Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mf-d0fE6s6Ybh1eVQh8YQyDLuk8.roa
File: mf-d0fE6s6Ybh1eVQh8YQyDLuk8.roa (raw, json)
Hash identifier: 6xglsHe/FN07rXRs9sPRAGuqC6E6un3WJaPUMmToChE=
Subject key identifier: 99:FF:9D:D1:F1:3A:B3:A6:1B:87:57:95:42:1F:18:43:20:CB:BA:4F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 8F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mf-d0fE6s6Ybh1eVQh8YQyDLuk8.roa
Signing time: Wed 29 Mar 2023 16:04:59 +0000
ROA not before: Wed 29 Mar 2023 16:04:59 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:04:59 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=99FF9DD1F13AB3A61B875795421F184320CBBA4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:38:4f:55:f6:8e:b8:39:e6:10:69:b2:aa:
99:0b:17:e7:b4:80:24:87:77:b9:d5:26:95:cc:75:
ff:9d:7c:ac:1a:01:1f:8c:2d:32:90:15:0f:e5:3c:
e0:54:df:73:ac:fe:e2:52:91:dd:a1:bb:ed:1d:53:
97:72:b4:92:ff:ce:d3:0e:5a:a1:39:00:70:40:ff:
d0:e1:5a:13:fa:21:30:1a:53:87:10:ec:f7:b9:1a:
e6:79:23:44:85:5f:bf:c8:26:3a:29:4f:b9:28:8b:
be:9b:ae:52:f8:85:46:92:5c:1e:f3:15:6c:18:2b:
59:b2:88:bb:af:52:e3:0c:2b:98:bd:8d:7f:d2:c8:
08:dc:e5:3e:43:e9:fb:64:61:f1:85:00:f9:da:fd:
5e:21:60:f4:22:fe:25:2d:d5:cd:80:97:5d:be:83:
89:69:cf:9a:13:a2:19:47:9c:f1:1e:40:51:4f:41:
c1:81:4c:9e:51:df:7f:02:b0:0c:4a:d2:e0:19:37:
10:7d:c7:1d:13:fd:7a:f3:09:aa:bd:20:14:67:f6:
7a:2d:bf:d7:36:77:78:8a:6e:23:cb:6a:10:4e:a8:
c1:04:ed:d9:6b:a2:07:b6:c0:41:3a:6f:a1:95:45:
ea:c1:7a:ef:60:5d:a7:b9:59:ed:da:41:34:cb:28:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:9D:D1:F1:3A:B3:A6:1B:87:57:95:42:1F:18:43:20:CB:BA:4F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mf-d0fE6s6Ybh1eVQh8YQyDLuk8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.152.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:51:9b:3c:de:a3:62:de:7e:88:8e:b7:29:70:88:e3:52:ae:
ea:6c:53:22:96:2b:0e:f4:9e:6e:3b:14:73:a6:14:09:5c:ac:
6e:c2:6e:22:75:29:df:1c:1b:d0:42:cb:23:ac:57:b4:23:a7:
e9:61:8f:46:89:04:39:3a:03:2c:f0:ee:42:bd:c9:05:d5:26:
db:9d:a5:17:93:0f:6c:28:73:17:ef:09:de:92:7f:8c:29:af:
e7:c1:1c:20:e8:c2:45:2b:f3:55:73:31:2c:bc:cf:fb:c0:b6:
ca:f5:57:99:84:7e:06:ba:65:ee:2d:1f:6e:ef:8a:88:fd:06:
35:47:a6:d3:e0:c0:1f:16:0d:0a:af:53:23:29:e5:2b:b0:e3:
55:e0:7c:d7:44:95:1a:cc:94:c0:1e:32:eb:94:48:96:76:5f:
23:3d:48:30:01:c2:4f:14:d1:00:83:77:45:8a:fc:a8:b9:bc:
4d:1d:32:bc:e9:07:e6:40:65:1b:83:c5:30:7b:08:73:6a:b1:
ea:90:90:46:5a:38:2c:19:a0:69:53:7d:d1:32:60:fe:08:6e:
e8:ea:fb:1d:44:e1:e1:a8:56:27:63:58:71:fc:06:47:6e:a3:
5b:64:5e:7c:6a:63:cf:a0:6b:72:95:64:7c:e8:6a:74:a5:05:
33:63:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:10 2025 by rpki-client