Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
File: bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa (raw, json)
Hash identifier: dVntphtprwL//BC+phQpHB5ksDHAJFqijOPjqW8s7XU=
Subject key identifier: 6D:70:DD:6D:1B:32:03:97:DB:8E:D3:B8:A8:E0:78:8E:BA:5A:77:E4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 046A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
Signing time: Thu 27 Jul 2023 16:44:03 +0000
ROA not before: Thu 27 Jul 2023 16:44:03 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.105.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:44:03 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=6D70DD6D1B320397DB8ED3B8A8E0788EBA5A77E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:c5:30:6d:b3:0d:a1:55:13:7d:cb:a6:7f:
c0:9a:e2:40:e7:04:69:7c:91:f1:ad:f7:26:00:9d:
3b:36:05:22:f3:85:e8:08:5a:c2:29:83:32:5f:11:
ba:b7:50:4c:81:0f:c7:15:b3:1c:39:9b:d9:50:b9:
91:ce:42:04:1b:75:fa:27:15:bf:31:5c:ca:fc:79:
04:5f:7d:43:22:3d:cd:ea:e7:8a:12:64:45:6c:9b:
8a:6f:5a:8b:f8:e6:2a:7a:0e:23:13:a4:46:6c:68:
d8:4b:70:27:8a:24:25:3b:76:31:c3:20:8e:e3:c6:
8a:98:6d:5b:e1:0d:33:7c:17:d2:57:56:c0:0a:a3:
f9:d8:6b:09:6f:ee:ce:39:f9:31:1a:e1:01:42:03:
c5:71:3d:ac:3a:0d:7e:0f:67:9d:bc:b8:eb:53:bc:
6e:15:87:b2:2d:03:5b:c2:e0:b0:a7:4c:3f:84:18:
35:e6:9f:b9:63:96:4c:f8:0e:6d:e7:cf:84:6c:c5:
49:e7:e7:02:cf:ae:06:89:27:74:73:43:28:04:87:
66:18:11:1f:2b:01:bf:0e:fd:ad:2d:6a:19:73:2c:
ca:54:41:48:63:38:dc:a1:24:18:c8:e6:ab:8e:37:
2e:7d:c4:1c:47:7e:29:21:2c:84:df:2d:4f:0e:a6:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:DD:6D:1B:32:03:97:DB:8E:D3:B8:A8:E0:78:8E:BA:5A:77:E4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.78.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d3:2a:4a:a7:5f:6f:64:1c:7e:73:26:40:3b:9b:eb:9e:9e:
82:44:5a:fe:dc:ab:5b:bb:8b:07:f5:8c:f6:56:89:bc:d9:ad:
46:ac:5e:b6:0e:2e:3d:27:29:be:7d:53:9b:84:7b:fc:d7:19:
56:43:3c:1b:3f:02:83:df:47:b1:f5:a3:74:23:89:48:b8:b4:
ec:56:40:fa:d5:66:2e:db:4c:b5:e3:20:cf:d4:15:57:9c:0a:
5e:68:49:82:61:16:f1:0b:dd:8b:14:a7:20:70:ba:f1:5c:3f:
56:6b:b8:3b:23:46:0b:88:11:a0:34:be:39:02:24:aa:b6:05:
50:3c:9d:0f:5d:9c:4d:71:92:83:df:c9:4a:13:37:82:d0:b7:
b1:cb:98:c7:a1:61:4e:dd:f5:42:4d:3b:14:e9:a7:7e:9a:e0:
fb:6a:12:5c:52:9d:ce:00:83:d4:53:3c:ce:19:52:e6:61:d6:
be:c5:92:11:ca:39:3c:a0:d1:6c:84:3b:f7:dd:6c:d2:15:3e:
59:03:14:a2:6e:61:6d:d0:1a:42:c2:68:97:b3:ff:a4:4d:a0:
cb:c3:41:20:f0:de:a6:fe:52:3c:c0:b6:34:96:a3:7a:89:15:
2a:06:e5:f6:0d:0a:10:9c:21:75:6f:e7:79:52:a1:9a:e6:42:
3f:38:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:17 2025 by rpki-client