Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v6-AYavLrGojtJDVBvS_tWUVi5E.roa
File: v6-AYavLrGojtJDVBvS_tWUVi5E.roa (raw, json)
Hash identifier: wIqEENwzfgdDOeJE9McvKc9MNLfJ3oEPHMMyVwGYg0E=
Subject key identifier: BF:AF:80:61:AB:CB:AC:6A:23:B4:90:D5:06:F4:BF:B5:65:15:8B:91
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0229
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v6-AYavLrGojtJDVBvS_tWUVi5E.roa
Signing time: Tue 30 May 2023 16:30:33 +0000
ROA not before: Tue 30 May 2023 16:30:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=BFAF8061ABCBAC6A23B490D506F4BFB565158B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:36:17:8f:c2:b6:2d:91:bb:fa:0e:99:c9:
3d:e1:d6:4b:ab:37:4e:8c:69:28:54:92:33:6e:0d:
f7:cc:a8:c7:a7:8c:e4:f3:a8:17:49:8b:9d:dc:9a:
17:10:a2:72:4b:3b:cc:59:fb:e9:c9:f0:e0:56:28:
88:0b:1b:5c:fd:94:0b:2a:1b:fb:77:e0:49:d4:fb:
a3:c2:92:2b:e0:13:cd:28:06:ad:c9:53:7b:7d:4b:
d6:7f:3d:79:b6:34:e3:05:36:61:b7:65:ff:63:92:
dd:52:b5:3c:c7:99:6e:d6:47:bb:c6:15:f9:ad:ae:
0b:c8:bb:a0:db:ca:10:c2:09:5c:57:bf:16:d2:49:
1d:25:1b:a6:9f:f9:6a:1e:7a:14:0f:4d:2e:b6:23:
d4:da:e3:8c:4d:ad:fd:09:a0:87:12:c2:3a:16:aa:
27:31:10:cd:ce:6f:12:8b:87:ef:d5:25:fa:23:1e:
6a:56:85:2c:bf:9e:58:0a:91:ca:02:b0:b9:e3:be:
9e:59:91:c9:ad:a1:fc:da:8c:31:8a:6c:54:be:84:
32:0c:1a:6b:9f:bd:84:e1:3f:eb:09:a9:e5:df:0d:
2e:94:28:a2:c1:f2:28:00:76:0d:16:38:41:65:9d:
4b:af:c8:42:f1:89:f6:54:af:b3:97:82:84:6f:a4:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:80:61:AB:CB:AC:6A:23:B4:90:D5:06:F4:BF:B5:65:15:8B:91
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v6-AYavLrGojtJDVBvS_tWUVi5E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.96.0/21
Signature Algorithm: sha256WithRSAEncryption
d6:b6:0e:40:26:e5:38:dc:83:b8:a3:8c:16:8a:41:bd:ab:0c:
d2:b4:ac:b8:1d:4c:87:1c:0b:aa:3a:14:9b:0c:b1:4d:59:a6:
85:2f:cd:75:1a:9e:70:38:cf:13:da:cc:48:44:d7:78:ee:e3:
94:d2:af:41:a9:19:b6:84:bc:52:dc:f7:ed:8c:22:86:39:09:
a5:3a:b7:2d:f9:2b:2b:6a:59:10:3c:e0:fd:dd:da:57:e8:10:
21:f3:0d:9b:f7:de:4c:8f:8b:54:2b:0a:e5:7a:92:ab:2d:ec:
75:e0:ce:c4:12:64:02:de:b5:5f:d4:cf:64:84:09:65:ae:42:
f7:11:70:69:9a:f7:d2:b5:ab:cf:70:2c:f3:8d:39:70:b9:30:
bf:00:ff:9b:4a:7e:82:41:ca:26:fa:1b:76:44:20:04:29:93:
5e:92:b7:31:41:a1:b2:b3:35:fa:48:42:e8:0a:b3:cf:37:7f:
1e:98:ca:f1:07:44:f0:7c:99:5f:1b:19:9e:09:6f:44:72:be:
14:37:b8:45:96:8d:69:46:86:de:b1:8f:fd:f2:04:1f:08:f5:
46:fb:68:4c:cd:f3:97:3d:1b:74:e1:34:c7:0f:12:eb:c5:4d:
e0:90:3d:51:6e:ee:e4:cc:9a:66:02:5f:97:38:9a:70:05:7c:
4a:e8:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:43 2025 by rpki-client