Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
File: m8NNBjLrOYJUvGepDTmH4E1q09E.roa (raw, json)
Hash identifier: Ezib9v8lJ9ddTrQomddwnqkIUsV9/VQlzIHG8wEb3M8=
Subject key identifier: 9B:C3:4D:06:32:EB:39:82:54:BC:67:A9:0D:39:87:E0:4D:6A:D3:D1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0301
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
Signing time: Thu 01 Jun 2023 16:05:25 +0000
ROA not before: Thu 01 Jun 2023 16:05:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9BC34D0632EB398254BC67A90D3987E04D6AD3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:54:2b:9c:60:69:e2:3e:fe:b6:21:bd:5c:
a7:44:e9:e9:ca:6a:99:52:2a:c1:0b:94:a7:03:8d:
3f:7b:55:38:87:4b:0b:af:f7:13:e8:f7:7a:74:c7:
e4:b1:a6:76:cb:07:60:ba:5a:58:34:43:56:41:70:
3a:43:d7:d7:69:10:26:0b:7e:78:d9:af:0c:15:d8:
fc:35:20:f5:79:c8:37:10:07:3e:aa:ec:b6:ff:80:
af:a0:33:4e:55:ce:7b:2b:15:d9:ce:89:5f:2c:ad:
3a:37:97:80:23:33:9c:89:30:c0:a9:59:bf:d9:00:
95:73:a8:fc:11:ea:f0:88:e2:16:32:d9:66:4a:28:
79:30:f8:cc:d7:d9:2b:e3:67:a6:b8:95:d4:c5:12:
56:c9:ac:50:13:cb:51:2c:cf:79:90:a4:20:9a:0a:
24:6c:c1:92:24:b9:b5:a4:33:3f:91:2d:ff:9d:27:
da:c3:e4:30:2f:21:b8:64:1b:a1:e3:d2:09:80:1a:
1e:63:c2:78:9d:c6:52:8f:4a:1c:0a:a7:9b:56:f8:
af:8d:78:44:69:a1:ba:18:d1:7c:8c:ce:ff:f0:80:
5f:69:4b:9f:c6:58:c8:65:c4:bb:4d:95:e4:42:7b:
5a:03:1a:41:36:73:04:91:68:22:c1:e9:7c:c2:30:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:4D:06:32:EB:39:82:54:BC:67:A9:0D:39:87:E0:4D:6A:D3:D1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m8NNBjLrOYJUvGepDTmH4E1q09E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:c8:50:04:14:90:54:50:0e:88:89:11:04:b6:ab:1b:b0:a4:
aa:88:6a:3f:22:b0:fa:be:d4:d6:45:eb:ac:d6:98:1d:4a:c1:
a5:2e:bd:c9:7d:09:9f:0a:b7:6c:92:aa:41:0c:f9:74:db:6f:
62:61:c2:53:9d:16:09:fb:76:7c:e5:3e:a6:87:d4:45:06:dd:
bf:f1:f6:9d:9c:32:8b:17:90:a9:4d:0e:4c:c1:84:6b:d9:c8:
a1:f3:d9:f5:d1:61:fc:30:77:64:7f:e7:99:82:4b:8d:47:fd:
1a:c4:39:03:db:77:1d:03:ad:2e:6e:d4:b4:f2:6e:e7:97:77:
9a:38:4e:aa:66:5d:b8:63:36:21:91:28:01:1a:c3:d9:0d:2e:
b9:45:5b:e1:aa:f1:34:5f:d0:f8:fb:8d:75:c2:40:f0:65:bb:
18:32:91:ca:59:07:f3:de:86:39:c6:fb:a5:56:56:aa:10:05:
04:4e:84:2f:5a:3d:5e:99:28:37:0d:75:04:21:c6:61:9a:39:
eb:61:0f:8b:ff:7f:37:ac:8e:6f:6b:9e:ce:48:b8:12:80:53:
8f:71:91:1b:12:b0:12:3e:ce:dd:52:d5:20:dc:2f:f9:58:bb:
7d:fe:e5:ee:0a:21:d0:98:c4:9b:95:51:25:01:4d:50:35:ff:
ec:c6:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:02 2025 by rpki-client