Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ORBvUBMbH65Nx48BhsJtkHOudt0.roa
File: ORBvUBMbH65Nx48BhsJtkHOudt0.roa (raw, json)
Hash identifier: Y0gTkWJQf10yNlTv+Waxvr8P0RQctgefLQ8dpwdNjYQ=
Subject key identifier: 39:10:6F:50:13:1B:1F:AE:4D:C7:8F:01:86:C2:6D:90:73:AE:76:DD
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 3E
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ORBvUBMbH65Nx48BhsJtkHOudt0.roa
Signing time: Thu 22 Jun 2023 00:34:06 +0000
ROA not before: Thu 22 Jun 2023 00:34:06 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 122.128.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:34:06 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=39106F50131B1FAE4DC78F0186C26D9073AE76DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:56:2d:fc:43:49:23:ca:d8:4a:9d:6c:d4:
70:8d:6b:9f:58:8d:9b:bf:01:df:9d:85:08:0b:71:
c3:89:42:01:f1:c3:d0:77:d0:74:76:dc:92:7e:3b:
b2:d8:ba:ff:24:6b:73:3b:b6:6c:3c:14:77:82:9b:
f8:70:e1:d5:f3:4b:40:1e:89:4a:59:90:63:4d:51:
82:c5:5b:5e:bb:8a:0b:d8:0f:1d:ec:61:2a:2f:4f:
ed:ba:11:eb:0a:ec:e0:29:c6:2f:14:ed:d5:9f:94:
26:f0:a6:1a:14:05:2c:8d:ca:50:10:2f:bd:e2:33:
ec:3c:06:30:a4:29:2e:20:72:6c:59:3a:7e:21:df:
23:5a:c4:9b:61:dd:1c:2c:88:fe:19:26:3b:1c:dc:
a2:3d:43:d2:11:27:63:77:ce:57:ee:83:23:81:52:
f5:ad:01:fe:a4:b4:fb:ec:7a:24:d6:99:39:13:45:
16:83:95:72:f9:77:75:84:63:86:58:40:15:d3:d2:
b4:f2:42:e5:28:64:0c:a2:ce:ed:f6:b8:64:67:5b:
60:39:40:32:57:1a:89:71:a3:67:62:86:5c:3f:c8:
f6:59:29:6a:2f:b3:26:30:67:2f:82:7f:44:d2:0f:
2a:87:82:32:83:92:95:0d:5c:dd:75:7b:74:e7:8e:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:6F:50:13:1B:1F:AE:4D:C7:8F:01:86:C2:6D:90:73:AE:76:DD
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ORBvUBMbH65Nx48BhsJtkHOudt0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.128.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b6:61:a4:5e:27:6c:81:c0:a3:52:26:6b:3a:c8:ad:9a:38:
a0:5d:aa:c3:e9:76:0d:b5:0e:6d:f3:65:11:02:f7:cf:84:d0:
5f:07:6e:c5:6b:f7:4e:7d:d2:72:0c:ea:b2:63:6a:a5:c2:fe:
54:a9:1f:a6:67:d3:4c:cb:60:f6:b7:0c:be:ad:a0:55:f8:a5:
7b:9b:e5:af:f0:82:a4:8a:55:f3:54:13:63:40:71:62:74:46:
f9:d5:e3:a1:ad:ae:dc:90:9a:d9:27:99:45:37:b4:02:56:09:
5a:3a:9e:04:9f:e2:06:2f:e1:9e:9c:13:ae:06:fa:4d:6c:58:
48:48:e7:5d:08:14:59:29:ce:75:50:7c:4c:7c:ff:26:16:a2:
13:08:40:67:e7:8b:25:8c:37:04:21:72:7c:b2:37:e1:65:03:
3a:ae:25:9a:11:35:2c:5d:da:cf:c6:4b:bf:cb:7d:d9:71:ed:
57:9a:ac:b5:c3:ee:92:51:f1:32:8d:05:b7:0c:ec:17:9e:f8:
6d:d2:df:d4:40:b2:57:9f:99:ef:39:ee:23:9f:86:70:d9:3d:
6f:94:1f:90:6e:08:5b:a0:3e:44:a7:67:58:50:e3:6b:b9:8a:
72:d2:4e:e0:cc:6b:6f:26:f3:ac:e8:15:9b:f6:5a:36:7f:41:
94:3c:39:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:44:10 2025 by rpki-client