Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/rk3X34y9J4T8yhI7hEtvgzPpgTQ.roa
File: rk3X34y9J4T8yhI7hEtvgzPpgTQ.roa (raw, json)
Hash identifier: HAT6I+3Qfjmy4pnOlsUzJFyayuWsSAo6EFpXtG4S2qg=
Subject key identifier: AE:4D:D7:DF:8C:BD:27:84:FC:CA:12:3B:84:4B:6F:83:33:E9:81:34
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 88
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rk3X34y9J4T8yhI7hEtvgzPpgTQ.roa
Signing time: Sat 01 Jul 2023 01:28:30 +0000
ROA not before: Sat 01 Jul 2023 01:28:30 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 2518
IP address blocks: 49.129.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Jul 1 01:28:30 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=AE4DD7DF8CBD2784FCCA123B844B6F8333E98134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:52:cf:17:39:e8:65:27:0e:e3:ba:d1:cb:
47:b7:e0:8d:7b:26:fc:7d:14:de:a5:71:49:83:03:
84:fe:80:c3:26:08:36:cb:d9:0e:45:50:76:a6:0e:
6d:fc:a5:ff:f2:2e:d7:9d:a3:de:42:f9:40:37:7b:
a8:81:3a:39:10:f5:8b:c8:99:f5:d5:a5:04:55:09:
fd:33:e3:27:81:54:c2:14:ee:42:db:7f:22:5e:f2:
63:17:21:45:1b:d5:55:a0:9a:48:5c:72:c1:55:1c:
15:b1:0d:b9:c9:b5:7e:cf:b2:f8:fe:5d:b8:e7:13:
21:6c:20:be:c8:dc:23:f9:b5:eb:6b:98:5a:93:a4:
23:d6:26:84:17:55:16:18:47:81:7f:e5:8d:61:c4:
2e:aa:03:72:25:ef:0d:c6:df:00:f8:fc:74:57:0a:
b9:81:01:7e:b4:83:db:d8:07:2a:67:85:63:5a:b1:
cd:7f:6f:55:9a:73:e8:51:90:b7:bb:57:10:f9:a9:
75:39:4b:6e:48:7e:51:58:73:c5:cb:d7:0a:07:31:
97:b4:ff:2c:08:78:d6:97:65:9b:7f:77:66:a0:ca:
a8:a7:91:2e:f2:05:3a:03:24:f2:1a:69:4d:0c:f2:
44:da:c3:7a:01:af:c7:8f:9e:26:39:95:67:f2:f0:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:D7:DF:8C:BD:27:84:FC:CA:12:3B:84:4B:6F:83:33:E9:81:34
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rk3X34y9J4T8yhI7hEtvgzPpgTQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:0d:4c:cf:6c:18:17:46:49:35:a4:61:53:79:4e:38:55:25:
88:69:9a:67:05:39:de:f9:16:42:58:8b:f2:ee:98:ee:df:d8:
3a:17:9f:0c:a1:3d:e2:ae:41:46:06:ff:9f:73:f7:4b:4c:f6:
90:00:c4:42:ff:eb:2d:58:4f:20:38:d2:e6:d5:8e:f6:5d:43:
4e:a9:39:2b:c3:0e:73:db:3e:5f:5a:1d:c1:0d:ee:20:e2:79:
77:6d:9d:4e:99:29:cd:46:de:77:9d:25:b0:19:41:2c:11:df:
8b:cd:73:de:e0:bb:9f:4c:20:8f:93:ab:f2:84:f3:95:9e:58:
49:24:b1:ba:5d:6a:2b:7e:53:9b:00:50:fa:f4:ff:67:ab:5f:
a2:3f:91:42:22:c6:63:96:b2:b8:a3:74:02:3f:eb:04:43:31:
b1:06:77:85:3e:da:bd:0c:a3:3f:d3:3c:9e:0a:6d:53:1a:1f:
01:44:6b:62:d6:9e:43:60:d6:95:a7:f5:c9:af:1a:5d:a4:cc:
c6:61:12:b5:ce:a9:9c:67:b9:58:f8:9f:55:f0:2e:61:08:cd:
4c:3a:44:5c:5d:40:04:d6:80:29:58:e1:1a:81:37:c2:ba:cb:
bc:74:74:35:f9:ce:18:a1:d8:28:e6:ce:13:82:ec:55:b1:10:
be:9d:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:07 2025 by rpki-client