Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ckf_o37hstf1LNwtnjGbvfUnwCg.roa
File: ckf_o37hstf1LNwtnjGbvfUnwCg.roa (raw, json)
Hash identifier: v1EUToHyYdSNv0gIvnPgXucYz+7bNgeKRLUU9K1BE5I=
Subject key identifier: 72:47:FF:A3:7E:E1:B2:D7:F5:2C:DC:2D:9E:31:9B:BD:F5:27:C0:28
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0368
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ckf_o37hstf1LNwtnjGbvfUnwCg.roa
Signing time: Thu 01 Jun 2023 17:56:40 +0000
ROA not before: Thu 01 Jun 2023 17:56:40 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:56:40 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=7247FFA37EE1B2D7F52CDC2D9E319BBDF527C028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:59:e3:f7:3b:5b:bc:d1:95:ff:4c:11:f7:
19:ac:e4:5a:5e:a8:3b:32:0a:5a:61:7e:a5:3a:9d:
29:01:90:e6:da:68:1e:9b:4c:7a:84:00:57:78:95:
74:24:09:a6:76:d3:a3:e2:27:22:fc:02:be:7e:34:
7d:02:05:e6:8a:6c:1d:ec:a2:73:98:c1:5b:f4:02:
c6:cf:51:e8:1b:2e:14:b2:98:b3:9b:f0:e4:1c:ad:
57:ff:7b:c1:5c:4c:19:c9:a7:b0:75:48:37:2a:ad:
1e:40:1d:b4:32:7e:cc:1f:c4:d2:19:f5:30:60:3d:
06:ab:5a:8b:0c:49:41:01:bb:3a:e6:f6:23:aa:cf:
71:6a:05:e3:2d:5f:d5:ff:b2:23:b8:c4:48:15:cc:
18:9f:04:f5:e3:bc:ec:af:65:e6:d7:58:22:a3:35:
39:67:da:c2:56:47:7d:cb:25:3a:48:d5:ff:64:1e:
10:74:58:29:e5:72:a0:ff:a0:c5:35:bc:a5:7b:8c:
f0:bc:44:03:f7:8f:71:d4:89:d7:44:55:f8:32:4f:
85:ba:a1:70:87:e5:8c:ea:fd:20:a5:12:05:7f:b4:
32:94:62:cd:da:76:a1:81:eb:69:f4:ae:36:15:3b:
d6:82:17:18:c9:03:2d:ee:40:2d:1e:cc:5e:3f:1f:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:FF:A3:7E:E1:B2:D7:F5:2C:DC:2D:9E:31:9B:BD:F5:27:C0:28
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ckf_o37hstf1LNwtnjGbvfUnwCg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.80.0/21
Signature Algorithm: sha256WithRSAEncryption
11:c2:69:9f:6b:2a:fd:b4:59:25:14:59:8d:33:f8:e5:09:19:
ad:5d:47:58:65:99:8d:cf:f1:f4:05:e0:20:34:af:81:38:1f:
59:b6:4f:76:61:12:e4:db:15:d4:95:db:ae:12:aa:1c:92:ba:
ba:a1:9f:4b:ed:45:8b:38:8e:fe:f5:21:e2:c9:71:a9:10:01:
f0:c1:ba:d2:20:78:6c:b2:79:aa:5c:70:d8:cf:44:39:59:52:
b8:86:df:ef:d2:d6:94:59:a1:0c:38:06:d2:1d:5a:a3:fd:bf:
3b:ae:89:8b:8e:f0:6e:bd:43:6c:97:68:bf:b3:ff:05:ba:76:
37:b5:49:d1:76:24:1a:36:de:b2:26:31:04:23:da:23:83:d8:
74:ea:d1:ea:1a:c7:3e:95:07:40:20:84:28:88:5a:b0:bb:ad:
b6:ff:28:0a:c9:bc:13:c1:c1:22:ff:4f:c8:97:e4:eb:9e:6a:
35:d6:19:30:14:a8:50:10:b5:e3:83:30:b7:e4:a3:20:af:ff:
ef:5e:61:7f:0b:88:2c:fe:18:e7:bf:38:fe:13:67:ce:ab:5e:
69:2d:6e:17:d2:22:ad:5a:1c:9a:35:76:c2:fc:7e:40:bf:8c:
98:ae:98:73:5e:0c:a9:2b:44:70:a3:ae:af:d8:4b:27:4b:a1:
f2:b5:18:c1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU2NDBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcyNDdGRkEzN0VFMUIy
RDdGNTJDREMyRDlFMzE5QkJERjUyN0MwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5NVnj9ztbvNGV/0wR9xms5FpeqDsyClphfqU6nSkBkObaaB6b
THqEAFd4lXQkCaZ206PiJyL8Ar5+NH0CBeaKbB3sonOYwVv0AsbPUegbLhSymLOb
8OQcrVf/e8FcTBnJp7B1SDcqrR5AHbQyfswfxNIZ9TBgPQarWosMSUEBuzrm9iOq
z3FqBeMtX9X/siO4xEgVzBifBPXjvOyvZebXWCKjNTln2sJWR33LJTpI1f9kHhB0
WCnlcqD/oMU1vKV7jPC8RAP3j3HUiddEVfgyT4W6oXCH5Yzq/SClEgV/tDKUYs3a
dqGB62n0rjYVO9aCFxjJAy3uQC0ezF4/H5lDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUckf/o37hstf1LNwtnjGbvfUnwCgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2NrZl9vMzdoc3RmMUxOd3RuakdidmZVbndDZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxaFAwDQYJKoZIhvcNAQELBQADggEBABHCaZ9rKv20WSUUWY0z+OUJGa1d
R1hlmY3P8fQF4CA0r4E4H1m2T3ZhEuTbFdSV264SqhySurqhn0vtRYs4jv71IeLJ
cakQAfDButIgeGyyeapccNjPRDlZUriG3+/S1pRZoQw4BtIdWqP9vzuuiYuO8G69
Q2yXaL+z/wW6dje1SdF2JBo23rImMQQj2iOD2HTq0eoaxz6VB0AghCiIWrC7rbb/
KArJvBPBwSL/T8iX5OueajXWGTAUqFAQteODMLfkoyCv/+9eYX8LiCz+GOe/OP4T
Z86rXmktbhfSIq1aHJo1dsL8fkC/jJiumHNeDKkrRHCjrq/YSydLofK1GME=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org