Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa
File: 4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa (raw, json)
Hash identifier: Ju4AgH4cWbuaWiXi6qfY6rfbrc9114fn6YsZpILti/E=
Subject key identifier: E1:B8:7E:56:BE:67:F1:B7:E1:3F:92:3C:88:46:20:E3:0F:26:46:4D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05A7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa
Signing time: Thu 27 Jul 2023 17:00:19 +0000
ROA not before: Thu 27 Jul 2023 17:00:19 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.103.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1447 (0x5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:19 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=E1B87E56BE67F1B7E13F923C884620E30F26464D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:6e:6b:20:0c:96:18:44:62:36:bf:7c:4e:
de:41:1b:05:4a:e8:7b:19:13:b3:a0:d7:79:4c:50:
71:f9:c7:4e:6e:87:e3:0c:23:98:d8:74:a3:53:d9:
f2:cf:c1:8a:96:64:e7:65:5e:6f:93:4f:e1:e7:27:
99:db:af:a5:67:43:50:75:49:ca:e1:3c:51:cc:f3:
35:8c:82:dd:84:21:d7:d0:ce:9a:bb:4b:95:03:6e:
9b:12:9c:97:ae:25:ba:1f:c4:41:70:5b:3d:82:14:
4d:e4:a9:f0:da:2a:32:06:88:9b:5f:db:7c:f1:9d:
5c:ba:a4:de:c0:58:be:a2:04:25:e0:79:82:3c:6b:
f4:de:71:70:2c:ee:1a:80:a6:3d:36:e8:a9:4b:ea:
6e:3a:d6:5a:54:56:29:63:db:7d:0a:b1:6e:e0:9b:
39:40:32:9c:63:c9:6b:a2:e5:21:97:4d:ff:a9:ae:
8b:b9:ce:bc:00:49:54:b0:75:e5:46:d2:b5:ca:0c:
10:77:ec:c8:ff:18:d5:63:92:da:81:3b:16:13:fd:
38:ad:20:63:31:ea:8d:8e:95:54:3b:3b:ed:3a:67:
6a:db:63:31:1b:65:77:64:89:00:07:43:19:10:42:
cd:7a:9b:46:4a:c3:a4:2f:cf:67:df:0b:24:42:20:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:7E:56:BE:67:F1:B7:E1:3F:92:3C:88:46:20:E3:0F:26:46:4D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4bh-Vr5n8bfhP5I8iEYg4w8mRk0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.103.48.0/20
Signature Algorithm: sha256WithRSAEncryption
d8:16:5a:49:6a:6b:6d:18:f3:1a:95:04:dc:de:d2:47:a8:e6:
f3:67:65:45:4f:2a:03:60:4f:9f:fd:8b:64:b4:45:35:fc:38:
46:fd:39:36:8a:30:96:68:f7:7d:8a:0e:c6:29:28:06:43:3a:
c9:c2:6e:f5:1a:23:f7:76:c3:de:ec:eb:10:6a:e4:a6:8f:2c:
76:02:32:38:c8:3c:0e:21:2f:d7:81:35:87:dc:7b:52:a1:37:
3a:a6:fb:bf:30:71:90:43:1f:05:ce:b5:06:fb:21:77:29:88:
00:3d:6a:b8:87:71:f2:79:6b:67:71:e6:89:fa:f8:fa:bd:8f:
e2:ba:60:ec:ae:c3:cf:63:13:96:c2:18:72:bf:4b:0d:f5:61:
30:c4:8c:11:ad:01:23:ca:9f:76:e2:82:78:36:1d:3a:f1:e2:
23:80:52:ca:1a:0b:35:65:ba:30:59:9a:0f:9d:13:f8:fd:99:
69:75:5e:49:06:b9:b8:c6:8f:17:3f:fb:c3:7e:b7:27:00:ad:
10:6d:62:03:ac:6e:01:31:c7:9b:a7:23:f8:91:80:8d:cd:e2:
ef:d8:e4:a5:00:be:64:7a:27:90:9f:3b:1e:b4:17:62:08:bf:
20:4c:e4:bd:c6:f0:c5:b3:e7:25:e4:9f:7d:fd:cd:cd:14:27:
f9:7e:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:38 2025 by rpki-client