Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa
File: CLXl0X5mpU8e7IxCK21V_GoEOXM.roa (raw, json)
Hash identifier: 2DlhOKIbrlwFUwH97vXZHxe+j4Awc2/uZCB3+GLOQdU=
Subject key identifier: 08:B5:E5:D1:7E:66:A5:4F:1E:EC:8C:42:2B:6D:55:FC:6A:04:39:73
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 030C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa
Signing time: Thu 01 Jun 2023 16:05:29 +0000
ROA not before: Thu 01 Jun 2023 16:05:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=08B5E5D17E66A54F1EEC8C422B6D55FC6A043973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:2e:24:bd:43:38:18:e0:59:3f:0f:23:78:
ef:3e:ae:0e:82:9f:d0:04:23:49:bc:19:92:6b:1a:
a2:70:a6:62:c3:a5:f2:c3:72:c4:5f:66:31:6a:ed:
d6:64:fe:f1:89:50:d0:7a:af:6d:e6:f4:b4:2a:8e:
e1:36:d1:da:07:82:dc:70:f1:9e:5d:9b:0e:01:b0:
ae:2d:82:59:98:4b:42:d8:b8:e3:89:b0:a8:4f:9b:
15:dd:70:9e:53:07:c9:47:7f:42:74:9a:c0:23:c7:
73:1e:1f:d3:8d:44:da:d6:03:20:b6:ee:35:80:3d:
16:16:f8:a1:67:28:37:93:79:a2:e9:f1:7b:c9:86:
da:24:b2:1d:4f:d7:72:3e:b3:cf:06:47:bd:2e:8a:
45:ed:da:82:3f:10:f8:5c:8d:b1:6c:19:e9:1e:17:
f2:17:f9:87:87:85:5f:0e:fd:b5:2c:57:16:cc:86:
35:93:b0:ed:6a:de:76:86:8a:7b:2d:37:e2:77:2f:
23:d2:2b:b7:a1:8a:99:06:c9:cc:db:f0:70:f4:4f:
9e:02:fb:0e:50:b3:8a:7c:22:6c:26:dc:01:0c:1a:
b7:43:b1:e5:da:ef:a8:e9:14:43:4c:86:0e:e5:5f:
10:74:66:51:ce:10:8c:5e:56:af:20:6d:8d:dc:73:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:E5:D1:7E:66:A5:4F:1E:EC:8C:42:2B:6D:55:FC:6A:04:39:73
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CLXl0X5mpU8e7IxCK21V_GoEOXM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:3a:16:d4:0d:fc:3f:a0:eb:17:06:55:1d:de:00:fd:f9:90:
c5:42:ee:eb:47:54:2d:d9:76:d8:ef:f3:86:55:dd:12:97:2c:
a7:2d:8a:22:dc:41:62:f3:ef:fe:46:b1:3d:87:59:76:bf:77:
62:7d:05:6e:9e:4b:ed:fe:b3:65:9d:89:2a:ef:a7:4c:ca:d9:
1c:c4:4e:8f:91:cd:94:20:ea:2e:cf:22:a0:a1:b9:29:33:14:
77:56:3b:be:af:60:ef:42:ff:c6:bb:07:be:50:ea:0f:13:b9:
ee:30:b6:f2:d3:4d:3a:50:cf:2c:e9:fd:a3:fe:f1:a7:5b:4d:
7e:87:e7:5d:b4:36:3f:53:ec:97:53:a1:b9:a4:e1:58:5f:22:
3b:9a:73:c9:cb:27:1e:87:63:a2:61:96:f4:5a:66:c6:f8:87:
c4:d1:13:25:91:f5:09:54:94:31:64:2a:55:e1:6e:ee:48:b5:
89:1f:2d:b8:85:7c:53:16:f0:55:2d:34:e8:f8:a7:87:7f:26:
e5:bd:20:2c:7b:43:69:9e:7f:48:7d:8b:47:7e:4b:1d:d4:bc:
8c:ab:3c:62:db:99:de:8b:cc:e1:4f:03:37:85:ea:fc:cd:1d:
d0:c4:02:35:c1:87:46:81:4a:8f:dc:0d:6c:a3:f3:46:ec:cb:
13:60:1b:62
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA4QjVFNUQxN0U2NkE1
NEYxRUVDOEM0MjJCNkQ1NUZDNkEwNDM5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEaC4kvUM4GOBZPw8jeO8+rg6Cn9AEI0m8GZJrGqJwpmLDpfLD
csRfZjFq7dZk/vGJUNB6r23m9LQqjuE20doHgtxw8Z5dmw4BsK4tglmYS0LYuOOJ
sKhPmxXdcJ5TB8lHf0J0msAjx3MeH9ONRNrWAyC27jWAPRYW+KFnKDeTeaLp8XvJ
htoksh1P13I+s88GR70uikXt2oI/EPhcjbFsGekeF/IX+YeHhV8O/bUsVxbMhjWT
sO1q3naGinstN+J3LyPSK7ehipkGyczb8HD0T54C+w5Qs4p8Imwm3AEMGrdDseXa
76jpFENMhg7lXxB0ZlHOEIxeVq8gbY3cc6gbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCLXl0X5mpU8e7IxCK21V/GoEOXMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0NMWGwwWDVtcFU4ZTdJeENLMjFWX0dvRU9YTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYjwwDQYJKoZIhvcNAQELBQADggEBALY6FtQN/D+g6xcGVR3eAP35kMVC
7utHVC3Zdtjv84ZV3RKXLKctiiLcQWLz7/5GsT2HWXa/d2J9BW6eS+3+s2WdiSrv
p0zK2RzETo+RzZQg6i7PIqChuSkzFHdWO76vYO9C/8a7B75Q6g8Tue4wtvLTTTpQ
zyzp/aP+8adbTX6H5120Nj9T7JdTobmk4VhfIjuac8nLJx6HY6JhlvRaZsb4h8TR
EyWR9QlUlDFkKlXhbu5ItYkfLbiFfFMW8FUtNOj4p4d/JuW9ICx7Q2mef0h9i0d+
Sx3UvIyrPGLbmd6LzOFPAzeF6vzNHdDEAjXBh0aBSo/cDWyj80bsyxNgG2I=
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:10:37 2025 by rpki-client