Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f1S6nmVNw0q6-mrUZfmjFVRCjLk.roa
File: f1S6nmVNw0q6-mrUZfmjFVRCjLk.roa (raw, json)
Hash identifier: yXgZJn7pZfPkKzwwXBp80WXxAaolJi+zHMvWbj26iXc=
Subject key identifier: 7F:54:BA:9E:65:4D:C3:4A:BA:FA:6A:D4:65:F9:A3:15:54:42:8C:B9
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 89
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f1S6nmVNw0q6-mrUZfmjFVRCjLk.roa
Signing time: Fri 10 Feb 2023 07:45:34 +0000
ROA not before: Fri 10 Feb 2023 07:45:34 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.155/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:45:34 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=7F54BA9E654DC34ABAFA6AD465F9A31554428CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:78:a5:b4:c9:6e:29:ec:4c:73:f7:29:a8:
cc:ce:ed:ab:15:b9:c7:3d:af:b5:97:66:a5:6a:af:
93:61:77:a3:60:8b:f2:d1:58:69:d3:c4:b5:87:f1:
c0:5c:18:15:74:9d:04:d7:1d:fc:18:4d:93:58:57:
41:f9:00:23:ab:15:ff:6e:a6:13:6c:d8:c7:09:89:
b7:89:01:af:8f:09:e4:de:22:48:e6:b4:e9:4b:b1:
0e:5c:27:b3:99:f3:30:fe:da:0f:17:fc:a5:c2:bf:
fb:c2:a3:76:49:cf:ea:ed:f0:10:7a:ca:f2:62:33:
d8:53:b5:a2:40:c9:11:cf:27:cf:ea:e7:c4:ed:bc:
93:85:11:0f:c5:52:1d:18:21:96:51:1f:e7:33:75:
32:c8:b7:bd:73:21:2d:62:1c:fe:ea:b8:ea:d3:eb:
61:be:83:d9:a0:81:18:af:fb:71:38:ed:ee:a6:25:
e1:5d:06:90:dc:a7:06:8a:1c:30:98:08:0e:70:4d:
40:a2:b0:fd:e2:96:8e:ce:ca:12:98:f6:28:6a:08:
42:c7:e4:c8:27:a5:9e:2a:a3:bc:a0:cb:a6:40:e0:
62:9e:25:1b:2d:9a:a9:02:59:39:14:a4:4b:8c:2c:
6e:d1:d5:21:1f:8e:77:37:f8:79:1d:39:f7:dc:ee:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:BA:9E:65:4D:C3:4A:BA:FA:6A:D4:65:F9:A3:15:54:42:8C:B9
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f1S6nmVNw0q6-mrUZfmjFVRCjLk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.155/32
Signature Algorithm: sha256WithRSAEncryption
24:fe:a8:06:45:4d:94:a4:7f:3d:79:f5:83:a0:dd:4a:84:c3:
60:9f:ad:f9:8f:ce:fb:3a:df:37:4c:d1:52:f2:96:3c:98:39:
29:0b:3e:e1:b6:45:a4:39:2f:6a:a6:2b:44:0a:17:18:fd:76:
99:6e:ba:dc:04:2d:f9:df:33:7d:85:d9:b9:95:66:3c:0f:ce:
ed:27:47:86:15:a4:0a:79:6b:13:78:d0:64:a9:a5:19:c3:13:
d5:bc:6e:44:82:24:fc:c3:80:cf:7e:61:82:1e:51:cd:a4:bc:
87:b2:67:f5:c9:dd:14:a6:47:28:f0:e2:07:0f:8d:59:1d:84:
a4:1b:39:f7:d0:70:23:ba:43:4d:37:22:f3:9e:34:ce:7e:da:
4d:af:89:ad:a4:8b:47:31:8e:dc:0c:fb:a0:ec:a0:e1:d2:ab:
40:aa:ed:86:11:5b:39:81:c1:86:05:ed:2c:28:d4:2e:ad:03:
8b:86:32:78:29:f7:2d:30:d0:20:6e:43:1e:94:39:7d:57:82:
a7:bd:45:f2:67:51:43:4c:9c:ad:cc:d9:3a:f4:04:9b:bc:7b:
53:ca:51:e2:d5:6f:6d:d6:c9:ec:34:6c:74:7f:b1:d1:8d:85:
a2:b1:00:e9:1c:1a:22:c6:83:c2:55:6a:ca:61:32:c0:91:50:
88:54:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:40:21 2025 by rpki-client