Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/atxA74cAN99OL6fEkZQyM7qd4CI.roa
File: atxA74cAN99OL6fEkZQyM7qd4CI.roa (raw, json)
Hash identifier: sa2yn2WiBCvUmfExKb4WlCZo0J02flDCU74YajnHuVQ=
Subject key identifier: 6A:DC:40:EF:87:00:37:DF:4E:2F:A7:C4:91:94:32:33:BA:9D:E0:22
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 062D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/atxA74cAN99OL6fEkZQyM7qd4CI.roa
Signing time: Thu 29 Feb 2024 01:41:04 +0000
ROA not before: Thu 29 Feb 2024 01:41:04 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:41:04 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=6ADC40EF870037DF4E2FA7C491943233BA9DE022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:3d:b2:3e:dc:14:58:83:84:9b:3e:fb:8f:
47:1c:cc:b4:90:66:b8:1a:c4:c5:03:3a:69:82:41:
8d:1a:5f:66:61:31:4f:43:c3:5d:8f:cb:fe:d0:df:
75:ce:f8:5c:6d:c7:98:c1:bb:9c:03:4d:08:d0:d6:
57:bb:6a:ba:c7:db:ac:83:44:c6:37:9d:55:f8:b9:
58:be:36:36:ca:b5:d0:85:da:be:8b:94:46:24:4e:
fc:9f:05:e7:3a:08:37:17:f6:e0:53:48:31:3f:f5:
77:7c:f5:64:3b:97:52:f6:d2:67:23:81:0e:fe:63:
03:d9:6e:80:76:32:85:ee:40:0b:dc:88:02:08:64:
58:40:73:cf:3b:ef:9f:08:94:6a:1f:05:f3:d2:9e:
3d:d7:4e:66:9f:87:2a:b4:6e:c7:4e:ba:63:35:9c:
30:04:5a:c6:4b:47:60:d3:6e:74:c6:9b:67:8b:b9:
17:59:8a:f2:9f:17:f7:79:0c:19:6d:af:3e:07:7a:
bd:df:3d:40:19:d2:7b:93:dd:e7:10:c0:c3:d8:2a:
63:54:1e:d9:45:03:5b:fe:db:70:ae:21:02:f2:6d:
13:e3:c4:ca:fe:f6:37:b0:03:a9:a1:3d:cd:b6:21:
d6:33:35:f8:45:1f:f7:07:46:c7:bf:ad:0d:8d:63:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DC:40:EF:87:00:37:DF:4E:2F:A7:C4:91:94:32:33:BA:9D:E0:22
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/atxA74cAN99OL6fEkZQyM7qd4CI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.103.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b3:2e:d2:37:9b:7c:80:4a:05:cc:06:b7:9e:c2:89:1f:c6:
53:2c:2d:70:68:8d:77:9a:46:eb:18:d8:c9:58:b3:8e:02:48:
b1:a7:1f:18:53:df:c2:d3:5f:53:7c:ce:6c:46:90:e6:7d:f4:
30:2e:03:2c:4b:c5:ec:57:ef:db:0b:6d:3e:9a:ca:7b:fa:aa:
ff:fa:53:94:af:b0:52:44:0d:a3:05:09:8a:c6:13:a1:97:c7:
91:47:0e:ec:76:4f:cd:ba:30:15:ed:17:eb:8d:cf:51:ce:73:
7e:7f:2b:42:03:12:da:fd:85:57:ea:2c:27:c5:e4:32:da:1a:
42:1c:77:74:2a:32:23:f1:2e:db:cf:2b:92:4f:ab:2c:aa:f8:
17:a9:de:85:0d:71:66:aa:4e:f7:d7:a6:00:f4:db:8a:f7:cd:
60:a0:38:fb:f5:83:37:3f:cb:a4:04:48:e4:bb:67:46:6d:3f:
9f:af:71:1a:36:f9:ce:cb:c7:73:79:f1:96:2e:d6:5a:ee:a5:
9d:d0:5a:7b:3e:95:52:5a:24:ae:28:66:d5:21:a3:b0:45:a7:
39:35:90:92:01:de:e7:9c:ec:b9:33:63:48:f3:bf:9f:47:e0:
ef:95:4a:b7:9f:3e:20:ce:aa:29:bc:bb:3d:2e:ca:42:66:99:
20:31:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:52:43 2025 by rpki-client