Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K1oVXg6m67CFjiiF4EdhkU2Zi8A.roa
File: K1oVXg6m67CFjiiF4EdhkU2Zi8A.roa (raw, json)
Hash identifier: 300/5GzGj6Bxs+GWXVvWO7dBBko5aM7eNFst6V6sVf0=
Subject key identifier: 2B:5A:15:5E:0E:A6:EB:B0:85:8E:28:85:E0:47:61:91:4D:99:8B:C0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0102
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K1oVXg6m67CFjiiF4EdhkU2Zi8A.roa
Signing time: Wed 24 May 2023 16:05:02 +0000
ROA not before: Wed 24 May 2023 16:05:02 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:05:02 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2B5A155E0EA6EBB0858E2885E04761914D998BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:9b:5e:6d:f4:13:46:68:db:a5:06:7e:9a:
ea:5d:16:9c:45:58:5e:98:58:23:c2:56:3b:19:70:
d3:e8:0b:d8:88:5a:8a:b9:a7:8d:d0:17:6d:9e:13:
c2:df:6f:9e:bd:e6:e4:ab:81:18:9a:0c:70:48:7f:
36:c1:fd:a1:ee:7a:85:c9:5b:d0:c7:9d:32:3f:3b:
6d:b4:28:5d:0b:01:4d:20:99:6b:b0:0b:e5:d4:a2:
77:47:62:81:27:9f:6a:93:54:1a:3c:1f:7c:3a:86:
e0:34:1f:27:56:7c:af:53:42:24:84:48:ea:62:e2:
7a:63:24:f3:03:4f:32:7a:f9:84:aa:98:81:ce:a3:
5f:02:1d:c6:79:2e:dd:5b:a2:d4:a4:bc:54:4b:71:
79:90:f7:fc:a5:7a:b8:69:d4:9d:a5:29:57:f6:85:
2f:2c:9c:3c:e7:24:8b:87:5c:96:cf:9b:cd:29:c4:
21:d2:92:e1:ce:d7:c2:0d:48:a2:9c:e9:ef:42:b2:
8d:6d:6b:41:ec:5d:46:13:df:d8:e7:44:7d:10:70:
4b:ee:0c:fa:35:70:e9:27:55:28:34:5e:a7:da:08:
c0:02:a1:ed:e2:e7:88:df:64:3c:b2:6a:92:18:7f:
33:0e:21:a0:a0:be:bf:f7:bd:70:c0:4e:f4:07:fc:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:15:5E:0E:A6:EB:B0:85:8E:28:85:E0:47:61:91:4D:99:8B:C0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K1oVXg6m67CFjiiF4EdhkU2Zi8A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.46.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:53:e8:59:6e:52:fd:df:e4:26:f7:cc:6d:3e:e6:b3:25:e1:
40:47:e2:1a:e0:44:15:df:02:70:00:6e:43:ca:29:0d:53:d3:
fb:f1:3b:39:38:be:e6:6c:f0:78:80:03:0f:52:bb:01:e3:fc:
29:62:6d:4e:27:8f:db:dd:1b:2e:36:21:90:88:d7:a8:0e:14:
ff:6e:33:ee:0e:96:36:ee:c9:59:24:a0:92:8b:88:6b:cc:a2:
b2:f2:95:78:50:cb:ef:81:c4:55:84:1f:76:58:1f:7e:02:dd:
bf:83:25:50:c3:31:b5:fe:e2:ad:5b:0a:b1:a9:6e:e6:5b:85:
b0:9c:ea:e6:e9:48:ff:8b:91:af:26:e6:84:8a:02:56:4b:87:
9c:b7:31:4c:fd:3e:1d:43:c0:75:11:8d:da:bc:75:f6:b6:95:
27:b6:e6:e4:ae:55:96:68:c5:64:ac:af:a4:d1:06:71:8b:87:
e7:0d:9b:29:32:23:a9:2a:4a:a6:c4:cb:dc:54:e1:b5:5f:b0:
02:20:ba:22:43:1b:f2:9a:40:2b:be:9d:d1:4c:52:79:24:e4:
fd:0d:19:7d:8f:9d:66:19:ae:0b:66:07:ae:d9:3e:2d:c2:ec:
52:cf:be:7b:75:4c:9b:50:7d:fd:34:74:ad:af:c1:d2:f0:6a:
21:7b:b9:b5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjA1MDJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNUExNTVFMEVBNkVC
QjA4NThFMjg4NUUwNDc2MTkxNEQ5OThCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwBJtebfQTRmjbpQZ+mupdFpxFWF6YWCPCVjsZcNPoC9iIWoq5
p43QF22eE8Lfb5695uSrgRiaDHBIfzbB/aHueoXJW9DHnTI/O220KF0LAU0gmWuw
C+XUondHYoEnn2qTVBo8H3w6huA0HydWfK9TQiSESOpi4npjJPMDTzJ6+YSqmIHO
o18CHcZ5Lt1botSkvFRLcXmQ9/ylerhp1J2lKVf2hS8snDznJIuHXJbPm80pxCHS
kuHO18INSKKc6e9Cso1ta0HsXUYT39jnRH0QcEvuDPo1cOknVSg0XqfaCMACoe3i
54jfZDyyapIYfzMOIaCgvr/3vXDATvQH/PXxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUK1oVXg6m67CFjiiF4EdhkU2Zi8AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0sxb1ZYZzZtNjdDRmppaUY0RWRoa1UyWmk4QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYC4wDQYJKoZIhvcNAQELBQADggEBAAtT6FluUv3f5Cb3zG0+5rMl4UBH
4hrgRBXfAnAAbkPKKQ1T0/vxOzk4vuZs8HiAAw9SuwHj/ClibU4nj9vdGy42IZCI
16gOFP9uM+4OljbuyVkkoJKLiGvMorLylXhQy++BxFWEH3ZYH34C3b+DJVDDMbX+
4q1bCrGpbuZbhbCc6ubpSP+Lka8m5oSKAlZLh5y3MUz9Ph1DwHURjdq8dfa2lSe2
5uSuVZZoxWSsr6TRBnGLh+cNmykyI6kqSqbEy9xU4bVfsAIguiJDG/KaQCu+ndFM
Unkk5P0NGX2PnWYZrgtmB67ZPi3C7FLPvnt1TJtQff00dK2vwdLwaiF7ubU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:09 2025 by rpki-client