Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Fst_IAh66SvaHxme7q-ubnhkkzM.roa
File: Fst_IAh66SvaHxme7q-ubnhkkzM.roa (raw, json)
Hash identifier: 3FtfpVnQBkCSyuLHAZtD/C3QFSIExB/t6Foi5HWJPrY=
Subject key identifier: 16:CB:7F:20:08:7A:E9:2B:DA:1F:19:9E:EE:AF:AE:6E:78:64:93:33
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 73
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Fst_IAh66SvaHxme7q-ubnhkkzM.roa
Signing time: Thu 22 Jun 2023 00:36:59 +0000
ROA not before: Thu 22 Jun 2023 00:36:59 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 115.166.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:36:59 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=16CB7F20087AE92BDA1F199EEEAFAE6E78649333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:d4:29:92:9d:b5:f3:49:d1:e7:48:43:92:
04:45:8e:54:d5:e4:6e:d4:a7:de:3a:d7:b8:64:37:
50:9b:a6:e4:64:9a:9c:d5:0b:84:ba:7e:40:1d:36:
fc:42:4c:4a:a9:8b:eb:cb:a3:2e:cf:9f:b4:df:bb:
9a:a2:f5:f9:ab:90:8a:65:56:40:d8:5a:5d:eb:ec:
ac:aa:d6:cb:0e:ac:9d:f2:09:2f:fd:ac:66:ca:e5:
c8:d9:8a:80:8e:a2:b8:6d:f0:48:7a:6f:05:35:bb:
f8:24:8a:c9:57:17:84:bd:60:d2:75:e3:89:31:2a:
f8:fc:6b:9e:02:7a:e4:b0:5c:82:b8:34:57:37:a4:
77:8f:87:31:f0:2f:99:fd:4f:5c:98:bd:df:30:42:
45:5c:85:62:c6:d2:24:ca:2f:cb:b1:5f:d8:ea:3d:
f3:a4:05:9f:a4:0d:ba:17:6d:37:4b:57:0c:1b:a9:
1d:0c:46:60:34:33:bb:6b:fd:e3:04:1f:25:e7:8e:
50:07:9d:26:14:df:27:fa:13:52:6b:c1:19:81:3e:
da:12:4f:8f:f7:04:20:9e:13:e7:0d:db:47:8e:eb:
4a:e6:ff:56:b8:d6:2f:59:23:34:7e:28:74:87:62:
c8:89:f2:44:01:6f:70:84:06:90:c6:7f:19:bd:3a:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:7F:20:08:7A:E9:2B:DA:1F:19:9E:EE:AF:AE:6E:78:64:93:33
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Fst_IAh66SvaHxme7q-ubnhkkzM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.166.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d5:4a:c0:a7:d3:37:84:13:c6:3e:67:9a:2e:b4:3d:b3:9d:
86:43:75:13:e9:c3:06:0a:1c:63:8e:36:e6:84:3e:ab:06:8c:
11:29:1d:40:f8:b3:e6:a1:8f:92:be:5c:d6:bb:8c:c0:52:2a:
d7:75:1f:a3:b2:22:c0:f4:77:b5:fd:bb:ff:31:69:a5:30:aa:
a8:34:9e:bc:c6:07:6b:ff:9c:08:1b:ff:d8:be:6e:59:f4:82:
38:fe:a1:d4:8d:6e:85:26:53:cc:88:a9:1d:27:bb:f3:0b:d5:
79:fe:78:3a:a7:ac:40:c2:37:e4:46:d3:81:6d:1d:0a:c9:3c:
52:e3:18:65:97:51:a4:d3:c7:9b:6e:fa:93:dc:78:e6:d6:06:
fd:d9:84:c2:7d:39:5c:cd:18:73:5a:1e:22:36:78:52:0d:c9:
85:a7:2d:b7:d0:1c:88:0d:12:67:a7:f5:87:64:20:32:dd:6e:
a2:0d:67:89:2e:e3:e1:9a:01:a0:a2:52:5f:af:06:e4:4c:de:
15:d7:cc:8f:bb:94:b0:74:5a:38:21:2e:78:06:72:a2:f8:1d:
3b:18:96:89:2c:6f:ec:77:ed:55:89:cf:fa:a4:1b:07:7a:37:
ce:1b:46:b2:78:3d:1d:48:4f:58:20:be:39:6a:de:95:10:22:
48:af:ab:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:47:57 2025 by rpki-client