Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa
File: icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa (raw, json)
Hash identifier: PHfClROF8bbvpgMhq5agtnTbJGdnTFs+jugp0wmP1ow=
Subject key identifier: 89:CC:25:88:21:B6:63:3F:E2:C5:6B:46:A5:5D:C1:93:0E:87:55:FA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05FE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa
Signing time: Thu 29 Feb 2024 01:35:46 +0000
ROA not before: Thu 29 Feb 2024 01:35:46 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:46 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=89CC258821B6633FE2C56B46A55DC1930E8755FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:1f:6b:9d:49:21:65:35:e6:9d:26:09:b7:
fc:35:8e:d4:4a:79:b0:b6:2b:dd:a0:64:73:0a:be:
77:bf:0d:b9:c4:59:e4:de:78:35:09:0f:f8:0f:9f:
8a:ed:51:27:36:b7:77:4a:b4:61:2a:99:7b:2a:d2:
16:87:66:af:32:cd:13:4d:f9:06:96:bf:5c:24:e7:
66:51:0f:fc:d9:d7:c3:d4:d8:3b:aa:1d:47:d1:94:
da:50:c6:da:5f:73:48:68:fd:91:93:b9:4b:bd:02:
79:d9:27:44:db:36:f3:cd:6d:ca:1a:88:b0:ad:d2:
a2:ad:fa:f7:63:85:56:86:c4:3a:0c:76:f1:66:05:
3c:bb:dc:e8:f7:e2:d9:c7:32:62:81:51:fe:a5:e1:
5d:7b:3e:37:7f:12:6f:fb:58:74:59:04:91:de:08:
ae:91:f2:de:a5:95:4f:a9:16:66:40:3c:7c:a1:43:
e8:ee:47:18:7f:b6:97:7a:78:9b:91:2b:81:58:f1:
35:fd:e1:bc:24:cd:fd:f6:ea:a9:70:c5:53:3c:b1:
a4:ec:b3:d8:88:5e:79:2f:0e:e8:e2:3e:80:53:1e:
dc:7d:9a:00:0c:5e:c4:4b:cb:b6:33:f9:ab:40:03:
43:07:5a:44:00:5f:24:0e:a2:09:6e:c0:ec:a1:36:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:25:88:21:B6:63:3F:E2:C5:6B:46:A5:5D:C1:93:0E:87:55:FA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/icwliCG2Yz_ixWtGpV3Bkw6HVfo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.109.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f1:3c:81:ee:4c:03:61:8b:9c:45:92:3f:6a:85:eb:0e:b7:
27:b0:9e:e8:03:1b:85:43:4a:2d:70:31:86:d5:42:8d:2a:89:
dc:ee:2c:13:8c:30:b4:c2:e5:65:a3:44:7f:5c:d7:59:a7:72:
b4:31:6d:0a:45:9b:8f:d0:d3:0d:15:06:86:49:9e:a3:8a:ce:
c1:54:d9:ff:59:10:04:86:0e:04:a1:d8:eb:55:35:02:ef:4a:
6b:83:92:48:d4:45:8b:8c:a2:68:47:b8:50:54:e9:16:cd:1d:
d1:d5:b5:a5:28:af:1d:41:c2:4f:7f:de:39:88:23:d2:32:44:
4e:76:6e:3e:50:94:a0:21:32:6f:73:82:a2:dc:02:0c:93:7b:
fc:39:7b:22:75:61:c7:9b:56:08:61:9a:5d:8a:db:41:ae:23:
0d:ab:85:e3:53:54:6d:76:b7:a6:a8:39:9e:05:f9:64:39:6f:
da:91:6e:4e:3f:3f:31:6b:27:bd:b8:3b:54:22:9e:f4:ce:e9:
cf:7e:37:38:48:48:f8:78:b3:96:77:57:c9:65:f7:37:a8:7f:
e4:7e:82:cb:a1:e5:a0:5b:64:aa:c2:0c:91:09:80:49:24:11:
4a:df:b4:a6:65:95:50:41:c9:66:35:7a:cb:25:80:b7:f7:ac:
b0:c9:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:36 2025 by rpki-client