Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
File: sBi-gdQxhU5FwTMk7rPxnSxccAI.roa (raw, json)
Hash identifier: F3INlowSbuGWDIX9/YUSax+PU8nzpWHXS+KncdZuJ88=
Subject key identifier: B0:18:BE:81:D4:31:85:4E:45:C1:33:24:EE:B3:F1:9D:2C:5C:70:02
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0372
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
Signing time: Thu 01 Jun 2023 17:57:30 +0000
ROA not before: Thu 01 Jun 2023 17:57:30 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:30 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B018BE81D431854E45C13324EEB3F19D2C5C7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:90:e7:32:a9:c0:06:bd:03:2e:d7:e7:77:
20:f4:7d:ed:b8:3b:29:b0:78:5d:6c:11:5b:17:b6:
c8:19:47:9b:e1:90:64:02:a1:d6:6f:72:49:3b:f2:
17:cc:c5:95:b2:4e:aa:f5:d8:72:f4:28:f1:2e:d5:
3f:33:93:8f:18:8c:b1:4a:31:14:31:c3:56:ad:1f:
ae:bd:3f:75:f8:c2:fd:e3:09:71:0b:e0:59:4c:57:
e6:0c:d5:68:3d:ef:31:01:11:fa:4e:c6:5f:5f:d1:
fa:ab:0a:cf:8d:20:f6:4f:c9:84:c5:d7:11:74:47:
1d:a3:33:b7:a6:8c:8a:28:00:cb:18:bd:76:1a:cf:
a2:b6:e1:a8:2a:94:cf:69:ce:6b:70:32:f8:0c:33:
3a:1e:e5:b4:14:c4:1d:90:70:c7:81:dc:2a:84:a0:
58:fe:3e:2a:a9:4d:58:ff:0d:e1:fa:7c:6f:c0:bd:
66:3a:aa:85:6b:d6:62:80:76:8e:04:f7:c6:bd:c6:
7b:0e:2f:2a:11:96:30:27:0f:9d:d8:b6:6e:4d:82:
7a:0a:07:31:e4:14:02:c7:e5:c7:67:8c:4e:21:27:
08:f6:fe:0d:78:d8:09:bf:30:a0:42:85:4f:b9:59:
0f:74:b6:ed:fe:2d:ec:07:a8:ec:c2:da:d9:d0:31:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:BE:81:D4:31:85:4E:45:C1:33:24:EE:B3:F1:9D:2C:5C:70:02
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sBi-gdQxhU5FwTMk7rPxnSxccAI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.52.0/22
Signature Algorithm: sha256WithRSAEncryption
03:a0:79:da:93:08:0e:77:22:d6:61:b0:3d:e8:c1:a4:62:01:
b6:a8:35:dc:aa:46:4b:26:e7:23:9b:09:4c:0b:95:e2:70:7c:
a5:fb:d4:66:52:60:dd:35:78:11:4f:b1:96:9e:49:c5:9d:38:
a8:53:eb:fd:c1:09:cd:ac:7b:0b:0f:88:25:51:c4:55:09:8c:
94:73:6d:4d:ab:ce:11:88:9f:ec:5e:18:b6:01:72:e3:4e:8a:
a5:96:91:c6:ce:b9:14:34:6a:6e:53:84:d5:87:b1:1e:6b:ad:
c1:50:ba:4c:e8:56:5e:6e:41:75:2e:72:8c:ac:69:37:16:50:
bd:b3:78:34:ef:d5:72:13:1a:59:89:e4:2c:7f:df:c5:b8:12:
48:6f:20:1d:8d:87:7a:e5:86:0a:63:ff:74:bf:a1:64:55:4f:
dd:20:9f:9d:11:db:d7:ce:e9:46:44:b3:32:98:06:a0:ce:d6:
0a:88:55:7b:d1:b8:c6:9e:0e:7d:7c:0c:69:9b:d1:91:cd:68:
00:1e:5b:b1:43:41:01:3a:0c:19:27:ae:99:7a:14:6d:73:60:
13:91:b6:51:06:49:2b:2f:c9:e4:7a:70:2e:8b:7e:56:3a:a6:
1b:94:08:c4:9c:df:89:7d:02:d5:62:4a:82:0b:84:f7:a2:88:
d7:fa:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:29 2025 by rpki-client