Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/lKifZlolEiqo3G8Er1ydnO9o7SU.roa
File: lKifZlolEiqo3G8Er1ydnO9o7SU.roa (raw, json)
Hash identifier: WBVWiGB7TJQu1OuYqK7fD9oD42HBMMgiuBgC3cOGfZA=
Subject key identifier: 94:A8:9F:66:5A:25:12:2A:A8:DC:6F:04:AF:5C:9D:9C:EF:68:ED:25
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: CB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lKifZlolEiqo3G8Er1ydnO9o7SU.roa
Signing time: Sun 01 Jan 2023 01:29:36 +0000
ROA not before: Sun 01 Jan 2023 01:29:36 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 123.198.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:29:36 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=94A89F665A25122AA8DC6F04AF5C9D9CEF68ED25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:b8:96:38:99:b4:d0:f1:4a:6b:6d:db:ac:
54:ff:a9:51:6b:f7:0c:98:5b:b8:f8:8e:04:5a:e6:
70:32:76:f3:62:f5:21:7a:00:39:f2:1c:89:a4:7c:
31:38:93:c3:b5:73:1b:56:b5:7a:2f:d9:a2:b6:ff:
e1:a9:11:a3:2b:06:14:f9:a9:b4:d5:09:c9:d3:50:
1d:1b:d2:9f:8c:a5:dc:37:94:c6:bd:c4:9d:c3:8d:
7a:d8:94:05:e9:d6:32:48:10:ad:45:0f:58:8a:af:
b7:10:11:ec:61:7b:ac:0b:78:b6:9c:0c:fb:47:ce:
75:9f:cb:79:d7:ef:2a:66:10:50:0e:1a:25:b0:51:
4e:a0:40:a9:d6:64:14:5e:75:0a:66:20:9e:06:21:
c0:c9:f2:2b:f2:52:f1:3d:3c:ca:db:db:9d:1f:c5:
4f:72:73:68:5a:77:f4:b3:90:eb:d3:01:32:2c:d0:
ec:ed:57:39:15:3b:fa:85:34:77:83:d5:b4:46:12:
7c:6a:d1:fb:4e:d2:73:61:f2:7b:26:a1:03:e3:d2:
97:75:ef:0b:3e:36:d5:ec:d5:bf:f3:d9:19:2e:9d:
bd:2c:71:37:72:54:da:20:92:01:c2:aa:32:09:ce:
0b:e9:97:51:fe:7c:01:5b:cf:e9:e7:64:9c:72:6e:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:9F:66:5A:25:12:2A:A8:DC:6F:04:AF:5C:9D:9C:EF:68:ED:25
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/lKifZlolEiqo3G8Er1ydnO9o7SU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:e5:c1:c7:dd:3d:7e:1d:67:ab:6d:7f:fb:05:83:18:db:5c:
e9:b1:09:40:b6:79:3c:e3:c7:f1:ca:b5:d4:e0:50:44:17:0f:
5a:8b:b3:fb:7e:c1:a0:d0:45:69:5a:f7:ff:b4:e2:ea:15:cf:
7b:2a:6a:42:ea:d8:07:fc:80:ae:4d:6d:2c:f5:f0:a9:06:c1:
a5:98:05:97:0c:99:d9:46:34:89:f9:21:f7:01:27:d9:8a:d9:
f4:c6:21:71:e8:7e:ef:c9:19:87:43:83:b5:d8:80:a9:fe:12:
a1:61:c5:31:5f:3e:44:0d:4d:db:0c:1e:cd:e5:8c:44:33:21:
02:c7:76:b7:24:80:0f:d5:86:f9:63:e9:2f:6b:65:ae:00:af:
37:9b:8a:5c:27:8a:f8:bb:59:7f:bf:91:a7:2d:a4:3c:c4:29:
c4:85:ba:05:5f:01:44:c1:bb:1d:4d:67:a3:5d:0e:89:de:e0:
cb:65:03:09:a9:11:b7:db:96:95:e6:1d:ea:f2:cc:48:7a:87:
09:2f:6e:ce:58:6e:05:57:3d:1b:3a:cc:a7:f2:2d:a8:3d:4e:
68:1e:ff:71:3c:b3:0b:0d:ac:ca:e6:f2:cb:d6:a5:8e:d8:b2:
aa:75:16:8b:48:f9:47:4b:48:62:9b:bb:9a:b6:d2:cb:86:02:
5a:d2:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:36 2025 by rpki-client