Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa
File: NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa (raw, json)
Hash identifier: 0dt3SCLXlzR0Or+J3QbZfsRa6NEcYd1+DhX1boGgA5k=
Subject key identifier: 34:91:B4:5E:B1:91:7A:15:ED:0B:84:34:C7:CF:19:CC:A1:36:CC:42
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0113
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa
Signing time: Fri 01 Sep 2023 01:31:36 +0000
ROA not before: Fri 01 Sep 2023 01:31:36 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 202.221.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:31:36 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=3491B45EB1917A15ED0B8434C7CF19CCA136CC42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:82:3c:4e:40:ef:9a:bd:4a:ac:4e:11:a2:
38:e2:52:d8:10:0b:af:2b:f7:50:8d:ea:62:e1:5b:
e3:61:ea:cd:0d:54:72:82:2b:42:0e:10:c2:64:8b:
9e:29:b7:f0:ce:94:72:62:09:fa:fd:82:16:70:e6:
52:75:c8:4c:a6:09:28:29:18:c1:59:7e:88:fd:ae:
6b:44:74:48:79:10:3a:99:c6:33:33:d5:3f:a6:a7:
3a:33:c9:96:03:cf:76:a9:5e:ff:ee:35:5b:a5:f0:
db:8b:e2:69:89:6c:a0:9c:0e:59:27:a3:da:0c:9f:
c0:07:2c:73:d5:0b:de:00:8a:e6:93:be:dc:40:4e:
8e:63:fb:5d:0e:d6:58:67:17:84:c3:38:68:25:26:
22:87:76:63:57:74:99:c0:93:8a:3d:28:43:38:98:
3f:62:82:b2:f5:e0:a0:a3:45:a6:2c:13:30:b3:ff:
76:01:01:d6:87:d2:a7:6f:95:bb:c9:34:fe:3b:be:
5a:af:7c:07:b5:b3:11:b1:1a:69:9c:b7:7a:ab:f8:
58:89:52:89:67:24:48:91:c0:00:95:36:df:0f:f8:
58:23:08:10:b2:6e:bd:53:f0:ae:b3:77:a0:62:e6:
a7:c1:2a:e1:40:87:c1:79:76:f3:a2:91:0a:18:5a:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:B4:5E:B1:91:7A:15:ED:0B:84:34:C7:CF:19:CC:A1:36:CC:42
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/NJG0XrGRehXtC4Q0x88ZzKE2zEI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:68:72:09:73:5b:b3:16:4e:1d:55:12:ea:f9:75:3b:5b:92:
72:c3:9b:e0:07:90:53:58:f1:2c:29:f8:d4:7f:1c:ec:26:74:
ac:a4:64:bc:88:71:02:0a:77:8a:97:0c:17:83:6f:c9:c4:78:
30:44:ad:46:01:f4:f7:23:a4:2f:50:fa:f7:14:ec:05:83:8a:
02:ec:20:6f:49:87:92:f9:02:ac:66:d0:ff:12:07:0c:e6:3f:
10:89:8b:a4:b5:7b:ff:f6:ba:8d:cb:66:88:3a:6f:b7:d2:85:
65:78:28:fa:1b:44:f5:38:39:8a:1d:e2:d0:fa:9f:77:5a:56:
70:9d:3e:ff:51:d2:fe:a1:f0:57:95:c6:57:40:41:b3:32:51:
88:fa:4e:bd:6b:d9:9b:99:40:61:bd:9c:76:08:2f:29:16:53:
c3:bc:cc:28:ee:e0:c7:43:f8:0b:6a:cf:da:8f:27:fa:94:3f:
8a:c9:54:b7:f6:4b:98:ee:ae:61:d7:04:6a:aa:d5:0f:10:5b:
db:42:da:ad:eb:32:92:67:17:4b:19:e5:9a:86:02:61:46:9c:
2e:d3:7f:7c:c4:22:47:ea:5c:c6:42:9e:d3:d1:bc:81:d9:63:
aa:11:d9:ab:0b:4e:d0:eb:05:62:40:f2:c3:ea:f6:7b:2a:cb:
98:2e:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:36 2025 by rpki-client