Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
File: UuabAS00HNCGp9_DT6h3JEY7DNk.roa (raw, json)
Hash identifier: YenA1yTzEEIycrAe3F41pKdUW0uvJeIghrk/HnXxmgE=
Subject key identifier: 52:E6:9B:01:2D:34:1C:D0:86:A7:DF:C3:4F:A8:77:24:46:3B:0C:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
Signing time: Wed 24 May 2023 16:40:28 +0000
ROA not before: Wed 24 May 2023 16:40:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=52E69B012D341CD086A7DFC34FA87724463B0CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:25:0c:9b:b7:86:73:35:6f:fe:8a:5a:7e:
6b:9b:78:80:e3:05:41:ba:be:50:10:57:df:fd:3d:
c7:cc:4f:93:b2:52:95:fc:86:c1:64:47:97:eb:a3:
0b:1a:52:a4:65:ab:46:ca:47:c3:d0:de:eb:58:86:
d9:be:80:6e:4e:32:c5:57:a1:5c:50:ee:09:fb:63:
b6:83:3c:41:b8:70:7a:54:f5:c6:38:08:40:92:9e:
81:ab:be:e3:d0:16:1b:bf:f0:a1:f4:ba:07:64:5e:
19:3d:31:e7:24:7a:45:8b:25:84:ca:b3:cc:fd:61:
b4:6d:99:aa:c8:46:8d:fc:0d:01:c6:bc:7d:d3:46:
ce:08:e6:55:82:fd:0f:6d:c6:60:cd:dc:c0:1b:64:
15:d1:59:22:40:9e:e0:21:01:b8:99:1e:61:79:ce:
5d:1c:d5:e0:93:7d:51:87:ce:91:9a:7d:76:06:dd:
66:22:37:b7:ed:89:5f:78:54:c9:7c:1c:cd:db:3b:
95:e1:d1:3c:5e:9f:b6:d6:78:0e:35:3d:24:8b:14:
05:a7:06:d5:3f:57:2f:04:e8:01:f6:06:38:b2:92:
9b:14:87:fb:df:42:7f:31:15:f6:84:b8:02:29:c6:
c6:64:5c:b6:b8:9f:4b:61:32:fc:f5:a9:a0:49:c0:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:9B:01:2D:34:1C:D0:86:A7:DF:C3:4F:A8:77:24:46:3B:0C:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuabAS00HNCGp9_DT6h3JEY7DNk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.8.0/21
Signature Algorithm: sha256WithRSAEncryption
e3:7a:41:82:20:cc:e8:f1:07:78:18:0d:ca:9b:f7:99:99:6e:
38:46:b0:56:2f:6d:d8:1a:e6:17:ec:01:5a:a9:df:42:53:fc:
f1:34:e2:72:f4:1e:c9:97:3a:b0:f2:ce:d4:92:c0:56:7d:be:
6f:ad:68:38:b0:72:5b:ad:d7:71:f5:c5:72:fa:4d:53:c7:3a:
6a:5e:5f:22:ec:b6:5e:11:0d:5e:4b:f0:2c:f4:65:61:79:f5:
c1:e1:b1:10:b6:0a:5c:18:44:9e:37:6c:ac:1c:67:a8:f9:eb:
10:30:10:f9:1b:71:8b:03:17:1d:78:48:08:56:ef:86:16:23:
1e:3b:2b:2e:26:e7:7f:ea:0b:3f:05:2e:0c:f9:32:0e:97:14:
4b:8e:56:d2:82:04:e5:b6:eb:d4:74:85:a1:6c:53:84:f3:22:
c4:12:b6:ca:5e:4b:b6:10:5f:72:4e:0e:76:b4:13:d5:4a:06:
e3:7f:de:b8:e8:10:6b:d1:51:ab:ca:af:8f:f6:5e:69:10:34:
94:1c:33:05:32:0a:d1:45:8d:0a:71:9c:94:86:65:81:8f:b1:
a6:73:65:d5:dd:62:d6:c6:02:22:ca:8d:06:43:35:44:f9:41:
53:90:78:e6:3c:ae:12:5a:fa:d1:c5:be:47:24:3c:01:e9:9e:
77:9c:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:39 2025 by rpki-client