Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa
File: A-PQaIy7Aj6SGglUStmFTzDNdBA.roa (raw, json)
Hash identifier: u6ufx2yJwR6/IcfmI2n2Pnyp2+1bzKTdMFAsJKhWAlk=
Subject key identifier: 03:E3:D0:68:8C:BB:02:3E:92:1A:09:54:4A:D9:85:4F:30:CD:74:10
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 3D
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa
Signing time: Sun 01 Oct 2023 01:29:02 +0000
ROA not before: Sun 01 Oct 2023 01:29:02 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9621
IP address blocks: 157.70.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Oct 1 01:29:02 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=03E3D0688CBB023E921A09544AD9854F30CD7410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:fb:84:d3:72:18:e0:7e:e8:57:89:55:a2:
72:3f:06:4b:4c:0a:4a:17:fc:c1:bd:24:0b:4d:df:
07:dc:6c:ca:75:4e:72:1d:f1:3f:1a:c9:cb:2e:d1:
39:3c:96:51:e1:b9:ae:84:13:7c:d6:20:d4:60:4e:
b8:68:98:8c:9f:6d:b1:9b:88:7a:5c:b5:48:83:50:
f9:16:40:72:30:c7:5a:63:85:bd:da:1b:f3:9b:d0:
93:ea:eb:c8:46:45:18:e2:28:2b:98:95:83:3e:19:
26:c9:e5:32:45:4e:24:86:42:9e:29:e0:e5:e8:96:
18:e1:79:88:9f:00:58:0d:63:0f:b2:58:5b:14:15:
99:e5:44:84:4a:bb:45:27:7a:ec:66:62:b2:a9:87:
21:bc:d7:1f:4a:a2:bc:57:6b:d9:c7:b8:d5:29:cf:
b8:f0:c2:18:a1:7c:e7:cc:6a:63:80:bd:c5:0a:a0:
38:c3:87:eb:6a:86:8c:1e:ab:33:b5:84:2b:f1:c5:
f3:2b:8f:ba:01:ff:c1:c5:8e:86:55:40:1b:a2:d1:
f7:06:56:e3:98:0d:b6:44:56:7f:2c:93:6c:fd:67:
60:0f:26:c6:c0:15:d6:99:93:cd:3a:ad:d5:31:e0:
ab:8d:75:d8:c7:61:73:cc:00:92:52:84:95:7b:41:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:D0:68:8C:BB:02:3E:92:1A:09:54:4A:D9:85:4F:30:CD:74:10
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A-PQaIy7Aj6SGglUStmFTzDNdBA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.70.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:e3:56:4b:83:42:15:c4:a3:69:30:4e:4d:6c:75:89:f1:41:
15:8f:4a:5d:63:7d:bc:78:f7:3c:4c:c8:8c:d6:c5:92:37:82:
9c:c4:b0:be:09:49:47:73:e0:87:97:3c:21:d7:b7:28:0f:30:
ed:56:47:15:ef:ab:8f:75:f3:1c:b9:60:32:6f:25:a5:46:14:
c4:b5:15:ae:c7:59:af:f5:92:9b:28:5e:3e:e9:f1:82:83:26:
16:1a:ff:1f:52:15:64:6a:63:b5:68:48:d3:34:85:e9:96:f4:
e7:1a:60:6f:cc:7e:30:33:b4:4e:f5:d5:0d:10:2d:74:95:af:
32:3c:26:e7:f1:9b:6a:b8:c2:fa:6d:0e:24:15:87:00:80:f7:
c7:31:a7:56:d4:34:51:9b:83:27:f5:4e:51:88:5f:cf:59:cd:
13:ee:dd:58:52:b3:ec:c6:4a:a1:22:fa:4b:de:a3:1a:56:4e:
27:62:12:a3:e3:e4:d6:e4:17:2d:00:87:51:3c:c4:89:5e:bf:
58:4a:16:64:22:25:76:a1:02:cc:e7:cb:cb:c0:8b:ac:57:61:
33:11:82:cf:1e:59:73:63:cc:21:06:39:96:d9:42:6f:8c:38:
16:1c:c8:c3:4e:cf:b6:8e:d2:39:f2:3c:64:76:ce:37:83:92:
c2:e1:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:43:11 2025 by rpki-client