Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIw8wwYKPiMMzArDdZ5d2gU9o0Y.roa
File: SIw8wwYKPiMMzArDdZ5d2gU9o0Y.roa (raw, json)
Hash identifier: +MzdDlsachPV5Q3FQpjOVUtBPM8+p5qNgoJM+lkCai0=
Subject key identifier: 48:8C:3C:C3:06:0A:3E:23:0C:CC:0A:C3:75:9E:5D:DA:05:3D:A3:46
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0333
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIw8wwYKPiMMzArDdZ5d2gU9o0Y.roa
Signing time: Thu 01 Jun 2023 16:07:32 +0000
ROA not before: Thu 01 Jun 2023 16:07:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=488C3CC3060A3E230CCC0AC3759E5DDA053DA346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:5d:e7:73:23:21:c9:5f:08:1a:c7:d1:4c:
1b:ce:9d:cd:e4:cc:b1:23:fe:c7:e8:98:0a:e4:11:
e0:96:7e:e9:a5:92:d5:5e:e4:fe:d9:eb:90:bb:6d:
b2:10:19:47:75:d7:99:4e:7c:1c:53:3e:4c:df:48:
9a:79:57:cd:92:2b:f2:e3:bc:75:84:57:b6:a4:95:
c8:06:76:cc:ac:d5:a2:3d:85:3a:37:01:40:00:30:
9c:9d:df:cc:44:4c:21:9d:00:28:5e:c1:65:83:f0:
2b:fb:33:1c:1e:00:70:ed:fa:23:97:e4:2b:7c:b9:
81:bc:29:a8:d2:cd:1f:78:6c:28:4a:e0:9f:1a:53:
c8:af:93:77:53:7b:d7:ca:4a:af:a1:40:56:8d:4a:
12:d9:47:e4:1f:d9:34:33:65:ba:00:52:26:8f:b9:
4d:c2:72:74:28:b6:e1:6d:a8:78:6f:ac:0c:19:fb:
78:9c:39:32:e6:cc:65:56:97:fa:5f:65:98:50:47:
d4:32:07:52:b2:cd:bf:6d:2e:db:fe:cf:af:75:32:
d9:b1:33:37:bb:0a:48:e9:56:da:94:41:bd:9a:ab:
40:31:61:cf:a7:b1:2a:b0:a2:e8:17:ff:2a:f3:90:
ba:93:17:e5:e3:57:d6:f2:0f:50:f4:dc:56:21:e9:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:3C:C3:06:0A:3E:23:0C:CC:0A:C3:75:9E:5D:DA:05:3D:A3:46
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIw8wwYKPiMMzArDdZ5d2gU9o0Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:01:7b:13:39:19:e5:a9:9c:70:e0:a6:bf:a9:51:df:11:46:
d0:e5:dc:d1:b9:3a:f3:9b:8d:24:9c:c6:5c:8f:52:89:f2:8e:
87:8a:34:e4:b5:bd:64:80:91:34:62:1d:8a:5b:8a:c4:bd:43:
e6:3a:28:06:ef:23:eb:c8:f3:aa:86:34:e9:69:1c:31:6d:43:
7a:ab:b4:04:ec:a1:17:b7:fd:19:33:1d:74:72:65:79:82:6c:
36:cd:39:60:86:a6:4e:21:24:be:30:77:d6:a8:84:81:55:1f:
c5:5f:34:eb:29:25:24:47:3a:26:25:47:16:f0:1f:10:cf:f8:
57:32:83:3d:9b:fa:64:6d:26:d7:dd:aa:36:cb:30:23:df:d1:
9a:96:60:5e:e0:e1:13:93:c5:a3:2b:79:6e:e8:2b:6a:15:6a:
e4:24:31:b6:d5:13:5c:14:06:c0:f9:6c:15:d0:8d:b1:fb:11:
1d:32:1d:f5:53:6e:89:57:e7:fd:99:ee:48:4c:2e:73:e0:7e:
dc:3f:4d:46:82:5d:57:3a:12:66:58:34:56:0b:4e:02:35:79:
06:02:76:bc:bf:73:2e:16:c1:da:65:0d:d3:6a:7d:27:a4:68:
36:5f:09:de:45:66:e6:4b:7c:36:75:b0:4a:14:08:5a:0a:4c:
2c:17:45:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA3MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4OEMzQ0MzMDYwQTNF
MjMwQ0NDMEFDMzc1OUU1RERBMDUzREEzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxBF3ncyMhyV8IGsfRTBvOnc3kzLEj/sfomArkEeCWfumlktVe
5P7Z65C7bbIQGUd115lOfBxTPkzfSJp5V82SK/LjvHWEV7aklcgGdsys1aI9hTo3
AUAAMJyd38xETCGdAChewWWD8Cv7MxweAHDt+iOX5Ct8uYG8KajSzR94bChK4J8a
U8ivk3dTe9fKSq+hQFaNShLZR+Qf2TQzZboAUiaPuU3CcnQotuFtqHhvrAwZ+3ic
OTLmzGVWl/pfZZhQR9QyB1Kyzb9tLtv+z691MtmxMze7CkjpVtqUQb2aq0AxYc+n
sSqwougX/yrzkLqTF+XjV9byD1D03FYh6fcbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUSIw8wwYKPiMMzArDdZ5d2gU9o0YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1NJdzh3d1lLUGlNTXpBckRkWjVkMmdVOW8wWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYikwDQYJKoZIhvcNAQELBQADggEBAIoBexM5GeWpnHDgpr+pUd8RRtDl
3NG5OvObjSScxlyPUonyjoeKNOS1vWSAkTRiHYpbisS9Q+Y6KAbvI+vI86qGNOlp
HDFtQ3qrtATsoRe3/RkzHXRyZXmCbDbNOWCGpk4hJL4wd9aohIFVH8VfNOspJSRH
OiYlRxbwHxDP+Fcygz2b+mRtJtfdqjbLMCPf0ZqWYF7g4ROTxaMreW7oK2oVauQk
MbbVE1wUBsD5bBXQjbH7ER0yHfVTbolX5/2Z7khMLnPgftw/TUaCXVc6EmZYNFYL
TgI1eQYCdry/cy4WwdplDdNqfSekaDZfCd5FZuZLfDZ1sEoUCFoKTCwXRV8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org