Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/izkvBxMvPZePBzhzzHRkDG358bw.roa
File: izkvBxMvPZePBzhzzHRkDG358bw.roa (raw, json)
Hash identifier: ySfIPl7X2cfbM/5ZpDAjh/LjgGYyioULep2Yun2OzXQ=
Subject key identifier: 8B:39:2F:07:13:2F:3D:97:8F:07:38:73:CC:74:64:0C:6D:F9:F1:BC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izkvBxMvPZePBzhzzHRkDG358bw.roa
Signing time: Wed 24 May 2023 16:03:12 +0000
ROA not before: Wed 24 May 2023 16:03:12 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:12 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8B392F07132F3D978F073873CC74640C6DF9F1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:65:f7:90:d2:28:1b:dc:5d:73:8b:53:f8:
db:fb:75:10:19:73:24:dd:d2:75:35:63:4c:12:31:
8a:f6:26:4c:b6:b0:37:0f:d0:82:7f:bd:c5:b7:a4:
d4:ee:a7:6b:06:63:3b:c8:9e:d5:63:36:ce:3f:c5:
f8:a0:86:72:3f:94:24:ce:74:ea:46:57:3a:3d:76:
03:d2:a8:0f:8c:7e:6a:9c:60:f4:3e:68:7c:8c:6b:
6d:09:d1:fb:ad:0a:66:c9:2b:f4:fd:af:c7:6d:01:
d3:0b:f4:1d:e4:92:1e:27:39:e4:2d:0e:21:a7:c4:
ce:cd:40:ef:59:02:5b:b3:22:34:30:91:7d:29:aa:
03:13:e6:d8:18:39:9d:b5:6c:95:69:81:4a:d8:d9:
3c:4e:89:c6:c0:9f:bd:57:57:59:78:9e:d2:5c:6f:
1a:2f:0c:3c:c8:bb:21:0c:a9:df:10:3a:6c:21:bf:
ba:f5:9a:25:f4:61:40:0e:f8:4d:58:e4:df:ad:1e:
c6:75:f6:db:29:32:1c:d1:fb:85:9e:f6:5d:79:b9:
70:e6:31:e5:bf:fd:d0:dd:da:22:0b:bf:47:c1:86:
d1:de:30:61:bb:6f:8d:d4:5e:04:9a:2b:e6:ce:92:
ac:b9:fe:38:56:1c:eb:d5:2b:7f:53:f0:e7:6d:5d:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:2F:07:13:2F:3D:97:8F:07:38:73:CC:74:64:0C:6D:F9:F1:BC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izkvBxMvPZePBzhzzHRkDG358bw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.136.0/23
Signature Algorithm: sha256WithRSAEncryption
25:0e:5a:f5:a0:82:a8:3c:3c:02:ae:16:73:8c:b4:33:a6:86:
f6:1a:5d:de:15:fa:d0:bd:78:41:62:a3:a5:df:87:ec:3d:04:
a7:08:d4:bd:66:3a:4d:94:e5:99:00:61:0d:e3:92:db:81:fe:
70:b7:0a:84:df:16:39:f3:b3:5d:2f:b4:61:84:e5:57:c5:38:
69:b3:32:8c:16:b2:3d:55:97:4b:14:c0:cf:c8:30:6f:d1:3f:
34:a9:a0:1e:29:66:5c:9e:ef:fb:3a:2b:57:ed:76:7e:92:d7:
d8:78:e0:79:6c:fd:41:77:8e:71:7f:f5:99:e7:55:33:d5:36:
f3:aa:f4:d5:fd:5f:c5:4a:bd:86:09:fb:db:e9:a8:dd:ab:fc:
43:46:7f:0c:6c:83:7d:85:35:f8:a5:bc:2a:cd:61:09:e0:8f:
1b:a6:a4:af:ac:8e:a0:e2:d4:db:45:7a:d7:67:4a:83:26:99:
03:7a:94:ff:15:65:c0:63:e3:81:bf:fd:f5:f2:77:87:43:00:
fc:2e:93:c9:c7:26:4d:e4:66:8e:e1:cb:2e:05:31:9c:ab:7d:
ca:94:9e:3d:0d:84:8e:96:03:18:60:ca:fe:29:3b:ee:50:5b:
24:7d:48:73:f9:66:6b:ee:0d:e9:ed:80:84:57:42:3e:36:95:
7a:93:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:13 2025 by rpki-client