Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/HpNCviKIs03RpEMfGya3hVsDb5Y.roa
File: HpNCviKIs03RpEMfGya3hVsDb5Y.roa (raw, json)
Hash identifier: SvTGonRukq9b26FSNKMzkYl3DQlYnFaGTpkyxqtOr1s=
Subject key identifier: 1E:93:42:BE:22:88:B3:4D:D1:A4:43:1F:1B:26:B7:85:5B:03:6F:96
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: DA
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/HpNCviKIs03RpEMfGya3hVsDb5Y.roa
Signing time: Wed 02 Nov 2022 09:14:12 +0000
ROA not before: Wed 02 Nov 2022 09:14:11 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2497
IP address blocks: 133.238.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 2 09:14:11 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=1E9342BE2288B34DD1A4431F1B26B7855B036F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:3a:2e:1e:5a:ce:50:57:36:58:b5:e3:02:
ce:ba:e8:f1:b5:04:b7:f0:97:bd:e5:c1:b2:eb:20:
72:63:b0:82:e7:19:3c:40:7b:42:0b:c1:ae:ce:ac:
56:04:4c:2b:b6:84:34:ad:21:4c:2d:e6:61:4d:04:
0a:82:cb:d9:89:86:6e:a7:7e:34:18:d3:c5:13:c8:
9a:38:31:cc:7a:c7:75:25:87:e7:bf:51:00:ed:32:
b1:29:30:2f:fb:f8:60:d7:01:7e:38:e4:1d:f8:ba:
e8:52:50:a7:de:a7:ad:c2:79:c7:66:22:42:b4:61:
b3:0e:3b:fb:85:a3:06:7f:1d:25:82:96:59:38:e2:
03:ee:80:98:0f:ee:b3:6a:bc:d3:d3:c4:ec:45:79:
86:4a:64:31:f6:9f:5d:dd:f1:2a:ca:2c:cc:24:2b:
04:11:85:c3:b3:ac:01:11:52:c5:65:57:a8:26:d0:
c4:1d:0b:75:b1:c9:f3:bf:17:14:8b:f0:b7:bf:72:
60:92:d8:ae:4f:38:ea:79:7a:36:af:8c:1d:3e:b7:
9f:89:99:df:fb:41:cc:a0:31:1a:e0:63:d9:16:f2:
d1:d6:f6:7c:94:8a:47:4e:ec:f3:60:a3:65:54:c8:
4c:97:58:cb:4f:46:ca:ce:9a:44:11:77:99:c4:cf:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:42:BE:22:88:B3:4D:D1:A4:43:1F:1B:26:B7:85:5B:03:6F:96
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/HpNCviKIs03RpEMfGya3hVsDb5Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.238.128.0/17
Signature Algorithm: sha256WithRSAEncryption
96:35:4c:a3:88:eb:30:6a:a6:2e:49:fe:18:5a:4d:26:73:25:
34:ba:89:c1:3a:4d:6d:a1:90:83:6a:f6:eb:8a:3c:77:c1:ff:
99:69:0c:67:af:4f:fb:aa:a1:7d:27:b0:25:cc:44:9d:be:64:
1f:0a:98:1e:c2:62:dc:74:23:ce:1a:12:97:39:2d:49:71:97:
2b:a7:f7:75:d7:e6:fc:3c:cd:4d:51:6b:ad:f1:eb:57:f2:09:
ca:14:ff:af:54:a4:7e:2a:58:6b:02:93:b3:9a:01:9a:eb:27:
e3:03:e8:dd:27:af:15:0c:fa:24:7f:62:c2:02:76:ca:4c:43:
74:f7:a6:5e:ad:0a:1f:97:9d:63:34:78:83:ec:b3:27:ab:9a:
c9:49:02:79:ce:44:b9:41:23:52:f7:b4:c1:5e:d7:41:0c:cf:
4a:cb:5b:0c:0c:57:23:0a:e4:20:31:6f:d7:87:96:e1:de:4d:
3c:80:27:b4:fb:01:20:fd:87:b0:77:47:97:23:aa:9b:3b:92:
30:7c:f0:a9:76:cb:73:d2:cc:6e:05:18:52:e9:7c:9a:63:a3:
df:36:60:de:69:4a:68:55:23:4e:0b:6e:9c:10:10:ec:b0:e7:
c9:46:ba:19:77:43:66:70:17:7f:df:76:00:1e:79:63:63:c7:
85:6f:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:29 2025 by rpki-client