Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pX8MfYsOggM3DfCpIiXbL8gvfrI.roa
File: pX8MfYsOggM3DfCpIiXbL8gvfrI.roa (raw, json)
Hash identifier: Vu9rfIusn1qQHT2btpuoaI0uK0k+Heh6Jfxl93ISh2E=
Subject key identifier: A5:7F:0C:7D:8B:0E:82:03:37:0D:F0:A9:22:25:DB:2F:C8:2F:7E:B2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04AF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pX8MfYsOggM3DfCpIiXbL8gvfrI.roa
Signing time: Thu 27 Jul 2023 16:46:17 +0000
ROA not before: Thu 27 Jul 2023 16:46:17 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.108.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:46:17 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=A57F0C7D8B0E8203370DF0A92225DB2FC82F7EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:e7:2f:e3:4e:34:52:d0:93:ee:15:01:f3:
4c:d2:54:9f:a3:df:02:d7:d9:52:bf:c1:1e:11:24:
b0:c6:de:99:8d:87:1a:fe:28:a8:73:04:5e:f3:7b:
09:55:b6:e9:f2:bf:b8:3d:a2:39:0f:c9:74:8a:16:
60:4b:44:a8:bf:1a:9b:7f:9d:a7:cf:81:20:8b:59:
56:1c:ea:a5:e1:37:18:96:af:4f:db:67:09:0f:7a:
e1:dd:ad:86:8b:a9:38:aa:c2:ba:48:5e:8b:62:c2:
a9:db:e4:5b:9f:14:14:a1:1c:56:36:6d:f0:77:8b:
15:41:38:d4:c0:ad:c8:75:b6:fc:38:ca:16:9f:3c:
0d:8d:9d:36:1f:11:7e:da:41:44:75:2f:3b:d0:ca:
ed:2d:d1:b0:8a:ef:5c:35:6c:43:e7:84:88:a7:eb:
7c:54:31:bc:5f:d0:b7:9f:f0:77:8c:37:a8:4d:41:
03:16:13:de:a6:6e:11:af:6e:c4:2e:53:a9:20:90:
d9:98:38:de:c7:1b:25:80:0f:84:bb:4e:1b:0d:2a:
a1:6c:67:a7:8a:6c:85:50:da:a3:34:77:54:ef:ab:
18:34:57:4d:59:67:48:99:69:d3:65:ec:df:cf:c2:
d1:8b:39:f9:76:64:6d:15:47:08:4c:8c:a2:cb:2e:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:0C:7D:8B:0E:82:03:37:0D:F0:A9:22:25:DB:2F:C8:2F:7E:B2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pX8MfYsOggM3DfCpIiXbL8gvfrI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ee:d5:87:19:34:33:50:c8:ea:5d:19:09:84:07:32:d7:c5:
16:18:cf:66:66:1d:ca:bc:d6:eb:20:b2:a1:4c:3f:b0:31:cb:
fb:69:ef:a4:e9:b7:34:15:b5:81:88:28:64:92:a9:6f:9f:68:
f3:79:b0:98:80:64:05:2d:27:00:4a:c9:91:0f:51:a0:35:20:
f0:61:b2:77:e9:e6:6d:3a:1d:ff:c4:0e:8b:9f:73:d6:ed:02:
02:b7:1d:c7:3d:82:87:a0:49:08:c1:d5:af:22:94:86:28:f3:
d1:25:a2:10:fa:7f:e3:76:04:56:20:ca:83:89:41:41:10:95:
b1:ed:fc:0e:42:5f:ac:10:6b:45:b2:1e:55:25:4e:60:1c:40:
c3:83:ab:c8:53:a7:f1:5f:66:44:93:3c:a8:22:9a:72:ec:1e:
02:21:d1:57:ea:57:ff:41:ab:b6:26:4c:38:7a:de:50:b8:cd:
e2:f2:45:58:c5:1f:30:5f:1f:7d:c3:5d:11:08:f3:9a:87:ce:
a7:e9:3f:d5:76:f3:29:7e:52:c5:6d:d6:b3:b1:9d:a2:73:36:
9e:08:44:ff:d4:c8:29:b7:fb:fb:9f:84:3f:ec:f0:d8:39:17:
cd:59:49:a8:9d:99:29:28:59:26:9a:f9:ae:6a:54:90:50:68:
9f:fd:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:05 2025 by rpki-client