Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/izB-an98K49Fhzovtj3fZFWkU8E.roa
File: izB-an98K49Fhzovtj3fZFWkU8E.roa (raw, json)
Hash identifier: DhdTe1R+ugAEkPx53n2tAOA3o/BxYkNoYYVK3mrRHy0=
Subject key identifier: 8B:30:7E:6A:7F:7C:2B:8F:45:87:3A:2F:B6:3D:DF:64:55:A4:53:C1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 8B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izB-an98K49Fhzovtj3fZFWkU8E.roa
Signing time: Wed 29 Mar 2023 16:04:57 +0000
ROA not before: Wed 29 Mar 2023 16:04:57 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:04:57 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=8B307E6A7F7C2B8F45873A2FB63DDF6455A453C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:90:f6:1b:d9:89:32:b2:65:c6:0c:98:ef:
70:af:ec:95:c8:dd:cb:6d:15:ee:1a:49:06:d0:e1:
20:44:ac:6f:09:51:c6:06:89:d1:22:2c:27:00:e2:
8c:25:40:9a:22:99:d4:00:26:f8:1e:26:b4:ef:cb:
17:c4:09:1c:46:57:88:e6:d4:ee:b0:66:73:0b:85:
2a:39:19:c4:08:86:49:61:ca:1c:f9:8b:48:e0:13:
29:a4:8f:05:41:7e:4a:44:21:2c:35:d8:f7:aa:d9:
72:5b:4f:a7:03:8d:fe:7b:18:db:b9:b9:b2:16:e8:
83:c2:72:0d:92:7f:83:10:a1:58:f9:2a:8f:92:a3:
98:27:2a:f1:30:6e:d4:62:f0:01:fb:cd:0b:49:71:
de:69:a6:08:84:47:45:cb:9f:c0:45:3d:0e:83:0e:
f3:ff:20:e2:b0:ad:82:35:69:1c:6c:41:49:bf:7c:
bd:c1:b5:43:33:50:ef:40:bb:7c:fe:cb:70:0d:01:
ca:7a:4c:94:b1:38:01:b8:b3:84:91:e9:f5:13:9b:
02:ad:92:5c:73:9e:77:74:12:18:cb:8f:48:a3:21:
79:25:63:de:de:a1:06:19:31:d3:11:5a:90:1c:f9:
95:ca:e0:9c:96:36:c9:e9:a8:a8:7b:97:1d:26:2a:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:7E:6A:7F:7C:2B:8F:45:87:3A:2F:B6:3D:DF:64:55:A4:53:C1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izB-an98K49Fhzovtj3fZFWkU8E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.184.0/22
Signature Algorithm: sha256WithRSAEncryption
91:08:e8:70:48:fb:9c:8d:a3:36:18:57:ac:0a:44:3b:06:eb:
da:bf:41:92:36:e2:ca:15:13:88:26:a8:db:90:a8:b0:dd:d5:
e5:0f:f2:04:68:e2:35:39:87:a5:ac:10:fc:af:ff:38:00:8e:
5d:df:d9:6f:ed:47:02:46:d6:62:33:10:51:4f:5f:6d:1a:dc:
ff:e3:b8:06:19:f1:31:e1:c7:63:65:35:c9:4e:74:2c:af:07:
91:8e:a5:7f:54:56:f2:00:93:f1:da:d9:5e:8d:14:f3:14:53:
0b:66:b7:72:d1:96:7d:80:dc:e2:86:aa:c0:33:40:b7:e9:6e:
4f:69:10:86:31:3d:1a:ac:17:3a:a9:fb:ef:86:e8:54:74:3f:
02:21:35:27:e5:8e:aa:ac:6c:c3:e2:5f:01:47:bc:9a:5c:15:
4a:57:a8:93:2a:63:22:23:21:08:b4:79:ae:17:df:1a:62:3d:
6c:fe:f4:d1:54:75:66:eb:c9:4c:6c:3e:74:dd:80:91:fb:1e:
a9:d2:e0:40:83:e5:be:ea:dc:a9:84:6e:ea:7c:af:e4:84:ff:
7b:aa:79:ce:e4:20:43:08:6c:a9:39:c4:9c:60:80:f5:11:63:
db:b8:35:10:94:0f:b1:f4:11:a1:9e:87:e8:50:a6:64:06:34:
3f:e1:03:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA0NTdaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCMzA3RTZBN0Y3QzJC
OEY0NTg3M0EyRkI2M0RERjY0NTVBNDUzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxnZD2G9mJMrJlxgyY73Cv7JXI3cttFe4aSQbQ4SBErG8JUcYG
idEiLCcA4owlQJoimdQAJvgeJrTvyxfECRxGV4jm1O6wZnMLhSo5GcQIhklhyhz5
i0jgEymkjwVBfkpEISw12Peq2XJbT6cDjf57GNu5ubIW6IPCcg2Sf4MQoVj5Ko+S
o5gnKvEwbtRi8AH7zQtJcd5ppgiER0XLn8BFPQ6DDvP/IOKwrYI1aRxsQUm/fL3B
tUMzUO9Au3z+y3ANAcp6TJSxOAG4s4SR6fUTmwKtklxznnd0EhjLj0ijIXklY97e
oQYZMdMRWpAc+ZXK4JyWNsnpqKh7lx0mKq4bAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUizB+an98K49Fhzovtj3fZFWkU8EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2l6Qi1hbjk4SzQ5Rmh6b3Z0ajNmWkZXa1U4RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYrgwDQYJKoZIhvcNAQELBQADggEBAJEI6HBI+5yNozYYV6wKRDsG69q/
QZI24soVE4gmqNuQqLDd1eUP8gRo4jU5h6WsEPyv/zgAjl3f2W/tRwJG1mIzEFFP
X20a3P/juAYZ8THhx2NlNclOdCyvB5GOpX9UVvIAk/Ha2V6NFPMUUwtmt3LRln2A
3OKGqsAzQLfpbk9pEIYxPRqsFzqp+++G6FR0PwIhNSfljqqsbMPiXwFHvJpcFUpX
qJMqYyIjIQi0ea4X3xpiPWz+9NFUdWbryUxsPnTdgJH7HqnS4ECD5b7q3KmEbup8
r+SE/3uqec7kIEMIbKk5xJxggPURY9u4NRCUD7H0EaGeh+hQpmQGND/hAz8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:02 2024 by rpki-client on console-ams.rpki-client.org