Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa
File: xOkQ0SHNZXoSNypuZvSppfdtnIU.roa (raw, json)
Hash identifier: q4rn2H+dol/GFvPrRcVgqZmJ06wi9Dv2KcsyEHCTA68=
Subject key identifier: C4:E9:10:D1:21:CD:65:7A:12:37:2A:6E:66:F4:A9:A5:F7:6D:9C:85
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0105
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa
Signing time: Fri 01 Dec 2023 01:30:05 +0000
ROA not before: Fri 01 Dec 2023 01:30:05 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 223.132.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Dec 1 01:30:05 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=C4E910D121CD657A12372A6E66F4A9A5F76D9C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:d5:c0:b4:83:93:99:6a:6e:38:3a:f3:82:
f6:3c:ea:d2:7f:7e:39:a7:1b:a3:63:f9:e3:9e:19:
ca:df:4e:ec:fd:e3:9c:99:2f:8f:14:fa:e7:7e:5f:
00:90:68:44:58:98:37:af:f1:be:08:85:fc:64:7b:
50:fc:38:63:75:d4:d8:e1:59:03:2e:0c:bc:ba:e5:
42:2d:f5:25:0b:15:85:b5:e2:b0:9d:9a:6f:ad:72:
b7:d7:fa:87:87:a5:a9:b9:43:80:d5:50:54:bf:99:
e6:d2:1c:fb:b4:17:84:98:77:1d:9a:10:1e:2a:c3:
69:87:0d:41:93:3b:a2:e5:38:e2:bc:46:f2:4a:a7:
9a:37:df:a3:95:bb:ee:76:6b:d4:46:f7:2a:88:dc:
33:21:89:57:75:a5:bd:de:4a:c8:02:84:24:de:6c:
cb:2a:62:5b:aa:9f:b9:3c:8e:03:f1:d2:12:33:76:
28:31:89:c0:dd:6b:88:e8:99:7a:73:7a:60:5d:ff:
3a:8f:ed:74:68:ed:db:8d:a9:c7:c1:9e:a7:eb:e0:
da:13:67:7b:4f:c4:cf:b0:d8:c7:59:4f:e8:df:eb:
6e:3f:e5:25:a1:9e:b8:8f:2c:66:d6:da:09:99:9a:
6a:96:2d:cf:4e:07:ec:10:32:3e:6e:65:35:48:8a:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:10:D1:21:CD:65:7A:12:37:2A:6E:66:F4:A9:A5:F7:6D:9C:85
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/xOkQ0SHNZXoSNypuZvSppfdtnIU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
61:f3:8d:61:64:3e:5f:cb:64:3a:95:f9:13:86:e5:22:15:3e:
2f:c8:65:82:b3:1f:31:0f:5b:e9:26:0d:4d:ef:09:62:f3:dc:
f3:da:ff:18:06:50:10:21:7e:4e:f6:de:18:4f:9a:5c:75:7b:
b4:af:e2:9a:d4:cb:d3:07:df:03:a2:be:0a:fa:1c:37:77:99:
aa:de:9b:dc:48:a4:a7:aa:f1:ff:f1:a4:ad:80:e0:0f:ca:a0:
b9:46:b9:fb:54:9d:ae:bf:ce:a2:b8:a6:b0:94:6a:14:b1:97:
94:c5:9e:d0:fe:5d:be:8b:9f:27:2f:c9:8d:f1:9f:a7:6e:fe:
60:2f:54:d4:6c:d5:bc:83:77:f4:c2:b8:11:aa:ef:95:26:2a:
bb:91:8b:57:77:8b:5c:0a:88:2d:b3:1d:43:34:f6:1f:af:ac:
9e:44:6c:bc:07:8d:85:39:ab:56:f1:6c:72:5a:54:a5:93:d2:
e2:ef:64:61:61:24:d4:0f:bf:6f:82:bb:b6:7d:5e:f0:c6:be:
fc:fa:a5:3b:f8:1e:97:34:ba:e6:c3:9c:4f:1f:cf:9b:c2:e2:
be:5f:97:30:44:c8:de:62:e1:b7:fe:68:0b:6c:57:15:56:60:
8e:74:b4:9e:17:9d:be:89:7a:f5:2b:f8:e4:05:99:f1:65:d3:
74:ce:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:03 2025 by rpki-client