Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UaZtIqbYvypklvkydSChx657BoI.roa
File: UaZtIqbYvypklvkydSChx657BoI.roa (raw, json)
Hash identifier: UyB65DIi11B7emuvaW/QzXeYtvx4OzFdhyvfL1LwxGo=
Subject key identifier: 51:A6:6D:22:A6:D8:BF:2A:64:96:F9:32:75:20:A1:C7:AE:7B:06:82
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: C4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UaZtIqbYvypklvkydSChx657BoI.roa
Signing time: Wed 29 Mar 2023 16:08:56 +0000
ROA not before: Wed 29 Mar 2023 16:08:56 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:08:56 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=51A66D22A6D8BF2A6496F9327520A1C7AE7B0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:89:02:d3:d2:91:66:ba:3a:a2:c3:62:5e:
8c:3b:e1:45:0a:4c:19:06:dd:5f:db:c6:39:2c:ae:
ca:a9:fb:4f:cf:dd:fd:8f:0d:d7:fa:2c:db:e7:2e:
b8:a5:05:14:4e:3c:1f:90:e7:9e:eb:71:30:b4:0b:
a2:2e:7d:ea:55:cc:0c:3b:9d:48:8a:d0:13:7e:9b:
74:c5:dc:c5:78:ff:e3:30:63:8f:20:b8:cf:18:43:
e6:67:41:68:b3:18:d8:f6:d8:91:b9:49:be:95:2b:
b4:f8:a3:7a:ab:4d:77:20:dc:f5:2c:6d:39:35:66:
a0:7a:ca:e1:68:7e:28:01:b7:61:1b:3f:96:9e:ec:
07:6e:06:2a:e7:24:0d:6d:35:d5:9e:1e:be:79:75:
81:64:47:14:a8:bf:f2:0b:43:62:dd:a8:5e:cf:a9:
07:63:cf:68:38:16:91:96:71:b7:4a:95:26:c7:df:
4b:7e:ea:37:8e:0c:a1:82:ee:89:93:a5:0b:73:f6:
53:2a:7c:39:9d:53:74:9c:52:78:a0:ff:ab:f9:08:
13:19:3b:57:e8:65:94:e4:4f:e7:8e:e4:9c:d5:5f:
e5:98:ad:cd:de:e1:9b:c8:dc:4d:f5:35:da:57:e8:
2e:f0:f0:5b:e9:c8:a3:95:f7:0f:86:69:72:a4:5a:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:6D:22:A6:D8:BF:2A:64:96:F9:32:75:20:A1:C7:AE:7B:06:82
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UaZtIqbYvypklvkydSChx657BoI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:18:bf:de:59:dc:3c:cc:01:4a:02:16:e6:23:0d:23:17:ae:
93:0c:9c:22:ce:9a:c2:69:e1:1a:f2:83:31:97:50:44:73:cb:
69:14:cd:5c:cf:1d:84:8a:e3:3a:92:4b:ac:c0:9d:8f:43:c4:
66:bf:d3:48:af:6a:a7:c0:bf:23:e9:0a:d1:e5:04:15:da:f6:
e4:9f:f7:ab:90:98:cf:a6:f6:f8:db:02:21:c1:41:49:1c:9f:
39:84:a5:59:07:b6:3b:1d:8a:d0:72:e1:4f:03:46:26:81:f9:
82:01:3b:a0:13:a6:e7:b0:bc:ef:f7:d4:a6:f7:fb:6d:45:53:
5f:9e:09:34:3b:9b:f7:95:74:48:71:bf:8a:9a:79:5c:8a:98:
24:6a:1e:b7:45:89:2e:8b:e7:85:d2:92:c6:8c:af:c5:e8:bc:
d8:8f:c0:c0:11:4a:e8:21:88:8e:08:4a:37:c2:28:99:f6:72:
61:85:ae:c0:16:47:44:88:99:87:49:6a:3e:7d:92:8e:59:9b:
c7:a0:45:df:93:56:a5:e4:f2:d0:30:db:1f:a6:c0:0f:ff:36:
38:2c:db:ba:48:b9:69:8f:b7:56:e1:65:0a:4f:42:44:2c:6e:
d5:9c:a6:b0:55:a7:f5:8c:76:fb:56:7b:18:e0:8d:fb:71:b0:
21:28:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:15 2025 by rpki-client