Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
File: TjVdRVEod2y35EWXfZsctjrDVIk.roa (raw, json)
Hash identifier: XFsGTGOESCJpJSGo0UrdgryDlZHcx8xV3OPv0BOor0o=
Subject key identifier: 4E:35:5D:45:51:28:77:6C:B7:E4:45:97:7D:9B:1C:B6:3A:C3:54:89
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0129
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
Signing time: Fri 01 Dec 2023 01:32:01 +0000
ROA not before: Fri 01 Dec 2023 01:32:01 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 121.103.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Dec 1 01:32:01 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=4E355D455128776CB7E445977D9B1CB63AC35489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fd:c4:59:34:40:70:ca:f7:62:98:9b:1e:a4:
5d:75:a1:22:7d:a0:6f:29:53:aa:da:aa:20:a3:b4:
3b:0e:93:63:47:e3:e7:fe:a8:08:aa:3b:41:62:12:
6c:d1:83:d8:6d:da:25:67:56:95:28:70:16:14:62:
ff:39:1b:58:22:42:24:5f:64:cf:b6:5d:8f:f9:a2:
ce:68:14:7d:99:fd:9e:5b:28:ec:43:7a:0f:6d:62:
23:5f:9a:e7:7d:47:74:d1:bb:e6:69:5c:0c:ae:95:
fe:9c:2c:e1:d6:ad:69:37:7f:4c:3d:ac:5e:6b:40:
24:b1:4f:e3:5b:87:38:99:ed:92:73:6c:09:66:29:
d5:4d:fb:23:b0:fd:9e:d4:da:58:e8:0d:a7:27:53:
66:85:fe:1a:2f:90:7b:73:d0:46:ec:17:d4:e9:0a:
fe:57:8e:01:34:be:ab:59:53:cc:71:1f:96:4f:08:
b5:ce:60:a6:58:a0:48:dc:5c:b2:f7:49:d4:54:b3:
89:5f:ed:17:d0:e1:ee:ce:a1:0e:a3:35:ee:b4:1a:
6e:f7:fa:85:d1:50:e2:e0:2d:98:f5:8d:7a:a6:0d:
af:d3:13:f9:ce:25:8b:6e:ca:48:d6:c8:1e:21:58:
82:8e:52:01:af:85:f9:ca:4d:50:0d:f4:95:4d:97:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:5D:45:51:28:77:6C:B7:E4:45:97:7D:9B:1C:B6:3A:C3:54:89
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/TjVdRVEod2y35EWXfZsctjrDVIk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:2c:4d:c8:ec:4f:62:a4:c3:8a:35:5a:f7:37:a8:99:9d:39:
84:fe:53:7d:a0:36:6a:f3:17:24:bb:f3:62:38:a0:46:a5:c5:
db:84:b6:62:d0:e8:62:cd:ee:29:81:c3:d5:5d:e7:e7:d7:3c:
9e:7b:64:9f:7f:50:b5:90:b0:50:99:05:a5:93:c1:e2:b1:76:
47:28:6a:8b:a5:9c:30:ce:8c:9a:a1:83:21:7d:06:6e:6e:42:
96:e7:40:28:99:e8:e5:f9:69:f2:0a:25:a2:e6:bd:ef:ac:f9:
93:72:01:7f:44:20:62:da:a8:a0:24:44:09:16:86:1c:94:fd:
00:a2:7a:d6:c2:a2:6c:5c:69:35:31:c4:c2:a2:b3:d9:d3:9c:
24:14:91:77:ed:2f:6d:65:f4:22:d7:73:66:cd:00:8b:f5:2f:
b7:98:73:46:e6:03:07:61:e6:53:61:98:c1:66:c7:c5:11:60:
d7:fb:f4:ac:f0:4d:34:3b:19:2f:fb:28:80:4d:21:b8:91:0e:
bd:ed:a3:97:f8:13:0b:8f:21:01:39:2e:a7:d5:2e:ec:12:e1:
3a:c8:d7:55:60:9f:fb:af:ae:8f:bc:3e:04:59:56:1d:6a:69:
0d:1c:77:40:c9:6e:64:51:55:e0:1a:24:55:a5:70:08:7a:f8:
fa:24:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:11 2025 by rpki-client