Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa
File: Q1LNKC3iZ6PlryknZb1akN53CJk.roa (raw, json)
Hash identifier: 3nIV6DmEn7OidYJmK1AIH5vXta3EN5588rj7gvjnudU=
Subject key identifier: 43:52:CD:28:2D:E2:67:A3:E5:AF:29:27:65:BD:5A:90:DE:77:08:99
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: F6
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa
Signing time: Fri 01 Sep 2023 01:28:51 +0000
ROA not before: Fri 01 Sep 2023 01:28:51 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 124.41.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:28:51 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=4352CD282DE267A3E5AF292765BD5A90DE770899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:5f:98:97:dc:37:06:b4:7f:c4:77:9a:a6:
a6:6d:7e:47:55:cb:69:25:a4:a0:96:87:32:7c:82:
d4:20:a0:f4:1f:73:54:1e:5a:25:33:f2:07:3d:1d:
d2:f9:58:e5:06:c8:a6:cd:dc:d0:80:bd:1a:22:61:
4a:83:c9:f3:89:a6:a9:bd:68:83:e7:25:b4:b8:67:
f3:f2:c6:89:74:12:06:76:97:8f:5b:57:fc:09:05:
15:76:be:42:6e:c5:89:89:b9:f6:8b:f1:ff:f9:04:
05:98:62:c5:8b:72:c7:89:0f:a9:45:e0:fd:45:3a:
d5:06:55:13:82:1a:57:e5:4a:96:b7:72:a9:ff:6f:
cb:d0:87:16:88:86:62:07:3a:ae:a3:05:87:51:89:
59:56:ca:d5:ce:70:55:a7:97:e4:a0:5a:d0:a3:a0:
cb:8d:56:60:0c:f6:fa:f8:5b:8b:5f:84:6b:e4:72:
30:aa:8b:85:a8:0f:4f:1b:76:e8:d4:aa:62:65:d0:
87:0e:ee:b9:ad:e2:e8:c2:6d:16:e6:2f:96:d0:0c:
89:a5:0f:ac:40:85:7e:09:c1:1a:58:02:01:e2:f5:
e8:48:18:33:da:51:95:8f:bd:c0:6e:0f:22:16:33:
be:c0:a7:6a:36:61:40:2c:fb:d8:3c:78:b3:15:e4:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:CD:28:2D:E2:67:A3:E5:AF:29:27:65:BD:5A:90:DE:77:08:99
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.41.0.0/17
Signature Algorithm: sha256WithRSAEncryption
95:98:18:a5:3f:38:e8:8e:09:4d:17:56:5e:ff:35:59:6f:ae:
2c:25:b9:b7:72:8e:cd:2c:9d:5b:d5:0c:bf:73:8c:b4:5a:ea:
2d:af:bb:1d:5d:b2:e5:f0:ce:7f:32:e6:be:4d:09:f0:3c:7a:
8b:d7:9e:fd:a8:17:71:71:64:d0:4a:46:50:21:23:de:29:d9:
a2:e1:85:ed:0c:aa:d2:62:36:88:96:60:2a:39:b7:f9:20:cb:
fa:26:7f:e8:e8:dc:ab:fc:b6:86:5a:8c:4f:88:5e:24:73:32:
49:f5:31:c9:bc:c0:1c:f2:2b:fa:a9:b9:09:ce:4e:a0:f7:04:
ff:43:09:68:a0:7d:9c:94:10:ba:a4:07:c2:a1:0a:df:9f:8d:
99:4e:7b:61:70:af:53:5c:ca:49:d2:42:ac:9d:a7:16:6f:5d:
2c:f8:05:97:0b:08:e1:ed:22:53:cd:52:80:0c:6c:79:af:9c:
46:13:18:db:dc:93:cf:94:70:b4:d1:ab:a3:18:ef:69:7f:2b:
38:39:fc:3e:bc:d2:56:e6:14:ed:20:7a:fe:28:ae:f0:df:82:
0d:ad:11:93:d3:dd:35:bb:e6:d7:f0:6f:14:59:0f:0e:28:cb:
c6:e5:4f:8c:fa:e9:d0:1b:8e:09:0e:1e:48:a8:b0:96:d1:d5:
e8:31:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:23 2025 by rpki-client