Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqdHuW4RsXVR-AODBzGbkfofuHA.roa
File: wqdHuW4RsXVR-AODBzGbkfofuHA.roa (raw, json)
Hash identifier: wQBc0DbgK1bKWNe4KofhyKNw7iakAE0MfVsnVlgqsE4=
Subject key identifier: C2:A7:47:B9:6E:11:B1:75:51:F8:03:83:07:31:9B:91:FA:1F:B8:70
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05C3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqdHuW4RsXVR-AODBzGbkfofuHA.roa
Signing time: Tue 16 Jan 2024 05:27:59 +0000
ROA not before: Tue 16 Jan 2024 05:27:59 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1475 (0x5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 16 05:27:59 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=C2A747B96E11B17551F8038307319B91FA1FB870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:82:dd:4d:ad:8c:8f:4e:17:d5:4a:65:a1:
0b:6e:16:72:35:a7:78:6b:0e:8b:c3:20:27:a6:7a:
fc:a3:48:81:b7:8f:75:5d:46:6f:92:fe:9a:ff:a8:
80:96:12:7b:7b:5a:f3:da:e5:81:f4:20:36:d9:09:
7d:4a:ae:4c:4d:ad:02:3d:88:af:be:91:58:da:2b:
71:71:e4:4c:1c:ea:ae:c8:17:41:a5:b8:9d:b9:cd:
0b:41:8f:19:bf:9a:3f:51:97:15:a6:3f:36:d7:56:
d2:a8:dc:a2:2b:47:be:e3:ae:04:f1:33:89:d7:1f:
f0:25:9a:38:9c:3c:88:c4:ef:d4:3a:b9:5b:94:19:
de:15:84:57:f0:2b:36:75:a2:60:8e:9e:08:99:49:
54:6b:d9:aa:7e:d7:f2:83:17:6e:42:7e:52:a8:52:
96:31:2b:53:95:35:46:07:2d:60:01:bb:d8:e1:fb:
96:c1:fc:69:a8:88:fb:2f:38:cc:91:5b:78:f1:ad:
d0:62:ed:04:4c:06:bf:00:7b:47:d0:0d:da:7c:12:
1f:cc:b5:c8:af:4e:18:2e:36:e3:cd:23:8b:ec:66:
0f:13:d0:be:93:4b:18:1b:6e:4c:15:ab:72:07:27:
da:b9:d0:9e:75:a2:16:92:f0:5a:03:89:3c:d5:06:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:47:B9:6E:11:B1:75:51:F8:03:83:07:31:9B:91:FA:1F:B8:70
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wqdHuW4RsXVR-AODBzGbkfofuHA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:ac:93:77:18:8c:1a:79:ec:de:0a:a4:37:b1:1f:1b:0c:81:
80:f7:08:9a:b6:4a:73:fa:62:38:d2:51:40:69:7c:4a:38:81:
16:a3:3b:f9:fe:fc:40:5a:b2:02:02:0c:33:78:af:e8:7c:55:
cd:f6:e6:e1:e1:de:6e:ec:d7:f5:17:ea:30:2d:f4:02:2f:5b:
b4:21:f1:ae:25:c8:62:aa:28:a1:8c:b4:72:57:50:07:c9:b9:
27:ab:fe:cc:cb:0d:38:d9:69:15:0b:98:f2:d9:84:0e:63:bb:
33:37:98:25:1a:25:0a:7d:a6:03:4a:e3:80:3b:7b:0b:c0:09:
66:a0:92:19:ce:5d:e1:78:9e:55:4f:e5:bc:f3:df:b8:55:58:
3c:90:c9:be:8d:f8:92:fa:ed:0c:a6:af:5b:c9:09:c0:97:49:
61:13:9b:c5:47:f6:fc:e2:8f:0f:23:b1:1e:1c:d3:67:e9:03:
a5:4f:1a:33:20:86:2b:1b:6e:33:d5:b2:12:ff:92:2f:2f:dd:
bc:9d:63:4b:19:5d:c9:3b:74:24:1d:58:ae:64:e8:6c:07:25:
29:0f:1b:98:5c:01:5b:d9:41:7a:59:89:1e:d1:c1:8d:3b:75:
8a:84:5d:fe:bc:29:94:5c:91:5a:ea:3e:fb:8e:0b:db:f1:14:
cf:61:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:24 2025 by rpki-client