Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bshoR15rUzKIW4qR_uUcf-iFEWk.roa
File: bshoR15rUzKIW4qR_uUcf-iFEWk.roa (raw, json)
Hash identifier: H5NMNp+mbbfRs+KO2gJLkMQdauERjW8yUruF7o2qq0w=
Subject key identifier: 6E:C8:68:47:5E:6B:53:32:88:5B:8A:91:FE:E5:1C:7F:E8:85:11:69
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 33
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bshoR15rUzKIW4qR_uUcf-iFEWk.roa
Signing time: Thu 22 Jun 2023 00:34:01 +0000
ROA not before: Thu 22 Jun 2023 00:34:01 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 203.160.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:34:01 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=6EC868475E6B5332885B8A91FEE51C7FE8851169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:de:9d:88:bb:6d:ed:91:18:04:97:45:ab:
1f:19:3d:c6:56:f2:5e:f2:09:3f:6a:8a:cf:7f:5a:
27:16:f1:91:e6:75:2a:e3:c0:e9:28:b3:1e:d1:5f:
e8:7a:71:a1:f6:a0:70:11:5e:fb:0e:c2:ab:9d:bc:
64:ea:83:63:ed:9c:82:8f:6a:1b:6e:39:80:48:7a:
e4:c8:e1:e4:ab:2c:52:7d:28:f2:38:d3:58:40:fb:
92:76:5d:6e:22:25:b1:67:ed:58:0b:56:79:53:bb:
b0:dd:21:1c:73:e0:db:c2:bd:34:65:e3:90:2e:d2:
ab:60:cd:3c:fa:a1:72:91:b1:a1:8d:7a:a6:97:17:
55:a9:15:0d:d9:e4:d3:ed:b8:04:17:aa:72:7d:00:
41:f5:22:a7:1e:1c:5d:f3:e8:02:1f:70:b2:b5:9f:
a5:c9:b4:71:39:db:8d:9e:64:25:75:d9:c6:db:a1:
e0:a8:89:85:6b:2a:29:bb:69:11:b6:7e:c5:cd:92:
2d:b9:eb:18:bf:16:a3:58:91:f1:9a:ef:33:12:d1:
0e:66:ff:93:40:a7:d4:1f:5e:72:3e:c4:7e:04:b9:
12:85:54:73:ff:64:b1:2f:3e:98:fb:54:35:6c:6f:
9d:1f:bb:b3:a8:36:87:5d:11:4e:30:01:eb:5c:db:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:68:47:5E:6B:53:32:88:5B:8A:91:FE:E5:1C:7F:E8:85:11:69
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bshoR15rUzKIW4qR_uUcf-iFEWk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.20.0/24
Signature Algorithm: sha256WithRSAEncryption
42:54:11:c4:7f:3b:53:b2:0f:17:1b:ea:5b:47:27:df:a3:78:
e4:e6:78:79:5d:05:c6:f9:22:d8:ff:e4:db:5a:91:57:85:9f:
fb:b8:25:e2:f6:e6:c0:33:ba:31:f1:f1:06:ff:5a:75:75:79:
01:b0:30:0c:4e:e9:9d:fb:93:d7:e8:db:5a:c5:71:f2:54:90:
08:e8:ae:32:be:29:5a:9f:8c:52:56:10:71:cc:70:ab:32:01:
fa:0a:c0:03:11:ca:69:b2:31:18:26:78:f0:93:72:f4:1f:74:
71:4b:d6:c4:4e:01:7c:f8:dd:1e:1f:f3:43:5a:5a:4d:ae:b5:
df:83:05:7a:01:a4:39:45:e1:16:61:7c:77:f3:48:65:fe:ae:
ad:32:ea:80:4e:0c:3c:e7:f1:e9:87:f7:26:8c:26:96:14:45:
9a:b7:2f:b3:52:c6:d2:ae:73:76:ef:47:37:7a:c0:81:bb:43:
2a:97:26:2e:31:e5:ad:61:39:2a:5b:85:33:c4:41:62:a2:33:
2f:bb:1e:2c:32:17:7c:3e:7d:5a:58:d7:83:3b:08:0f:b3:4e:
37:2b:6d:99:01:b2:38:b1:a5:06:ad:67:71:85:e8:9f:b4:dc:
41:42:73:74:c3:0e:f4:46:38:e6:b4:45:19:f2:c3:63:dd:b7:
43:cf:f4:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:34:38 2025 by rpki-client