Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
File: i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa (raw, json)
Hash identifier: 1isi0Ak7CHfanBL6nW9ja4A40yaYjKe8s3lb81bWYrc=
Subject key identifier: 8B:B9:78:97:86:F5:CB:7C:18:A4:D0:A6:51:FC:B7:9A:9F:32:C8:B9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
Signing time: Tue 06 Jun 2023 16:03:39 +0000
ROA not before: Tue 06 Jun 2023 16:03:39 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:39 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8BB9789786F5CB7C18A4D0A651FCB79A9F32C8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:89:ae:14:02:3f:89:62:22:48:46:e0:e9:
df:bc:1b:bf:5f:7d:39:de:4d:8f:92:bb:37:df:46:
1d:57:92:44:59:b7:2b:01:55:3f:3c:78:c9:bd:03:
7c:1f:5b:73:f0:98:43:2e:fa:73:eb:47:aa:39:1f:
e9:a7:f1:28:e2:a2:1d:d4:aa:e8:6a:bb:6e:79:0d:
6e:c5:a4:fe:39:85:3b:e5:32:f6:fd:fc:fd:0d:76:
f1:b9:1f:62:66:7b:75:69:f7:5a:6c:44:06:e4:95:
23:c8:5e:c2:d4:26:51:f1:7f:18:7c:43:e3:e7:fa:
1c:c5:56:9f:e0:8a:1e:cf:8f:dd:f9:c6:f2:b6:ad:
35:79:b7:d8:d7:db:13:98:d4:b9:3f:4f:47:5a:04:
ca:43:81:f1:1b:7d:75:de:e6:dc:95:18:9b:66:f8:
d4:26:44:4c:ce:fa:81:75:75:e5:6a:79:2d:69:fb:
43:e1:d5:ab:b8:9a:b1:56:5b:31:3e:a0:dc:9a:2b:
76:91:2f:c8:f2:3e:20:93:7c:b3:c1:63:d1:61:46:
2b:dd:31:bc:82:a8:91:1e:81:a2:eb:46:6d:09:64:
8b:33:65:18:3b:63:dd:30:2a:75:28:d9:71:13:57:
8a:4b:bd:de:2f:d8:64:90:3e:65:67:39:77:71:d2:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:78:97:86:F5:CB:7C:18:A4:D0:A6:51:FC:B7:9A:9F:32:C8:B9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:b9:a4:cc:ed:9d:28:77:1f:a4:f9:74:1c:78:b4:a0:cd:19:
f9:83:71:ef:f5:3d:2b:e5:d9:1a:5c:c0:b5:80:3a:b5:db:8b:
d1:5d:2a:a8:84:d3:ad:5c:00:53:02:43:b3:be:cc:ce:49:28:
9b:07:61:af:d8:c0:28:f9:48:9d:50:21:8f:7f:ee:03:73:44:
2a:61:20:02:a2:aa:63:4c:62:b3:e7:a7:2b:64:ea:d5:7d:98:
1f:00:d6:80:3e:47:ee:96:0e:75:85:c1:54:d6:c0:0e:14:0a:
2f:ad:ab:be:36:55:a7:00:39:74:3e:81:92:73:3f:5a:db:29:
41:c5:bd:be:e5:55:ac:00:c3:91:ea:51:e7:d2:88:00:dd:71:
a9:25:f2:6c:af:42:dc:3a:c4:d2:b9:27:71:ce:58:d1:15:3d:
3a:95:ff:59:e2:91:5f:3a:b3:82:8a:c8:e5:f6:40:a5:e8:6d:
ef:d9:e8:06:e8:b8:ba:10:24:d1:7e:db:29:8c:90:83:50:5a:
7a:aa:7a:e8:66:a0:8e:b0:79:f2:bc:36:a0:32:ed:11:d4:db:
69:3c:d9:74:71:a2:64:39:82:e0:55:6f:2d:ce:fb:e0:6f:b7:
d6:49:a4:64:d6:b4:3d:43:96:a1:1e:94:88:85:97:00:a0:98:
c5:19:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:10 2025 by rpki-client