Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i1arImsRiXQycfGjt693slwS6c4.roa
File: i1arImsRiXQycfGjt693slwS6c4.roa (raw, json)
Hash identifier: r8JqJ3iHhYgMqH7Vd1echL+t54Hms7sA67WJDJz1Id4=
Subject key identifier: 8B:56:AB:22:6B:11:89:74:32:71:F1:A3:B7:AF:77:B2:5C:12:E9:CE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0312
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i1arImsRiXQycfGjt693slwS6c4.roa
Signing time: Thu 01 Jun 2023 16:05:31 +0000
ROA not before: Thu 01 Jun 2023 16:05:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8B56AB226B1189743271F1A3B7AF77B25C12E9CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:d3:8b:93:bb:74:c5:a0:e8:ef:eb:87:75:
42:11:3a:f6:49:0a:7b:a4:af:05:e5:5d:5f:52:51:
12:b0:4a:75:72:79:df:c6:a9:8f:91:11:65:c1:34:
98:d3:9f:29:2e:d4:1a:ca:02:43:b7:96:87:30:bc:
7a:20:ab:f5:22:fe:a6:56:6b:d3:6d:b2:9b:74:9f:
4f:80:9e:80:d3:5f:de:dd:a1:a6:25:fb:c0:db:0e:
c6:48:bb:c6:14:20:c6:63:61:95:a6:6e:64:b7:0a:
3a:d6:f2:b1:58:1b:71:1f:7a:ef:db:d8:9e:ee:2c:
f8:34:d5:ca:62:a1:ea:28:0a:07:ac:60:14:40:e6:
ce:d4:a3:1e:8c:56:57:6c:2a:3e:93:fe:57:e5:21:
fb:5d:c5:5a:af:7a:32:48:f2:bc:83:7d:1b:c2:11:
60:a7:71:f3:3b:f1:8e:59:1f:1b:15:c4:7a:51:10:
64:e9:3d:6c:16:51:61:ea:61:2a:2f:ae:f5:78:16:
fc:13:50:ab:fb:f2:ab:d7:f7:cc:5a:4c:e4:46:3f:
5f:3e:30:89:be:d0:27:4b:23:b1:a3:0f:89:22:74:
cc:87:56:be:33:85:43:91:87:08:03:36:3b:40:20:
6b:63:63:ba:9c:78:77:e2:61:04:83:46:e6:3f:5f:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:AB:22:6B:11:89:74:32:71:F1:A3:B7:AF:77:B2:5C:12:E9:CE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i1arImsRiXQycfGjt693slwS6c4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.231.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6b:79:ef:85:e4:e5:28:67:79:8b:ee:60:4b:a2:6d:89:7a:
7d:80:0c:45:88:57:83:22:e8:d8:e8:a4:95:aa:f8:9c:ac:ac:
49:d9:bf:31:5c:28:17:4e:8f:88:f8:5f:de:ab:11:73:c4:5a:
f3:46:91:92:59:1d:28:63:04:e2:9e:87:72:5c:d9:81:06:32:
9b:28:8d:b6:15:b3:1e:f6:9c:90:6c:61:64:d0:3b:7d:ad:c5:
ea:af:f7:11:1d:0b:e8:d0:8f:93:f2:2e:12:9e:b6:52:03:1c:
e9:76:e5:b5:c9:f0:cc:a1:91:9a:85:6f:2d:7b:50:f3:86:cd:
e4:4c:ed:99:cd:65:55:bc:9b:ab:86:6b:b6:b5:f6:03:5a:af:
88:46:d6:0f:11:44:39:03:a6:62:73:49:6a:a8:ae:87:40:c8:
7e:c7:44:45:68:2d:c4:a1:49:63:d9:e8:7e:c0:8e:46:dc:24:
25:b5:c4:0c:96:9c:68:b1:cf:de:2e:96:20:d7:d6:eb:06:04:
8b:19:12:cd:6c:c0:1f:e5:f9:39:44:2f:bb:a1:ab:82:cd:ab:
f4:98:92:d9:7e:ef:e6:87:56:5c:6f:96:b0:00:d5:41:53:5a:
72:96:16:6b:a5:46:1f:84:c7:b7:48:07:b9:8a:da:4a:fe:01:
fd:5b:9f:3a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MzFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCNTZBQjIyNkIxMTg5
NzQzMjcxRjFBM0I3QUY3N0IyNUMxMkU5Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfLNOLk7t0xaDo7+uHdUIROvZJCnukrwXlXV9SURKwSnVyed/G
qY+REWXBNJjTnyku1BrKAkO3locwvHogq/Ui/qZWa9Ntspt0n0+AnoDTX97doaYl
+8DbDsZIu8YUIMZjYZWmbmS3CjrW8rFYG3Efeu/b2J7uLPg01cpioeooCgesYBRA
5s7Uox6MVldsKj6T/lflIftdxVqvejJI8ryDfRvCEWCncfM78Y5ZHxsVxHpREGTp
PWwWUWHqYSovrvV4FvwTUKv78qvX98xaTORGP18+MIm+0CdLI7GjD4kidMyHVr4z
hUORhwgDNjtAIGtjY7qceHfiYQSDRuY/X7pdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUi1arImsRiXQycfGjt693slwS6c4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2kxYXJJbXNSaVhReWNmR2p0Njkzc2x3UzZjNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYOcwDQYJKoZIhvcNAQELBQADggEBABBree+F5OUoZ3mL7mBLom2Jen2A
DEWIV4Mi6NjopJWq+JysrEnZvzFcKBdOj4j4X96rEXPEWvNGkZJZHShjBOKeh3Jc
2YEGMpsojbYVsx72nJBsYWTQO32txeqv9xEdC+jQj5PyLhKetlIDHOl25bXJ8Myh
kZqFby17UPOGzeRM7ZnNZVW8m6uGa7a19gNar4hG1g8RRDkDpmJzSWqorodAyH7H
REVoLcShSWPZ6H7AjkbcJCW1xAyWnGixz94uliDX1usGBIsZEs1swB/l+TlEL7uh
q4LNq/SYktl+7+aHVlxvlrAA1UFTWnKWFmulRh+Ex7dIB7mK2kr+Af1bnzo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:27 2025 by rpki-client