Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu3u7HXS6m5TTLsCAjf4Z3XfB3Y.roa
File: xu3u7HXS6m5TTLsCAjf4Z3XfB3Y.roa (raw, json)
Hash identifier: JDYAAUHkA4gXDLwVtKTZpZn2sidPIowGjZf0kJhOIFU=
Subject key identifier: C6:ED:EE:EC:75:D2:EA:6E:53:4C:BB:02:02:37:F8:67:75:DF:07:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: E2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu3u7HXS6m5TTLsCAjf4Z3XfB3Y.roa
Signing time: Wed 24 May 2023 16:03:04 +0000
ROA not before: Wed 24 May 2023 16:03:04 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:04 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C6EDEEEC75D2EA6E534CBB020237F86775DF0776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:82:cd:0f:2a:05:03:b2:15:b1:ea:aa:49:
7f:27:b8:c4:e9:df:08:0a:5e:cd:7d:fe:f4:39:05:
c5:37:51:a5:89:54:6a:3b:ec:d7:6b:32:1d:a2:27:
8c:5f:6c:1f:92:0c:14:c5:b8:27:1a:2a:40:48:25:
ea:dc:71:46:3c:07:9a:fa:57:87:78:ac:50:f7:41:
34:46:09:26:6c:55:a2:71:0c:00:37:24:d9:54:90:
f2:b0:7c:c4:6f:b3:a6:28:72:2e:df:a7:80:3e:5a:
c2:a7:09:8b:ce:9b:8f:ba:f1:35:f9:31:24:b1:c1:
03:71:af:ae:9a:47:e0:76:e7:37:1d:f3:9c:88:99:
f9:67:2c:0e:8e:26:db:13:d3:59:5e:f4:3d:e5:b4:
83:27:a8:c4:0c:3b:4c:03:1d:2c:62:62:61:6a:99:
4e:64:6b:00:6f:21:53:1a:aa:02:4f:ab:73:33:e6:
9c:59:2d:24:63:82:55:f6:55:b5:9d:70:04:f3:07:
92:61:30:2e:91:84:5b:1f:b4:07:0b:4a:16:c2:6e:
a5:7a:59:36:98:e2:da:06:14:c7:9d:86:b0:b8:e0:
64:26:04:9e:cc:ed:1a:f2:56:5e:37:14:8a:5f:d8:
c5:11:d9:df:fb:a9:90:81:16:d8:4b:a3:0f:eb:10:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:EE:EC:75:D2:EA:6E:53:4C:BB:02:02:37:F8:67:75:DF:07:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu3u7HXS6m5TTLsCAjf4Z3XfB3Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f2:d6:e1:80:e7:a9:74:f7:f7:4a:19:99:08:3d:3f:02:07:
8a:e8:5f:6a:46:2c:9e:02:d0:61:3f:cd:eb:b7:10:45:f2:da:
02:10:d8:32:c3:0e:89:4e:3f:08:59:58:21:7b:1a:8a:c5:d8:
06:d4:29:fb:45:a4:fc:33:b8:64:6e:28:46:ba:00:5e:b4:22:
cf:37:ef:ea:14:4c:e8:8b:79:c3:dc:e8:3f:33:87:4c:4a:41:
b1:34:00:cf:a5:d2:7b:f5:35:91:12:30:26:cc:50:dc:4a:c9:
1f:a0:32:c2:ad:a3:05:62:9e:f0:ed:b9:89:11:11:43:d3:15:
68:92:fe:98:fa:17:fd:f0:f2:4d:16:7c:86:47:c8:c7:d0:cf:
3d:da:06:94:8c:f7:12:88:c0:5b:96:70:34:4d:4f:34:20:17:
02:61:92:3b:1e:2d:dd:28:88:6d:cc:e7:65:0e:f9:ee:04:70:
6e:c2:91:a0:67:c5:dd:f5:83:fa:2f:86:69:dc:3e:9d:0d:6c:
98:8f:ae:d2:3d:b8:a5:b2:13:e3:36:3c:7b:0e:d9:8c:17:18:
f2:27:db:6c:0d:90:f6:5f:36:9c:77:42:ba:6b:62:a1:55:d4:
78:ed:5a:9a:f0:47:77:c6:26:4e:5c:bd:d9:0b:eb:dc:d8:91:
10:a6:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:40 2025 by rpki-client