Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FRcVIo0yKXZx9XerYj9lTgD6ZAQ.roa
File: FRcVIo0yKXZx9XerYj9lTgD6ZAQ.roa (raw, json)
Hash identifier: FqshttrNBuDOUPBoUgCl0yIGW2csQCh9gB21KrQeOHo=
Subject key identifier: 15:17:15:22:8D:32:29:76:71:F5:77:AB:62:3F:65:4E:00:FA:64:04
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FRcVIo0yKXZx9XerYj9lTgD6ZAQ.roa
Signing time: Tue 30 May 2023 17:17:28 +0000
ROA not before: Tue 30 May 2023 17:17:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=151715228D32297671F577AB623F654E00FA6404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:a6:33:8a:76:f1:47:4c:01:74:0c:8e:cf:
4d:0c:f2:ae:15:68:d2:e7:90:d4:f2:f6:c2:4b:ab:
35:03:db:8c:05:d6:e5:81:88:3a:c0:7b:7a:9f:f6:
8d:ec:6a:dc:44:2b:e3:2c:6d:a9:90:d2:9b:ce:ee:
c4:81:dd:67:29:7b:37:1e:f8:ba:6e:3c:9a:68:4c:
57:de:8a:f0:23:9e:6e:1e:b4:5d:2d:c9:69:69:9b:
2d:50:83:96:95:7d:ed:cc:51:59:10:a6:ad:3b:bb:
98:62:17:ad:31:33:d0:f7:4d:7a:88:00:5f:72:99:
8f:09:e1:6d:e5:60:a7:82:b0:dd:e1:60:89:0c:26:
6c:93:21:6e:f1:e1:7a:38:ac:00:81:3d:bb:95:4a:
bd:57:4e:ad:5e:fe:4e:e0:1f:51:43:1c:ad:7f:8f:
a6:df:43:e6:e2:a7:41:63:58:88:a5:f6:53:f2:49:
2d:91:5d:12:3d:0c:cb:a1:76:49:76:a4:a9:38:a7:
e9:ca:c2:95:3f:f5:ff:2b:e7:ac:af:89:b0:cf:81:
94:43:7c:95:a6:92:02:84:1d:c5:d2:f3:79:a0:73:
a4:87:ce:27:59:2e:83:9d:c5:00:68:ee:d1:5a:ff:
04:53:6b:5c:b4:8a:35:b8:2c:cc:ca:7a:23:6b:4c:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:15:22:8D:32:29:76:71:F5:77:AB:62:3F:65:4E:00:FA:64:04
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FRcVIo0yKXZx9XerYj9lTgD6ZAQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.148.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7d:99:cf:59:b0:3c:c7:2a:8e:e4:66:05:72:03:af:30:fe:
c5:5e:fa:fa:64:73:f3:29:51:a2:4e:05:18:9a:c3:c4:9d:29:
53:c7:71:92:e2:27:54:93:53:bd:1d:32:69:51:b1:87:a9:b6:
39:b9:ee:20:95:7c:f7:6b:16:45:23:5a:99:7f:99:a0:96:51:
1d:e3:6f:02:e4:32:e4:dd:81:1f:f8:59:5a:4d:e8:a5:de:3c:
35:f1:fe:e2:74:4d:7f:89:ce:4e:f8:1a:54:2a:d0:e3:a9:6e:
aa:f9:cb:61:20:7c:0a:35:22:f5:08:2a:0d:2f:7f:39:b7:67:
18:84:4a:29:cb:9b:44:0a:1a:07:68:0c:50:05:de:75:df:a9:
d6:a5:13:8e:bc:63:ff:52:3b:16:c8:2c:fc:da:2e:f9:b8:92:
38:43:d4:46:86:4a:34:57:42:1b:dc:92:1e:e7:4b:14:8c:ba:
8f:ae:60:a6:50:97:ac:52:13:75:68:23:52:44:1d:d7:c3:9c:
d5:66:70:f6:41:a3:4c:c1:93:f2:39:86:d0:7a:4b:f5:71:ec:
b4:69:d5:ae:ae:61:57:67:b7:a1:ba:89:09:07:5e:45:02:70:
82:72:80:98:18:0a:f3:ac:77:6e:cb:a2:30:4a:16:f0:bb:9c:
91:e2:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:42 2025 by rpki-client