Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Y9a-8a1twPv0t0411cEdw1D4uN4.roa
File: Y9a-8a1twPv0t0411cEdw1D4uN4.roa (raw, json)
Hash identifier: CkjDOkPWqxNoUeQxdXhBHCA27rlzGFO9n9gbzx+ax4E=
Subject key identifier: 63:D6:BE:F1:AD:6D:C0:FB:F4:B7:4E:35:D5:C1:1D:C3:50:F8:B8:DE
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: E1
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Y9a-8a1twPv0t0411cEdw1D4uN4.roa
Signing time: Sun 01 Oct 2023 01:28:54 +0000
ROA not before: Sun 01 Oct 2023 01:28:54 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10021
IP address blocks: 202.95.216.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Oct 1 01:28:54 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=63D6BEF1AD6DC0FBF4B74E35D5C11DC350F8B8DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:d9:09:23:c4:1e:53:ae:3b:cd:19:02:5a:
44:aa:d6:53:26:b7:45:1b:5a:53:10:9a:03:81:21:
63:91:4d:4d:bd:24:47:ee:a2:e4:84:d9:81:81:e3:
c3:b9:21:c1:9b:6e:6c:d3:5b:d9:7c:ef:be:00:e4:
f4:62:fe:54:2a:a1:08:37:14:0e:6a:8e:8a:d4:f5:
9c:c6:7d:a4:1b:82:3d:67:a7:36:31:36:22:60:75:
f6:43:13:42:05:ae:31:90:38:ae:73:13:58:e6:94:
32:e4:de:d7:a7:44:79:12:21:98:27:28:c6:44:13:
12:8b:ee:31:3b:4e:71:8b:f7:12:8f:56:1b:8b:af:
49:ae:f7:31:c4:0f:ea:06:66:01:74:44:26:cd:d7:
59:f5:30:c1:3e:71:83:3b:34:21:07:0c:9f:d0:96:
52:34:db:78:65:de:1d:5a:d3:98:0c:0f:a7:74:bc:
91:fd:69:ef:58:c5:04:d8:cc:a6:f7:18:d6:9a:ce:
09:b5:dd:34:5b:c0:40:3a:a5:51:4a:e4:3d:ac:f5:
ff:ba:d7:bd:c0:6f:f1:93:29:e9:8c:46:d7:1e:19:
a9:c9:ba:02:b1:5e:a9:d3:ed:92:d7:bd:da:bd:64:
05:79:0b:14:8f:25:8e:fd:e1:a4:f2:11:5d:62:d2:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:BE:F1:AD:6D:C0:FB:F4:B7:4E:35:D5:C1:1D:C3:50:F8:B8:DE
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Y9a-8a1twPv0t0411cEdw1D4uN4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.95.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fc:5b:8a:9b:f1:7d:ed:42:e3:49:a6:7d:e9:30:47:be:bf:
55:44:1d:9f:54:26:a8:27:a8:5f:cd:c0:09:98:70:48:e0:a5:
f6:c5:ec:bd:7d:a8:12:66:b6:44:0e:b7:00:2b:2f:3e:fa:1c:
aa:bc:fb:b7:5d:47:4d:cc:10:98:24:92:9d:25:f0:c8:9d:62:
4c:51:1e:e5:3e:ab:1c:be:17:82:71:c3:89:d8:99:9c:88:f1:
e1:b8:62:36:15:32:1d:64:e5:c3:a0:d0:1f:ac:26:1e:6b:b9:
06:f4:66:49:c1:ce:d4:68:5c:47:fd:0a:60:41:58:57:11:a7:
9b:d4:dd:66:0a:29:e0:a4:88:c2:d5:51:49:6b:8a:a8:bf:fb:
e3:aa:0a:9c:20:b4:d0:8f:02:fc:0b:21:09:50:a7:67:27:f8:
65:a2:af:6f:ac:cc:d6:4d:47:ab:fa:ff:b8:ee:44:e7:ec:62:
32:33:9c:0a:5a:ee:8d:12:4a:e5:b5:59:c0:23:35:8d:f2:ec:
09:e3:70:3e:59:e6:79:45:fb:33:04:62:fa:39:3c:58:a4:9d:
6f:78:32:a1:6f:99:2c:4d:53:64:8e:b1:1a:86:12:4d:8b:d8:
12:fc:95:08:13:3d:5a:1f:7c:8d:0b:a2:48:66:6c:83:92:ea:
8f:ef:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:14 2025 by rpki-client