Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/K525mx3k80EtAiSFdejTQrqqqK0.roa
File: K525mx3k80EtAiSFdejTQrqqqK0.roa (raw, json)
Hash identifier: Zvl/dcLLRZek314Ky29eal4FhofJsrU+BB+It1tF9dk=
Subject key identifier: 2B:9D:B9:9B:1D:E4:F3:41:2D:02:24:85:75:E8:D3:42:BA:AA:A8:AD
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01B5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/K525mx3k80EtAiSFdejTQrqqqK0.roa
Signing time: Fri 07 Jul 2023 04:14:37 +0000
ROA not before: Fri 07 Jul 2023 04:14:37 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 153.120.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:14:37 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=2B9DB99B1DE4F3412D02248575E8D342BAAAA8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:b8:66:d9:f3:10:d9:d3:85:6d:73:af:a4:
c3:a4:b8:12:9c:bd:6b:6e:24:b2:92:4f:9c:d4:eb:
80:94:96:26:0e:06:0f:36:7d:a8:42:94:9e:6e:76:
59:48:10:3e:dc:9a:99:e1:a3:2c:89:97:68:26:47:
55:ba:78:0d:8a:1c:1c:9e:5a:64:d8:fa:49:be:1c:
86:84:bd:f0:2c:bb:a8:9f:71:8e:67:13:d1:e9:ca:
1a:d8:1d:fd:a9:15:b4:0d:06:99:31:32:23:84:06:
79:43:cc:9f:28:da:da:49:5f:98:d6:ac:3c:d0:8a:
88:53:8f:d8:37:94:07:58:78:13:7f:04:22:c7:15:
8d:8b:25:be:5b:34:5f:af:2d:3e:14:d0:4b:0a:f5:
54:76:5c:b1:53:29:68:f1:9c:2c:aa:87:da:6d:be:
90:f2:2c:97:e1:c5:9b:86:3c:33:e2:d3:34:39:91:
a3:24:8d:9f:47:44:92:8c:fc:46:e0:ce:69:c5:56:
8d:b0:19:25:64:97:e9:7a:06:4a:22:f1:db:7c:ac:
e8:d6:40:11:c3:6a:43:d5:d2:ad:55:7b:45:fc:ce:
80:a1:79:b6:d0:2e:25:76:1a:f7:2a:bf:72:e7:03:
58:57:64:72:80:f3:52:d8:43:27:84:fa:5c:a8:c0:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:B9:9B:1D:E4:F3:41:2D:02:24:85:75:E8:D3:42:BA:AA:A8:AD
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/K525mx3k80EtAiSFdejTQrqqqK0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.220.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:ab:e6:a0:83:98:62:79:4c:00:1b:b6:57:11:50:69:3c:ce:
ac:92:f3:c5:c3:68:0f:b9:d8:7e:cb:bf:89:f8:77:c5:c2:b7:
f6:4b:d2:66:21:20:5b:db:bf:60:08:a5:c2:60:4a:16:da:1c:
c2:54:46:8f:4d:a9:9f:0b:aa:56:ec:bb:03:1b:d1:43:e4:3b:
61:76:89:8e:82:46:ec:0c:21:9c:27:4e:17:dc:50:b1:a8:db:
b3:2b:ad:ec:15:c5:2f:1d:6f:81:79:75:c5:82:eb:c0:9e:67:
98:46:53:cc:85:fe:36:6a:50:e3:dc:e1:22:bb:53:6a:ab:72:
bc:81:a9:81:22:39:f0:de:e8:7a:4a:e3:60:fa:9b:ad:59:a1:
f3:01:61:f6:10:2e:d1:af:c6:d5:ac:33:48:01:67:17:67:da:
6a:8a:b5:60:81:b1:15:80:35:e8:6d:06:6e:c1:32:f0:8a:fc:
2f:ed:0b:d0:45:bd:15:69:b1:a9:c7:4e:c8:5c:e3:73:b4:c2:
78:0e:25:c8:4a:ea:5e:23:d9:92:b5:8b:f2:cc:d8:a5:85:03:
78:e8:19:e6:fa:1a:fa:b7:b9:cc:ff:2e:70:a6:9a:82:cc:39:
02:88:81:d1:01:c4:e7:8c:16:bb:77:d6:22:dc:d5:d4:6c:88:
dc:47:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:41 2025 by rpki-client