Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RlJ1qrBR9kY-7DE45Ue2T0q6Be0.roa
File: RlJ1qrBR9kY-7DE45Ue2T0q6Be0.roa (raw, json)
Hash identifier: R+3f6z3Lj5vEtscPuHNPG9ub6WKvUE2pz5ASB8+iypQ=
Subject key identifier: 46:52:75:AA:B0:51:F6:46:3E:EC:31:38:E5:47:B6:4F:4A:BA:05:ED
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 041B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RlJ1qrBR9kY-7DE45Ue2T0q6Be0.roa
Signing time: Tue 06 Jun 2023 16:05:59 +0000
ROA not before: Tue 06 Jun 2023 16:05:59 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:59 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=465275AAB051F6463EEC3138E547B64F4ABA05ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:28:f3:b2:5f:02:a0:72:aa:ee:c2:f7:f8:
3e:10:10:67:c3:74:41:4f:50:d1:f2:23:80:c8:4d:
45:a8:13:8f:84:56:f9:17:39:cc:e9:91:ef:c3:a4:
35:c8:39:d1:82:57:78:67:fc:18:e2:b4:e6:aa:96:
a0:20:c8:9b:bb:18:7f:90:a0:ae:1e:a6:89:12:1e:
34:30:78:4f:16:bf:ad:68:a9:ef:c9:d7:b3:11:a4:
75:54:40:15:94:bc:2e:d2:95:7f:1d:bb:9d:5c:bd:
d2:f4:5d:4c:89:ea:cc:6a:12:85:a0:cb:8d:45:3e:
ac:9a:dd:7b:6c:0d:53:da:99:5d:42:a9:8e:a6:6a:
fa:28:ca:ee:69:ba:48:2e:61:ed:d3:ee:dd:14:65:
24:ae:95:09:b7:4c:52:4a:66:dd:6f:b9:23:a9:60:
00:f3:6e:41:ab:ed:47:ec:64:f2:ed:fa:a4:e8:b8:
48:77:af:71:12:6a:3d:48:db:25:4b:9a:09:c9:fb:
42:fa:0e:ce:97:cf:b3:b1:59:b2:ab:30:bb:f5:78:
8a:e6:b9:e8:ba:38:e0:82:f1:9e:ec:65:8a:f4:9c:
e4:8e:07:b5:30:db:57:19:6f:67:0e:22:af:6a:0a:
7b:8b:e2:bc:f0:a7:30:d5:6d:f1:b7:cf:32:ee:97:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:75:AA:B0:51:F6:46:3E:EC:31:38:E5:47:B6:4F:4A:BA:05:ED
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RlJ1qrBR9kY-7DE45Ue2T0q6Be0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.128.0/18
Signature Algorithm: sha256WithRSAEncryption
24:8e:21:9a:6a:50:01:3a:94:3f:46:e1:36:e7:35:b2:96:7c:
24:3e:e5:a0:71:d5:04:e5:e5:13:c7:50:e7:1f:16:35:bd:90:
be:f2:ee:13:4a:82:f4:79:fb:af:dd:88:b1:12:69:5b:ad:42:
1e:c3:82:48:96:87:f4:45:95:7f:01:6a:58:e1:b5:6a:3c:46:
5c:fd:88:3d:1b:3a:ea:dd:6c:51:de:3c:8f:20:54:b1:9a:6b:
40:5d:0c:fa:d3:84:3a:cf:6b:75:6f:2c:d6:b3:fe:bf:a7:9e:
82:0a:e4:a2:0d:3c:65:89:20:c9:06:e6:7f:c2:85:15:d1:a2:
84:c0:79:25:42:be:38:77:86:fc:08:ef:87:f1:7b:c5:02:01:
6a:8d:f4:67:78:bf:a9:5e:fd:9f:35:03:81:8e:b6:73:ef:fd:
6b:e8:f2:45:de:be:17:44:b7:2e:a8:9e:b2:8f:85:b7:a6:ac:
80:f9:24:55:74:7e:8a:ff:a3:1e:b0:d3:5b:91:c3:91:a7:f2:
46:80:df:73:5f:90:30:62:f6:be:54:54:35:37:2d:e1:65:af:
e1:2e:09:82:0e:6c:7d:da:f5:4a:23:3b:4a:6f:92:00:d5:dd:
7f:07:b6:5a:40:d5:31:0e:5f:0a:55:09:30:3e:b4:04:77:a6:
d3:98:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:36 2025 by rpki-client