Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/536/CBL-TnWbtGbz0gd-TAW1bhtGNPk.roa
File: CBL-TnWbtGbz0gd-TAW1bhtGNPk.roa (raw, json)
Hash identifier: GoAaiSjWTqS+hrhh9u62v+P4FB/0Is8AT8iqy0F/1FM=
Subject key identifier: 08:12:FE:4E:75:9B:B4:66:F3:D2:07:7E:4C:05:B5:6E:1B:46:34:F9
Certificate issuer: /CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
Certificate serial: 0F
Authority key identifier: BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/CBL-TnWbtGbz0gd-TAW1bhtGNPk.roa
Signing time: Fri 01 Sep 2023 01:31:16 +0000
ROA not before: Fri 01 Sep 2023 01:31:16 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 131160
IP address blocks: 103.5.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
Validity
Not Before: Sep 1 01:31:16 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=0812FE4E759BB466F3D2077E4C05B56E1B4634F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:ab:54:4e:4d:20:da:68:3f:77:d3:a4:3b:
3b:8c:b1:83:ac:bd:02:e3:be:09:2b:41:d4:2a:2a:
9b:85:f2:90:09:83:fd:fd:4d:6c:89:25:97:48:12:
f1:d2:c3:33:7a:94:e1:88:7b:d2:b5:dc:8f:9f:ea:
db:1d:03:76:09:2c:38:08:d8:43:c6:40:80:f9:92:
ff:c8:39:65:3c:af:dc:69:c1:a7:3f:ff:ec:b1:bb:
01:71:a2:8d:59:6a:b6:34:8d:fd:26:9a:a7:e4:9a:
3f:ca:9a:af:87:38:4d:68:2c:45:15:8a:eb:30:ed:
55:fc:30:57:4e:d6:6e:65:3a:a9:81:a9:db:52:6c:
da:a9:e8:88:b4:39:b6:24:25:26:65:09:20:1e:e3:
45:03:6f:26:23:23:68:c8:df:f9:a1:03:c9:71:d7:
0e:88:f5:57:75:32:aa:b2:f0:1c:2c:5f:21:ff:37:
a3:1a:b5:54:24:27:0d:ee:f6:43:f3:80:d8:09:28:
06:f0:5c:7c:66:a2:34:b8:db:ca:cf:4c:5c:23:46:
2e:63:c5:a5:ee:dc:23:2f:30:51:ad:36:37:ea:6e:
d3:c0:8b:8d:54:6e:23:f3:77:ee:17:b5:c8:2d:12:
ab:e0:76:f1:57:30:51:f4:41:48:73:68:be:92:50:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:FE:4E:75:9B:B4:66:F3:D2:07:7E:4C:05:B5:6E:1B:46:34:F9
X509v3 Authority Key Identifier:
keyid:BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/CBL-TnWbtGbz0gd-TAW1bhtGNPk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.140.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8f:c1:5a:4c:2c:c9:39:e6:cf:71:e0:ec:2a:83:61:1e:4b:
b0:9e:72:85:24:55:1c:06:b6:75:5a:15:4d:21:ca:81:dd:01:
12:9b:fd:42:fd:7e:07:17:80:de:3e:1e:d8:d9:4f:72:c6:11:
04:3b:a1:e8:52:7c:48:a5:ac:fd:68:70:cb:b2:95:c1:af:96:
ad:dc:e5:11:f0:68:67:bb:cf:28:c1:8d:07:9c:2f:f6:e8:91:
13:ab:86:0b:58:39:7d:77:da:2c:d4:39:e1:b9:c7:85:be:20:
45:28:cd:4a:30:57:31:fc:2a:c3:72:aa:c6:39:32:9a:25:73:
51:a0:4c:eb:cf:81:20:56:03:03:d6:7f:92:ba:ce:7e:a1:a6:
03:c5:45:24:e4:da:8f:8a:65:9a:54:d3:dc:f7:c1:36:a5:d7:
c1:20:b8:e0:7e:55:2d:cb:22:cb:0c:ac:41:36:5e:60:f6:aa:
b8:c1:e2:ac:d9:d7:62:fc:a9:fd:1e:c2:1f:aa:19:b5:da:bf:
10:f3:b9:48:31:d5:00:28:44:42:dc:47:02:be:77:39:20:44:
78:9f:b1:0a:69:ef:55:81:cb:34:f2:8b:72:57:9b:1b:91:95:
b0:85:f6:77:47:09:54:a2:9a:83:70:e5:81:a5:f5:c2:3e:dd:
cb:dd:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:46 2025 by rpki-client