Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PObXbwEe1lj_y10mgElALzaf394.roa
File: PObXbwEe1lj_y10mgElALzaf394.roa (raw, json)
Hash identifier: oKg8tuIcG3v0QyHdnyIR7q9RqFT48LU9tIH+xNpPgNo=
Subject key identifier: 3C:E6:D7:6F:01:1E:D6:58:FF:CB:5D:26:80:49:40:2F:36:9F:DF:DE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 041C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PObXbwEe1lj_y10mgElALzaf394.roa
Signing time: Tue 06 Jun 2023 16:05:59 +0000
ROA not before: Tue 06 Jun 2023 16:05:59 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:59 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3CE6D76F011ED658FFCB5D268049402F369FDFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:6e:70:0d:67:7f:47:a7:14:d8:31:f2:92:
d0:6d:5a:05:d5:ac:36:0b:bd:42:57:0b:08:e2:cb:
cf:51:fe:0c:55:50:fd:f7:21:3f:db:aa:54:43:8c:
07:94:08:fa:84:24:11:ca:75:98:59:fd:e5:4f:b1:
25:e1:80:e3:a8:23:dd:05:16:e5:0e:43:69:bc:85:
b9:ae:54:81:fe:14:7c:92:03:83:8c:d7:7c:fc:d5:
11:76:f7:37:95:78:69:ec:eb:3b:28:0b:67:d9:c4:
75:ef:1b:ae:96:7c:fb:84:72:05:3c:1f:4a:14:ae:
cf:23:25:b3:e6:81:d9:41:4f:91:bc:fa:d4:f8:4c:
2a:b9:a5:5f:e6:68:16:87:8e:d4:14:2f:1e:6a:e8:
33:e6:f5:8e:8c:4a:47:a0:e8:c3:b0:1d:a3:b4:b8:
09:09:a2:3c:9a:1f:f7:01:21:db:90:33:4c:ee:72:
8a:41:ce:98:ce:96:f4:2f:60:08:a9:29:3e:ae:8c:
ab:69:56:36:dc:a2:a3:3a:35:eb:39:af:45:2d:66:
15:d1:83:3c:a3:e9:be:75:13:a1:bd:e5:2d:97:39:
fb:14:6f:f1:d6:49:d5:1a:c4:d0:32:c7:73:db:4d:
2e:db:51:6d:5c:f8:fc:87:ab:7d:32:b1:2d:55:27:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:D7:6F:01:1E:D6:58:FF:CB:5D:26:80:49:40:2F:36:9F:DF:DE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PObXbwEe1lj_y10mgElALzaf394.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.56.0/21
Signature Algorithm: sha256WithRSAEncryption
e0:27:d9:d4:c3:7f:4a:0d:43:97:5a:c3:c1:8b:97:76:f9:db:
16:c9:f1:45:37:f0:71:91:35:48:6c:55:e3:bb:c8:45:8c:6c:
32:a7:8d:a9:20:91:77:01:40:ce:b7:44:52:de:a2:13:b4:52:
69:4c:3f:c9:f4:58:51:e1:6d:d6:56:98:6a:6f:ea:bf:65:e2:
9a:2d:ba:bf:a2:24:4f:2a:02:1c:12:4b:47:c5:c3:9e:86:dc:
1c:d8:93:da:c4:a0:14:5a:bb:f9:87:ae:be:81:69:f4:d2:34:
30:2e:80:a9:8a:f4:dd:ae:3e:2c:d1:f8:71:d4:2f:93:c6:01:
c6:db:2a:03:9c:c1:13:6c:79:31:a5:bf:f0:8e:86:5a:21:f0:
5c:b3:4e:5f:6a:39:e7:1a:81:78:1b:10:d0:4e:c5:7b:aa:5c:
8e:2e:c2:14:10:4e:9b:7d:88:f9:e3:08:d1:a6:ff:d6:38:4f:
e2:87:57:5a:bf:c8:eb:89:f4:70:8d:db:66:dc:54:2c:18:b6:
72:71:d9:8c:ad:7a:64:a6:c7:39:1e:53:b7:a4:1b:f8:7b:6e:
92:24:42:ee:82:e3:20:8d:36:e3:1f:5c:bd:0d:e0:9d:80:c7:
bf:6a:ba:32:f4:1f:2f:f3:d8:cc:a5:85:3a:8c:9a:94:74:b3:
49:55:8f:46
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA1NTlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNDRTZENzZGMDExRUQ2
NThGRkNCNUQyNjgwNDk0MDJGMzY5RkRGREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRiW5wDWd/R6cU2DHyktBtWgXVrDYLvUJXCwjiy89R/gxVUP33
IT/bqlRDjAeUCPqEJBHKdZhZ/eVPsSXhgOOoI90FFuUOQ2m8hbmuVIH+FHySA4OM
13z81RF29zeVeGns6zsoC2fZxHXvG66WfPuEcgU8H0oUrs8jJbPmgdlBT5G8+tT4
TCq5pV/maBaHjtQULx5q6DPm9Y6MSkeg6MOwHaO0uAkJojyaH/cBIduQM0zucopB
zpjOlvQvYAipKT6ujKtpVjbcoqM6Nes5r0UtZhXRgzyj6b51E6G95S2XOfsUb/HW
SdUaxNAyx3PbTS7bUW1c+PyHq30ysS1VJ2jzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPObXbwEe1lj/y10mgElALzaf394wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1BPYlhid0VlMWxqX3kxMG1nRWxBTHphZjM5NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxaDgwDQYJKoZIhvcNAQELBQADggEBAOAn2dTDf0oNQ5daw8GLl3b52xbJ
8UU38HGRNUhsVeO7yEWMbDKnjakgkXcBQM63RFLeohO0UmlMP8n0WFHhbdZWmGpv
6r9l4potur+iJE8qAhwSS0fFw56G3BzYk9rEoBRau/mHrr6BafTSNDAugKmK9N2u
PizR+HHUL5PGAcbbKgOcwRNseTGlv/COhloh8FyzTl9qOecagXgbENBOxXuqXI4u
whQQTpt9iPnjCNGm/9Y4T+KHV1q/yOuJ9HCN22bcVCwYtnJx2YytemSmxzkeU7ek
G/h7bpIkQu6C4yCNNuMfXL0N4J2Ax79qujL0Hy/z2MylhTqMmpR0s0lVj0Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org