Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFTAdAa1XqJ9gDcToLtCKVIKZaU.roa
File: GFTAdAa1XqJ9gDcToLtCKVIKZaU.roa (raw, json)
Hash identifier: JonTYoBs/6SJxmm8q6S45/syesVjfo1XYTIrogfrTs4=
Subject key identifier: 18:54:C0:74:06:B5:5E:A2:7D:80:37:13:A0:BB:42:29:52:0A:65:A5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFTAdAa1XqJ9gDcToLtCKVIKZaU.roa
Signing time: Wed 24 May 2023 16:03:11 +0000
ROA not before: Wed 24 May 2023 16:03:11 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.164.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:11 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=1854C07406B55EA27D803713A0BB4229520A65A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:5a:f0:f4:7c:fd:bc:c0:4e:ba:e7:ab:48:
67:33:c7:f3:05:27:18:c7:db:20:82:7d:36:5e:db:
3f:51:46:3a:b0:2a:2a:e3:dd:4a:01:ed:8b:89:46:
13:3c:81:bf:07:dc:5e:91:65:b3:00:b2:18:0e:2e:
16:d7:19:48:c3:80:00:7b:c7:eb:45:4c:86:a4:58:
44:f5:8f:e5:f8:21:03:80:4e:d1:a2:ba:ec:c3:92:
c3:7c:01:eb:64:cd:63:e2:07:95:f8:c4:55:8b:b0:
b3:76:5d:d9:cc:37:58:c7:f6:5f:0a:d0:ef:11:d4:
7a:c5:19:7e:1a:e6:e9:b3:e3:b9:2f:af:13:60:44:
fa:69:8e:bc:3a:1a:0d:44:20:a1:3a:d0:1d:71:f9:
68:08:49:53:2f:bd:5e:bb:9c:84:8a:59:b1:a0:b9:
c8:fa:56:4a:27:d6:75:31:0c:5e:cb:d6:26:5f:da:
a4:f7:62:86:1e:dc:c6:62:8e:2a:1b:c8:29:64:9c:
30:1f:40:98:1e:49:62:ad:9e:67:cb:a0:e6:d1:95:
f2:83:7f:6c:d1:d7:2f:b7:ce:38:da:bf:3a:cc:5c:
e8:35:d0:de:b0:da:89:05:17:11:a5:ea:6a:5c:1d:
d4:f9:74:77:f7:6c:d5:74:a9:67:f0:4b:27:ff:b3:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:C0:74:06:B5:5E:A2:7D:80:37:13:A0:BB:42:29:52:0A:65:A5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GFTAdAa1XqJ9gDcToLtCKVIKZaU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.164.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:96:35:8f:7f:1f:47:21:62:60:8f:f5:45:1a:38:b7:41:14:
60:4f:43:dd:47:49:1f:07:2b:8f:02:ff:db:5d:6f:f1:8b:be:
7a:91:be:ce:1d:e7:5f:1a:e3:1d:9f:4b:2a:1f:15:4f:02:3a:
4c:48:11:b9:b1:02:4c:e8:15:5d:28:55:0c:d1:60:b7:18:d1:
ff:be:b4:0d:db:50:f9:18:5b:b8:f1:fa:47:85:38:c0:ab:f3:
b1:7a:ce:16:44:a6:63:56:0a:d1:d7:dc:e0:c7:01:7e:54:cc:
90:5d:a7:ee:eb:f2:16:f0:0b:1d:d7:0a:d1:f4:41:6d:6e:86:
70:15:7d:f1:22:6d:6f:c6:f1:ca:79:6d:82:47:ac:89:8a:ce:
58:bc:a7:1b:4b:75:95:a8:14:1a:be:27:ce:29:31:bd:cc:62:
98:54:d6:b4:17:41:fb:1f:cb:f3:86:02:7d:92:40:7b:41:87:
80:d0:d7:45:15:7c:26:3c:1c:f8:2e:10:d4:bf:bf:c4:ae:3b:
2a:56:b0:c5:3d:85:7a:3f:0d:d2:fc:7a:39:76:5a:8d:c7:3f:
1f:c6:c4:85:63:9b:65:e5:6a:4c:b8:2b:ac:91:b6:0a:6c:74:
8d:2d:91:80:73:1e:46:6b:94:6f:0f:cb:df:21:db:ca:d7:39:
6d:f5:a1:51
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjAzMTFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDE4NTRDMDc0MDZCNTVF
QTI3RDgwMzcxM0EwQkI0MjI5NTIwQTY1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzKlrw9Hz9vMBOuuerSGczx/MFJxjH2yCCfTZe2z9RRjqwKirj
3UoB7YuJRhM8gb8H3F6RZbMAshgOLhbXGUjDgAB7x+tFTIakWET1j+X4IQOATtGi
uuzDksN8AetkzWPiB5X4xFWLsLN2XdnMN1jH9l8K0O8R1HrFGX4a5umz47kvrxNg
RPppjrw6Gg1EIKE60B1x+WgISVMvvV67nISKWbGgucj6Vkon1nUxDF7L1iZf2qT3
YoYe3MZijiobyClknDAfQJgeSWKtnmfLoObRlfKDf2zR1y+3zjjavzrMXOg10N6w
2okFFxGl6mpcHdT5dHf3bNV0qWfwSyf/szmlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGFTAdAa1XqJ9gDcToLtCKVIKZaUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0dGVEFkQWExWHFKOWdEY1RvTHRDS1ZJS1phVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYqQwDQYJKoZIhvcNAQELBQADggEBALmWNY9/H0chYmCP9UUaOLdBFGBP
Q91HSR8HK48C/9tdb/GLvnqRvs4d518a4x2fSyofFU8COkxIEbmxAkzoFV0oVQzR
YLcY0f++tA3bUPkYW7jx+keFOMCr87F6zhZEpmNWCtHX3ODHAX5UzJBdp+7r8hbw
Cx3XCtH0QW1uhnAVffEibW/G8cp5bYJHrImKzli8pxtLdZWoFBq+J84pMb3MYphU
1rQXQfsfy/OGAn2SQHtBh4DQ10UVfCY8HPguENS/v8SuOypWsMU9hXo/DdL8ejl2
Wo3HPx/GxIVjm2Xlaky4K6yRtgpsdI0tkYBzHkZrlG8Py98h28rXOW31oVE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:07 2025 by rpki-client