa:0f:1b:4d:b3:88:68:
d0:25:c2:f0:8d:ef:25:68:40:2a:b2:42:be:2b:e3:
54:cd:66:b2:79:b7:4f:24:ec:55:1c:15:07:ee:a7:
95:d9:2f:bf:df:f0:2c:2c:6f:49:86:05:06:63:6d:
98:46:ce:4e:c2:84:32:ea:75:b0:e6:31:81:d6:24:
ce:18:88:f5:03:8c:ed:44:ff:de:ad:07:ea:29:d5:
5a:65:54:4e:03:1b:4c:63:52:3e:78:b9:2e:2e:bb:
a8:13:ed:64:ca:94:27:26:f4:e9:16:fb:91:14:9c:
78:45:22:07:23:a5:98:44:6e:0b:70:27:1d:d3:d3:
04:1d:16:31:95:97:fd:47:e1:a8:e8:f8:06:69:84:
fb:04:82:78:d9:3e:1e:3b:da:24:c2:74:2f:0a:ec:
73:9f:d3:c5:bb:ce:24:e4:7d:45:cd:2a:a2:27:57:
71:9d:5c:23:ad:26:3b:ff:dd:b1:d9:da:78:6b:14:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:C1:63:48:6D:19:B0:64:1C:F7:F8:EA:03:94:68:9A:E2:9C:CE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g57BY0htGbBkHPf46gOUaJrinM4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:e2:46:d8:4b:e9:b0:20:54:12:c6:e4:82:27:14:ae:e3:45:
30:e7:a3:a1:7d:98:9a:70:72:36:99:e4:7c:18:3c:21:f9:5f:
97:0a:bc:25:5f:9a:c7:2c:a0:ae:86:5a:eb:be:b5:e8:14:cc:
de:8e:a2:db:ae:7c:c1:0f:77:b9:a7:98:2f:d0:de:e8:ac:65:
f8:a9:74:62:77:5e:25:7e:7f:85:7b:e1:82:b9:76:33:bc:64:
81:81:a5:b8:ef:d0:b2:82:09:de:0e:e0:3c:16:e3:09:23:fe:
12:bd:80:5a:72:da:10:2f:42:c1:39:c0:22:c3:b5:d2:4c:b1:
8d:7f:de:73:76:fa:1b:36:73:d9:b4:1f:b5:17:1d:af:e6:66:
69:38:79:56:d2:eb:9e:6f:90:61:e3:fd:e7:af:e7:d6:b9:6a:
18:d8:a1:a9:8d:8a:1f:4b:57:93:f6:7b:84:79:72:37:63:b9:
e8:03:d4:6e:67:04:69:c8:01:b4:44:9b:59:0c:cd:9c:a3:57:
8e:0f:ba:30:a8:5c:48:25:ff:97:bc:0a:ef:aa:1b:81:05:81:
6b:be:d4:ff:93:da:4c:f8:87:51:7b:ea:b3:78:d8:41:e1:da:
58:35:83:58:95:73:b9:51:e4:f9:93:b2:24:48:d0:51:5d:90:
34:7d:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:38 2025 by rpki-client