Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/CnSmsPcU8zJKPC3FniIyiTKnuD8.roa
File: CnSmsPcU8zJKPC3FniIyiTKnuD8.roa (raw, json)
Hash identifier: QpcEJ9j6JvAJA34s+s/Imc8IFIwVhdEu/pZ8GvB3S7A=
Subject key identifier: 0A:74:A6:B0:F7:14:F3:32:4A:3C:2D:C5:9E:22:32:89:32:A7:B8:3F
Certificate issuer: /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial: 04
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/CnSmsPcU8zJKPC3FniIyiTKnuD8.roa
Signing time: Sat 22 Jul 2023 09:19:39 +0000
ROA not before: Sat 22 Jul 2023 09:19:39 +0000
ROA not after: Sun 21 Jul 2024 08:56:38 +0000
asID: 63771
IP address blocks: 2401:7640::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Validity
Not Before: Jul 22 09:19:39 2023 GMT
Not After : Jul 21 08:56:38 2024 GMT
Subject: CN=0A74A6B0F714F3324A3C2DC59E22328932A7B83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:3d:eb:c6:aa:b0:ba:b2:6c:5d:07:6e:60:
77:9f:6a:0d:29:41:cc:1d:d1:ab:3a:26:18:40:2f:
89:50:32:e8:0b:b9:15:bc:d7:3f:e6:58:6e:f1:d7:
3f:90:1c:8b:30:06:ff:1c:2f:5e:d3:57:73:40:a7:
7e:9f:69:52:68:64:f1:25:65:b7:e8:0e:bc:93:c9:
39:ba:fe:87:70:47:a5:40:90:72:3e:05:fa:4b:de:
fe:e6:9f:6b:ab:db:49:94:c2:7d:27:cf:91:5d:43:
b9:82:67:1d:7a:db:99:41:ae:4e:9c:18:9d:10:51:
90:65:3d:02:8c:20:3e:3a:d5:73:0b:1e:09:ae:47:
60:66:52:5b:0b:7f:4a:af:8b:e4:15:de:e6:e1:b0:
95:1b:4a:f3:ea:2b:a9:a6:cc:d9:59:05:e3:c9:c2:
fd:a6:8d:05:c4:54:24:cb:01:62:9e:64:08:59:9c:
c0:86:dd:8b:e2:12:10:d8:44:47:35:7e:84:2a:88:
a6:8c:4b:a8:16:34:29:8e:59:74:39:1c:a9:5e:85:
7a:46:ad:0a:6e:7a:b7:0b:e9:b3:a3:d2:f1:67:6c:
22:92:ca:55:a3:9a:af:31:d3:2f:f5:08:94:e2:d4:
4a:63:c0:ec:70:a0:19:85:41:fb:76:29:60:06:66:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:A6:B0:F7:14:F3:32:4A:3C:2D:C5:9E:22:32:89:32:A7:B8:3F
X509v3 Authority Key Identifier:
keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/CnSmsPcU8zJKPC3FniIyiTKnuD8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7640::/31
Signature Algorithm: sha256WithRSAEncryption
6c:b4:87:ea:cb:d9:77:84:92:11:af:31:c0:93:71:bd:a9:1c:
97:d9:9a:2e:c3:95:36:c0:d1:39:75:08:28:b2:5f:a6:e4:eb:
9d:69:1d:b8:84:e8:15:5c:74:a3:a3:cc:eb:b4:03:97:05:5c:
35:91:e9:b2:4b:d4:5f:1d:f4:e2:31:08:2c:da:9b:2f:c3:0b:
be:9d:e1:44:64:1e:4c:bd:53:f1:eb:08:d1:56:9c:46:5d:60:
6a:84:4b:8d:8c:d2:d9:09:93:18:ed:5b:c9:e1:3d:4f:9d:6b:
38:0a:f4:58:1a:aa:b9:db:a7:65:31:a3:55:50:ec:03:91:6c:
44:84:08:a4:8a:5d:be:0e:ae:da:30:7b:4f:2c:0a:35:5a:60:
df:9c:dd:82:05:d3:fe:1a:67:0e:d4:1e:0a:0a:1d:f1:51:1f:
8a:46:fc:61:25:9b:37:c2:9c:8a:e4:bf:3c:08:4e:02:76:32:
40:18:b9:8e:e6:52:3f:7e:ad:76:82:a8:3d:48:6e:8c:4d:79:
70:d6:5d:3e:41:f6:77:ff:e1:9d:40:dc:b5:41:d4:1c:89:ae:
3b:c1:61:a6:e3:f5:51:6d:09:4a:93:1a:d9:8c:b9:07:50:3c:
47:9f:ea:13:1f:63:b4:49:6e:9c:b3:c3:5c:57:a5:d1:74:c3:
4b:88:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:51:56 2025 by rpki-client