Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/O_EKFgF9WJmfQ-RA01vg48GGLSw.roa
File: O_EKFgF9WJmfQ-RA01vg48GGLSw.roa (raw, json)
Hash identifier: r2Y+CdCZhhpphvLVDAgCvUwDLB2qivHa4OSqktjALpE=
Subject key identifier: 3B:F1:0A:16:01:7D:58:99:9F:43:E4:40:D3:5B:E0:E3:C1:86:2D:2C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0147
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O_EKFgF9WJmfQ-RA01vg48GGLSw.roa
Signing time: Wed 24 May 2023 16:31:14 +0000
ROA not before: Wed 24 May 2023 16:31:14 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:31:14 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3BF10A16017D58999F43E440D35BE0E3C1862D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:ee:db:0b:22:fc:d7:d7:ef:13:ab:fc:8a:
fa:55:1a:46:51:c8:a2:37:66:ae:27:4e:2b:69:64:
fc:4f:22:c7:c5:fc:e6:89:61:48:bf:3c:5e:2c:f4:
cb:44:4f:14:9e:59:19:62:35:9c:69:f4:8b:9d:6d:
41:92:08:53:ab:e4:b9:4a:a8:3d:79:28:0a:16:72:
5c:56:36:d9:b5:c1:5f:6f:61:55:d6:4b:6d:c3:5a:
b2:31:73:50:52:9b:30:01:83:ab:4c:b5:7c:1f:fe:
4c:95:40:bd:1a:ab:0e:8c:e2:01:6b:cb:a4:4b:2b:
c0:73:16:d5:c2:dc:55:5f:a1:b3:ea:32:95:28:9a:
49:51:ef:c5:37:a2:a3:55:ee:52:cf:ad:8f:55:89:
85:74:b7:11:ae:31:c9:57:a2:90:c6:f3:11:b3:e1:
1a:d6:48:10:b1:91:7f:69:ae:24:ef:9f:68:43:a9:
66:b8:07:35:27:4d:75:80:7d:63:8d:5b:43:f6:27:
81:c1:f9:54:9a:31:95:29:08:dc:56:d3:e7:63:f8:
ad:6d:b8:57:8c:89:75:88:55:9f:6e:bb:d2:f6:5d:
c8:0f:17:f9:0b:2c:e6:df:3c:bd:c3:9c:18:a4:10:
c0:5d:6d:96:d3:8b:29:4a:61:bf:09:a3:80:db:4d:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:0A:16:01:7D:58:99:9F:43:E4:40:D3:5B:E0:E3:C1:86:2D:2C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/O_EKFgF9WJmfQ-RA01vg48GGLSw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:05:67:56:28:78:5d:6e:6e:f7:72:61:23:07:c0:34:ac:ac:
c4:e9:5a:30:c3:6d:49:1f:5e:6c:3f:7d:42:d7:98:81:4d:25:
81:38:89:11:61:5b:b2:c6:a0:50:e7:8d:fc:fa:12:8b:cc:58:
2d:bb:60:b1:dd:5c:9f:fb:bf:82:fc:56:4b:6b:56:63:fa:03:
f2:9f:66:52:89:34:1f:53:59:91:9a:0d:84:a1:06:d6:be:6d:
6c:b2:1c:fa:ff:bb:d1:51:aa:e8:31:02:90:70:42:c4:b9:29:
ba:9f:5b:bf:d5:c4:3a:b2:18:20:99:44:d4:04:70:a2:ca:2d:
7b:10:67:2e:aa:19:60:08:69:d7:1a:c0:08:1a:0d:7e:35:22:
01:1e:13:3d:ab:b8:0a:08:49:79:be:c0:c6:66:4c:43:b0:85:
14:46:36:5b:33:c1:73:ff:4b:a8:03:e8:4f:fa:3c:5d:68:e5:
85:1c:65:e6:b8:6e:d6:2a:9b:2c:88:30:00:cf:65:ec:c4:34:
90:cb:06:0a:82:55:54:cc:10:7f:af:e2:c2:f3:7b:64:eb:7c:
c7:82:a5:29:ad:8e:95:36:f0:a6:4f:e5:1d:58:2c:a3:01:56:
88:93:ef:1a:63:0f:23:1d:45:bf:3f:26:0e:8b:f4:d4:3a:5c:
c5:24:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:00 2025 by rpki-client