Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
File: kkaDyzfmQ0eToKf8g7AuEReDZGM.roa (raw, json)
Hash identifier: DNzUkpdfqmIWceZzycQr3KlFIdsIYms7vg4a1v3J7QU=
Subject key identifier: 92:46:83:CB:37:E6:43:47:93:A0:A7:FC:83:B0:2E:11:17:83:64:63
Certificate issuer: /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial: 1F
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
Signing time: Fri 17 Mar 2023 13:11:13 +0000
ROA not before: Fri 17 Mar 2023 13:11:13 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 131984
IP address blocks: 103.162.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Validity
Not Before: Mar 17 13:11:13 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=924683CB37E6434793A0A7FC83B02E1117836463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:cc:5a:f8:cd:6c:92:08:59:7f:d7:2d:2b:
83:ad:22:de:f6:b1:ee:50:18:48:ed:d6:9b:c4:29:
46:77:96:31:4f:ca:a0:55:3c:7f:74:fa:6b:bc:a3:
a6:7e:e8:e6:bd:e7:2b:39:cc:41:39:97:7d:ab:a8:
db:f1:dd:6c:06:e5:52:a4:fd:42:9c:7f:7e:ae:68:
b0:00:78:b0:2e:de:42:71:00:6e:62:70:4a:33:97:
f4:63:50:45:51:32:bb:e5:5c:b7:81:92:f7:6b:ee:
43:0f:8b:8d:27:48:e0:60:d7:03:3a:f7:16:4a:90:
2c:9c:85:bc:07:86:94:d0:7d:a1:b4:59:d4:40:ef:
7c:b6:a3:a6:00:63:2c:15:85:8c:f6:fa:38:a2:dc:
72:36:bc:17:ce:6c:a2:25:70:a5:d5:70:c5:82:ba:
85:b2:a3:9f:10:51:05:c1:47:86:77:fe:e8:9e:8f:
85:58:3b:03:69:1c:af:17:fd:07:45:7b:78:cc:d6:
a5:70:6c:0c:f4:af:51:23:dc:25:0e:21:71:62:c6:
a5:80:75:6c:d7:d2:35:d5:07:78:05:e6:88:10:d8:
0a:d5:61:34:af:59:b4:5a:89:d5:ad:8a:51:a3:47:
3a:65:d8:4f:47:b1:31:4b:2b:42:19:24:17:41:60:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:83:CB:37:E6:43:47:93:A0:A7:FC:83:B0:2E:11:17:83:64:63
X509v3 Authority Key Identifier:
keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/kkaDyzfmQ0eToKf8g7AuEReDZGM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8d:b1:f1:36:c5:a9:72:13:3b:f6:f2:9e:cc:c9:fb:84:2c:
2d:14:19:51:a2:a9:78:a8:9c:eb:97:07:98:d7:cc:78:59:89:
87:7f:f5:5d:05:35:7d:ee:77:8e:ab:30:0f:e9:23:e6:d4:e1:
2c:5b:f2:38:48:1a:d2:5d:d0:ca:f3:c8:16:08:68:c4:7b:32:
05:c0:fd:c3:ac:3b:48:cb:99:ef:eb:ee:bf:ed:6b:be:8f:9a:
ab:8e:b0:67:af:68:1b:84:ee:72:19:dd:e3:c8:fe:06:70:a7:
cc:f2:a6:c4:d7:0d:97:eb:57:68:03:be:82:2c:c2:ff:1e:b8:
3e:58:da:03:ef:bf:6c:92:51:f5:c6:5c:58:96:50:dd:9c:ca:
e2:74:e3:9d:f9:ef:aa:b2:7e:f8:43:fb:0e:19:ed:a8:96:78:
91:2b:f5:fe:1e:a5:5c:c7:39:64:0a:ad:6e:c1:9b:68:46:b3:
90:43:ca:44:3c:0a:76:87:7b:7e:fe:8d:1d:6c:aa:bd:94:86:
a8:07:1d:7e:64:21:a9:ad:66:1a:0a:08:15:0c:d9:3a:9a:5d:
83:78:73:50:c6:5a:73:7b:ab:ac:1a:6b:39:b3:ff:e4:30:10:
b8:1b:28:1f:95:97:68:05:f2:08:c1:91:4f:b0:fe:02:e8:e6:
34:1f:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:14 2025 by rpki-client