Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
File: BbexY_AJTzojwkg6tLA4pav1pzw.roa (raw, json)
Hash identifier: rtuNLfwGkLuC3Gf1Bbg+QiufxbeqSRAk5B5+0GlvwdM=
Subject key identifier: 05:B7:B1:63:F0:09:4F:3A:23:C2:48:3A:B4:B0:38:A5:AB:F5:A7:3C
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0126
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
Signing time: Sun 01 Oct 2023 01:28:37 +0000
ROA not before: Sun 01 Oct 2023 01:28:37 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2497
IP address blocks: 133.137.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Oct 1 01:28:37 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=05B7B163F0094F3A23C2483AB4B038A5ABF5A73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:a1:fc:a1:f1:42:31:30:af:92:53:85:f0:
5b:f9:70:bd:1f:07:0e:33:95:63:f4:17:e2:f0:9e:
19:4c:b1:d2:79:45:c0:6b:7b:db:27:18:61:f5:29:
e0:33:98:59:ef:cc:57:49:48:eb:05:80:b6:65:3e:
29:4f:73:bf:fa:a3:f0:30:02:6a:a7:24:79:52:36:
fc:73:fa:76:13:4e:ea:d8:31:5d:a0:94:6d:63:dc:
53:3d:db:7d:7f:3d:93:ef:04:f7:26:d7:a9:af:5e:
d5:40:d3:03:7b:7c:48:17:38:89:75:5a:71:d3:d4:
27:88:12:ba:dc:7a:29:45:17:7c:7e:83:7b:c3:ec:
97:43:2c:76:aa:c3:c0:0d:b2:ca:da:aa:9c:b3:28:
f5:a4:86:44:1c:9e:33:a8:d3:c7:97:e5:92:4f:e1:
7c:da:a6:88:ff:55:6c:59:c1:49:41:b7:c3:c1:74:
36:ae:2f:1c:fd:c0:95:19:48:33:fc:fa:af:80:f9:
a0:ff:38:20:39:38:2b:25:6b:8b:cb:f8:23:71:b6:
51:b2:c3:f1:68:4e:87:4e:5d:fd:b1:97:4c:6f:e2:
63:4f:b8:cb:44:aa:f4:24:52:ad:8c:d5:7f:55:0a:
7e:f1:1d:eb:3e:fe:42:d1:6a:e9:fa:0d:ac:b3:37:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:B1:63:F0:09:4F:3A:23:C2:48:3A:B4:B0:38:A5:AB:F5:A7:3C
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:f4:b2:fb:8f:81:1a:45:ba:fc:04:b0:01:2c:0e:40:9b:eb:
68:03:12:a3:f8:33:21:c1:5a:b6:b1:b2:b8:b8:88:1b:5a:39:
e2:d5:09:82:6f:ce:32:66:ac:59:bb:be:a3:7e:ca:7b:6c:e2:
b5:b5:38:d2:e3:54:6c:46:e2:6a:17:bc:16:f4:cc:e6:ef:a2:
e0:16:52:fc:f3:71:5b:f6:03:3c:81:ac:36:e4:fd:fc:cb:2f:
20:03:b1:c4:3e:2c:34:d4:e1:9b:19:a1:52:f7:41:d9:40:24:
53:d9:55:ec:b6:d5:3e:56:c8:e0:0e:e0:37:1a:27:e5:02:6c:
69:6a:10:65:31:10:27:52:e0:c0:7e:fe:b9:1b:12:17:86:9b:
ac:8d:a7:38:2a:8c:e7:26:a3:51:46:dd:72:67:1c:49:c0:06:
3b:2e:9b:83:df:aa:1d:23:30:eb:25:c4:a5:46:0c:e6:66:be:
bc:0c:2d:46:a9:3f:9f:a5:b9:2d:03:cb:4a:f3:53:92:3d:34:
ae:33:46:bb:ca:37:6f:01:94:06:93:05:17:76:cc:61:d8:a9:
9e:ea:35:60:ce:ef:d7:6c:14:5b:95:b0:a7:84:5c:e9:bb:41:
bb:3c:83:e9:46:09:f0:a0:98:ab:21:a6:b6:d7:c8:91:4e:c3:
f4:ad:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:25 2025 by rpki-client