Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa
File: OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa (raw, json)
Hash identifier: PgYrhXWAejiUzVnzdZs1vGINRZXSjYXEZCAge5cGqPE=
Subject key identifier: 39:20:FF:88:64:C8:8B:92:D7:43:D6:87:06:FC:84:C3:71:F9:6C:35
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0431
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa
Signing time: Tue 06 Jun 2023 16:09:11 +0000
ROA not before: Tue 06 Jun 2023 16:09:11 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:09:11 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3920FF8864C88B92D743D68706FC84C371F96C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:b4:09:92:3e:76:ac:b8:a4:06:7b:ed:ac:
cf:48:73:4f:1c:4c:cb:5d:40:77:db:9a:34:6f:7a:
20:2d:f6:0e:95:65:fa:f3:76:14:89:28:77:c0:8b:
b7:55:20:bc:9c:85:2a:62:8b:0b:33:66:e3:7f:44:
1a:91:f7:85:1a:0f:ef:62:db:6b:59:35:c9:0f:61:
92:ce:ea:42:3b:f9:ff:73:85:2f:1c:8b:0a:0d:aa:
49:04:90:1b:f5:f8:c9:cb:30:63:d6:8e:f6:bd:73:
6e:79:85:5b:8d:d2:c7:71:a4:85:16:2c:f7:fe:45:
02:95:91:fe:fc:24:63:ab:08:13:97:cd:cb:1c:40:
8b:8d:75:fa:3e:85:b6:2d:5b:c1:24:9d:f1:c5:b5:
ee:81:78:41:cf:62:b4:b7:d2:86:16:d3:d6:5c:c0:
54:d3:25:72:6f:a3:50:a2:a0:31:a8:d4:49:a2:55:
b5:ba:32:c8:50:61:e4:24:1b:70:3a:27:4a:21:c0:
26:ee:70:4d:00:08:a9:50:cd:f6:ca:8a:2e:43:4a:
56:f3:ce:b3:8a:2e:7b:df:88:05:c5:06:78:c3:61:
3e:ba:da:96:57:ac:f2:c8:32:c9:6b:6d:ba:c8:53:
6c:12:17:f6:17:ed:55:83:76:9a:fd:61:89:7b:03:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:FF:88:64:C8:8B:92:D7:43:D6:87:06:FC:84:C3:71:F9:6C:35
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSD_iGTIi5LXQ9aHBvyEw3H5bDU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:95:dc:57:b1:93:f7:7e:1c:46:ec:60:b1:4b:e3:38:b6:fe:
40:42:75:a4:f9:d0:d0:ad:b7:0e:98:f0:40:b4:70:f9:c7:82:
8e:67:3b:b6:29:7b:d4:32:6a:70:ee:38:76:f4:c4:ef:4f:d2:
83:71:a6:7c:8c:d5:0b:67:05:6b:a0:30:0f:d0:76:52:2b:46:
b8:aa:d8:5a:6f:4f:e1:c9:02:a2:d0:ab:47:25:d7:fb:0b:df:
0a:79:6d:64:33:67:84:26:2f:e0:09:60:d3:02:30:28:e7:9b:
1b:3a:b1:e7:04:3b:5f:46:c8:0a:c0:0e:d1:33:75:92:9f:05:
89:37:f1:d9:fa:4d:02:61:d9:c7:10:7e:c3:35:35:0c:5d:10:
62:9b:a5:13:e7:eb:42:f5:38:4a:d6:bb:d1:6c:66:a9:87:f4:
76:53:f0:93:83:06:ca:62:4f:25:d0:ef:a2:f6:2a:72:ca:cf:
7b:74:c4:e1:5b:84:3d:6c:31:6e:5a:93:72:8b:a2:79:41:10:
12:b5:74:de:14:05:d1:d4:6a:67:16:4e:9d:a1:7e:30:84:df:
51:dd:4e:05:ce:71:06:73:f1:48:85:60:ad:b2:66:36:67:6f:
50:40:f5:92:4a:84:0b:fe:33:e2:e0:af:d4:67:99:af:57:20:
6e:45:10:c4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA5MTFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM5MjBGRjg4NjRDODhC
OTJENzQzRDY4NzA2RkM4NEMzNzFGOTZDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo/bQJkj52rLikBnvtrM9Ic08cTMtdQHfbmjRveiAt9g6VZfrz
dhSJKHfAi7dVILychSpiiwszZuN/RBqR94UaD+9i22tZNckPYZLO6kI7+f9zhS8c
iwoNqkkEkBv1+MnLMGPWjva9c255hVuN0sdxpIUWLPf+RQKVkf78JGOrCBOXzcsc
QIuNdfo+hbYtW8EknfHFte6BeEHPYrS30oYW09ZcwFTTJXJvo1CioDGo1EmiVbW6
MshQYeQkG3A6J0ohwCbucE0ACKlQzfbKii5DSlbzzrOKLnvfiAXFBnjDYT662pZX
rPLIMslrbbrIU2wSF/YX7VWDdpr9YYl7A/A/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOSD/iGTIi5LXQ9aHBvyEw3H5bDUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09TRF9pR1RJaTVMWFE5YUhCdnlFdzNINWJEVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaCIwDQYJKoZIhvcNAQELBQADggEBAJyV3Fexk/d+HEbsYLFL4zi2/kBC
daT50NCttw6Y8EC0cPnHgo5nO7Ype9QyanDuOHb0xO9P0oNxpnyM1QtnBWugMA/Q
dlIrRriq2FpvT+HJAqLQq0cl1/sL3wp5bWQzZ4QmL+AJYNMCMCjnmxs6secEO19G
yArADtEzdZKfBYk38dn6TQJh2ccQfsM1NQxdEGKbpRPn60L1OErWu9FsZqmH9HZT
8JODBspiTyXQ76L2KnLKz3t0xOFbhD1sMW5ak3KLonlBEBK1dN4UBdHUamcWTp2h
fjCE31HdTgXOcQZz8UiFYK2yZjZnb1BA9ZJKhAv+M+Lgr9Rnma9XIG5FEMQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:44 2025 by rpki-client