Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
File: IbRY4-uFX_e9KbfFFl0tby0A5CA.roa (raw, json)
Hash identifier: JJF0x2MLrAmD++EH3kInRjKuzlFEAa71/552+e+lBcA=
Subject key identifier: 21:B4:58:E3:EB:85:5F:F7:BD:29:B7:C5:16:5D:2D:6F:2D:00:E4:20
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 010D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
Signing time: Fri 01 Dec 2023 01:30:14 +0000
ROA not before: Fri 01 Dec 2023 01:30:14 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 110.66.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Dec 1 01:30:14 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=21B458E3EB855FF7BD29B7C5165D2D6F2D00E420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:a5:3f:e7:b8:ff:2a:b0:25:b8:8f:f8:0f:
1d:b7:47:22:10:e9:cd:70:92:19:e7:63:36:60:9d:
a5:b1:fa:3b:5f:34:30:ff:06:37:e9:30:c0:c1:f1:
87:0a:53:d9:71:42:72:05:54:73:29:1e:36:c1:69:
c4:7f:ad:87:f8:05:9e:da:31:dc:13:8e:00:b3:76:
d2:33:31:1c:47:2a:e4:48:0a:1c:43:97:2c:52:10:
72:00:ef:86:c6:10:d7:ee:bb:85:5c:e5:8b:22:ac:
ce:23:a7:25:f2:74:43:8b:75:6b:65:bc:41:7e:0d:
2c:b6:d6:e9:a8:15:b4:1c:05:cf:78:0d:0a:e8:6e:
38:5f:be:40:3b:e5:12:b5:d0:94:05:c7:2e:c2:2b:
ce:32:af:4e:f0:f9:ae:7e:a6:bf:30:66:20:5e:9b:
5b:40:b0:a2:e9:db:61:9f:46:e0:3b:70:c6:0f:b9:
34:82:64:4c:66:b9:10:d4:15:87:34:45:0a:ee:5a:
30:36:90:bb:82:1e:78:72:9f:9d:b4:dd:de:bb:39:
5b:e7:49:03:c2:0f:2f:9b:ea:d6:a2:92:e4:8a:68:
86:e3:fc:92:7a:a6:1c:70:27:cb:65:41:1d:c1:79:
55:ee:a6:1e:37:cb:c6:8f:a8:c1:3c:19:55:a8:2c:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:58:E3:EB:85:5F:F7:BD:29:B7:C5:16:5D:2D:6F:2D:00:E4:20
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/IbRY4-uFX_e9KbfFFl0tby0A5CA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
20:6a:7a:1a:b0:23:cf:da:fc:2f:db:8b:0a:c1:a1:8c:15:d7:
c7:ef:38:8c:d2:b5:f9:3b:58:4d:2c:22:2c:f0:5b:c1:a7:6e:
26:59:67:c4:4a:f7:1e:df:d6:72:01:08:fb:5b:85:b3:85:b0:
82:44:ed:1c:fe:b5:c7:ab:4e:4e:f8:72:43:61:ac:08:ca:12:
19:a3:68:bd:e8:ed:a0:39:60:de:0b:d9:3b:ba:c1:db:60:2c:
7f:1e:83:32:b5:47:6e:aa:a0:64:d3:16:a8:16:59:7a:48:d6:
d4:a0:5f:6c:9c:85:b4:5b:4e:3f:b0:93:4b:53:8b:9c:50:58:
4a:3b:c8:f0:db:28:92:da:95:4c:f5:54:57:b5:9a:7b:38:c7:
8d:83:53:1b:04:93:35:69:98:77:8a:ad:cc:cb:43:d5:6f:e0:
c0:ca:35:b5:ee:35:95:2f:30:18:a6:83:2b:1d:b0:64:2e:38:
77:82:8f:36:f1:09:5f:b0:3c:f3:42:17:c3:fb:14:67:69:de:
e5:d5:fb:d5:db:00:93:10:ce:a2:90:ba:10:7b:0f:10:e9:9b:
fe:d2:cd:b6:4e:db:18:1e:8a:5d:e9:3d:d8:8d:91:36:a8:83:
79:06:ff:1a:38:4e:21:34:b0:b8:fd:e9:c1:50:c7:38:a8:d3:
68:b2:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:27 2025 by rpki-client