Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jG6vmeKdjDGOjVHangBVYIZeofI.roa
File: jG6vmeKdjDGOjVHangBVYIZeofI.roa (raw, json)
Hash identifier: +0I9bDJdE6E2Oj4yG7p4/KCVf5PtBoC58BJMOHUcr0U=
Subject key identifier: 8C:6E:AF:99:E2:9D:8C:31:8E:8D:51:DA:9E:00:55:60:86:5E:A1:F2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0336
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jG6vmeKdjDGOjVHangBVYIZeofI.roa
Signing time: Thu 01 Jun 2023 16:07:34 +0000
ROA not before: Thu 01 Jun 2023 16:07:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8C6EAF99E29D8C318E8D51DA9E005560865EA1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:91:97:da:71:90:1c:a1:91:80:38:27:07:
4d:19:5d:39:29:f6:a1:3f:1b:8d:ff:2d:e9:34:13:
36:69:0d:af:22:4d:be:c4:3e:f2:32:94:19:36:cd:
50:7f:b7:cd:3a:ba:b6:93:0b:75:42:08:18:61:11:
7c:4b:ac:56:ff:c2:eb:31:2b:22:66:a6:a5:57:2a:
40:51:52:f4:52:2b:76:3c:b6:d8:06:c1:26:ae:f7:
d5:f0:bb:bc:20:52:0d:cd:7a:b4:08:13:b1:bf:ef:
fe:2f:73:c4:a1:d4:68:01:0e:6a:15:f2:df:65:2e:
cd:14:9c:36:17:b5:6d:91:ac:dc:fe:a2:52:ff:45:
4c:e1:7f:8c:d7:94:6d:85:d2:08:4a:a8:ca:dc:71:
18:f6:d6:15:d4:72:12:86:ad:32:d2:a1:c2:85:01:
ce:1b:f2:e8:ba:18:c3:8a:db:54:69:b7:19:83:e0:
19:bb:20:9c:ec:d7:b1:69:a9:bb:d4:f8:c8:95:3d:
df:da:4f:c2:81:dd:88:08:8a:98:1f:74:52:17:41:
26:90:73:4a:43:c2:26:a4:4b:0f:52:c0:04:7d:9a:
59:f6:92:c6:db:4f:bb:b7:d9:3f:4f:43:47:53:2d:
23:c8:ab:15:3c:06:33:52:91:74:41:58:ef:72:ac:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:AF:99:E2:9D:8C:31:8E:8D:51:DA:9E:00:55:60:86:5E:A1:F2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jG6vmeKdjDGOjVHangBVYIZeofI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.40.0/23
Signature Algorithm: sha256WithRSAEncryption
de:15:8e:d9:ab:49:e2:ad:58:b5:71:bc:c7:16:5a:91:0c:8e:
29:ae:66:6f:bc:f4:b0:9e:96:93:eb:eb:b3:4d:8b:9a:a3:5c:
cb:32:4c:f7:e7:05:71:9a:9d:d3:71:b8:e2:f0:d1:f5:14:6a:
b2:e0:c7:a7:4b:77:45:7b:07:e5:0c:69:b1:b4:99:86:d2:48:
65:5c:bf:e5:d6:9b:4b:ef:b2:43:5f:da:5c:7e:b3:b5:ee:52:
14:5c:47:d6:16:41:a8:fb:f5:13:b4:84:68:56:e1:2e:73:60:
49:3e:84:e7:76:05:2b:6c:0e:98:94:b4:85:da:3f:fe:f1:24:
30:09:71:1b:48:91:72:77:ad:fe:7f:fb:b7:f1:65:41:53:c3:
bf:19:1f:03:f6:00:53:ae:3d:02:5c:ed:e2:5e:a4:24:4a:85:
26:48:e3:cd:0f:02:5c:08:d6:ca:c6:fe:2b:d3:6b:c6:07:88:
d2:3e:2c:bc:20:c1:1f:29:9b:8b:71:ea:87:21:f0:9a:25:eb:
aa:6e:c2:e9:34:e4:8f:38:d9:30:0d:6c:d1:e7:0a:a2:d9:13:
76:60:a4:16:b8:dd:a4:0b:cf:93:94:08:7c:22:89:ca:5f:2a:
c7:83:16:1e:c6:db:ec:33:6c:7a:e6:96:97:39:c1:78:8d:dc:
7f:45:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:36 2025 by rpki-client