Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYXNB9imNHiNMuC6uJYS1HQDqXg.roa
File: wYXNB9imNHiNMuC6uJYS1HQDqXg.roa (raw, json)
Hash identifier: q/oJ5q7mN/nkwEfiN/FeLGYuZuZ6m+VksXe9xAtb2cE=
Subject key identifier: C1:85:CD:07:D8:A6:34:78:8D:32:E0:BA:B8:96:12:D4:74:03:A9:78
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0300
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYXNB9imNHiNMuC6uJYS1HQDqXg.roa
Signing time: Thu 01 Jun 2023 16:05:24 +0000
ROA not before: Thu 01 Jun 2023 16:05:24 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:24 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C185CD07D8A634788D32E0BAB89612D47403A978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:e0:83:0f:15:80:c0:fb:56:7b:a0:87:12:
c8:10:fe:f3:7f:4d:26:f6:70:f5:51:be:c4:05:b4:
fc:8d:4f:10:9f:8d:6a:c3:42:4a:eb:44:15:ce:f5:
4a:41:a3:8b:14:6e:01:90:52:28:f5:f0:1c:d3:34:
27:d9:c4:cc:e2:c3:cf:d6:aa:ba:e7:b6:8b:8d:39:
1c:13:aa:c8:d9:ee:6d:fb:7f:39:d3:33:0c:f7:c4:
db:83:5f:73:5d:cb:fb:1c:02:54:c4:43:9b:13:6c:
9e:3c:7a:16:cc:14:09:fc:99:b0:fb:05:d6:c5:ab:
b6:b8:b4:15:88:f1:cf:35:47:de:a6:32:d9:96:12:
4c:95:23:71:f0:44:cd:95:ee:99:b1:7a:e6:2a:e0:
d0:76:7b:7b:c2:d8:d7:e6:dc:ea:d8:37:06:0a:17:
52:23:33:c0:6d:f6:89:51:fc:aa:11:11:1d:73:a3:
2c:ff:fa:d9:57:91:0a:26:00:e1:3c:74:cf:d9:71:
53:c5:c6:8e:dd:3e:04:6e:5e:cb:0e:28:13:c8:56:
1e:51:71:e8:e5:45:8a:3a:d8:f8:f3:a2:a1:ef:53:
b4:f6:e4:73:6a:60:8e:d0:26:d5:4c:13:d8:95:88:
7b:a4:f5:11:77:b3:fa:c0:e4:18:d3:df:6e:28:60:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:CD:07:D8:A6:34:78:8D:32:E0:BA:B8:96:12:D4:74:03:A9:78
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYXNB9imNHiNMuC6uJYS1HQDqXg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.226.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9e:f7:4f:e0:b8:0f:a6:b3:ad:c1:35:d9:d1:64:e5:26:44:
3f:f5:9e:7c:05:92:3d:25:5f:01:be:f0:3c:e2:21:22:8c:01:
ae:77:1f:e6:57:78:b0:f9:09:88:6e:51:ce:e4:9a:6f:dc:50:
23:1f:20:af:9b:1b:e6:17:6b:ca:3d:03:82:9f:fd:cc:da:77:
67:84:eb:5a:f6:25:4f:b7:8b:fb:34:94:3d:02:f4:47:13:c9:
7d:34:60:f6:ab:cf:36:b1:68:57:ec:34:95:2a:bc:ea:cb:3e:
43:8f:49:5b:ee:c2:e3:f4:b6:ef:fc:15:7a:85:c1:e6:28:70:
47:e1:ff:67:0e:20:e2:03:e8:9c:74:37:fa:e3:dc:d7:19:bb:
2e:d8:a4:0c:1f:bd:35:72:3d:5a:7b:c0:a7:4d:23:a7:85:aa:
6f:da:53:ac:cd:ed:91:a9:87:17:a2:39:16:19:fb:a7:f8:e3:
46:45:6c:16:4c:4e:75:8c:76:86:15:ba:7a:09:ae:fc:48:e5:
a5:dd:3a:c6:6f:d4:a5:a7:e4:2b:60:e7:3a:e6:8b:ca:ad:e6:
09:db:b1:03:1d:17:dd:52:3a:73:a2:5c:b1:a0:6a:d5:a3:cc:
47:97:d0:ef:ba:6a:fb:6f:a5:4e:42:5b:ef:1c:fc:15:22:a5:
66:fe:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:10 2025 by rpki-client