Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-jYLGv_7HnhObq1P5bHO5sgJ7E.roa
File: p-jYLGv_7HnhObq1P5bHO5sgJ7E.roa (raw, json)
Hash identifier: uj4+Dc1mLzca3ZXNzygnYb01cLoAuascTL10U4BRPlI=
Subject key identifier: A7:E8:D8:2C:6B:FF:EC:79:E1:39:BA:B5:3F:96:C7:3B:9B:20:27:B1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05C5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-jYLGv_7HnhObq1P5bHO5sgJ7E.roa
Signing time: Tue 16 Jan 2024 05:31:52 +0000
ROA not before: Tue 16 Jan 2024 05:31:52 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 16 05:31:52 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=A7E8D82C6BFFEC79E139BAB53F96C73B9B2027B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:b4:a8:4c:bb:cf:60:75:d6:35:2f:f6:57:
87:53:e3:3c:dd:6c:32:88:0d:58:53:2a:15:5a:00:
27:5b:a0:64:54:e2:6d:dc:7c:0f:8f:45:bc:85:af:
bb:9c:35:a9:d0:dc:2b:07:64:ce:d8:6c:1c:82:06:
f5:c2:3a:86:44:96:19:b8:4b:11:e9:34:f1:a6:15:
b8:93:aa:49:a4:40:18:f2:bb:49:e2:9a:65:c1:c0:
5d:62:5a:ee:03:67:06:99:e8:16:56:cc:43:6b:43:
2c:b4:eb:c5:5d:8e:63:db:55:e4:4b:21:86:4d:3c:
dd:75:b9:98:ce:4b:1d:dd:c3:f4:23:27:a3:e6:f0:
fc:56:27:fd:00:7d:6a:a8:8c:25:93:a8:2e:d6:bd:
bb:af:f7:25:05:a2:e4:6f:40:e0:0d:f4:08:08:08:
f7:36:8b:e3:87:dc:5f:8a:70:92:83:1d:bb:25:b0:
e7:ec:07:17:33:2c:09:ab:d0:07:80:37:0c:37:cf:
e3:9e:c0:72:41:7a:83:b9:c6:31:4a:3c:4b:4f:55:
0b:6a:95:dd:d3:8f:d0:64:37:b1:35:26:6d:da:16:
5d:e3:a8:18:13:e9:ea:64:40:03:41:24:32:06:da:
75:52:4e:04:d0:30:49:bd:66:66:11:20:5b:38:f7:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:D8:2C:6B:FF:EC:79:E1:39:BA:B5:3F:96:C7:3B:9B:20:27:B1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-jYLGv_7HnhObq1P5bHO5sgJ7E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.208.0/21
Signature Algorithm: sha256WithRSAEncryption
59:30:4a:28:44:da:61:e9:ac:b4:e9:ed:61:35:46:de:cd:41:
85:53:fd:b0:fd:ca:49:a2:83:85:89:25:49:95:10:77:fe:db:
88:c0:6b:1a:22:1f:6a:14:a5:48:24:c8:b4:a1:ce:9b:cd:8e:
56:1a:d5:12:b6:f8:12:c4:38:a9:db:fb:cf:5e:72:fc:88:c5:
b0:2a:92:ce:9a:d9:93:da:3d:61:6a:f6:61:61:58:57:fc:2e:
6a:64:d6:31:ab:cd:30:0d:61:5b:64:f2:cf:8d:09:0c:ec:07:
04:0d:ed:f7:72:e3:ce:fa:70:61:3d:c8:68:02:3f:f4:d0:a6:
43:a4:b2:95:70:81:ed:19:09:4b:1f:a4:56:0c:1b:c3:ba:f7:
06:98:4b:7e:1c:86:61:36:e6:b3:9d:f3:4a:23:11:f0:f0:a6:
d1:f8:14:84:b8:34:4d:d4:9b:12:28:d7:96:74:ca:84:93:18:
11:7f:0d:5e:5e:b6:53:03:ea:a4:76:79:5a:2d:1c:1a:b9:dd:
85:3d:e4:0b:ed:83:6d:2a:a3:5e:b9:1f:b1:44:74:c5:d7:96:
9e:89:e4:43:e9:19:8a:4b:7f:3f:2a:b5:76:0c:ef:1d:c0:de:
8c:e4:68:04:b3:8d:a2:a8:e0:66:3a:3b:95:fd:01:b2:ec:8f:
ec:73:34:38
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAxMTYw
NTMxNTJaFw0yNTAxMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE3RThEODJDNkJGRkVD
NzlFMTM5QkFCNTNGOTZDNzNCOUIyMDI3QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZT7SoTLvPYHXWNS/2V4dT4zzdbDKIDVhTKhVaACdboGRU4m3c
fA+PRbyFr7ucNanQ3CsHZM7YbByCBvXCOoZElhm4SxHpNPGmFbiTqkmkQBjyu0ni
mmXBwF1iWu4DZwaZ6BZWzENrQyy068VdjmPbVeRLIYZNPN11uZjOSx3dw/QjJ6Pm
8PxWJ/0AfWqojCWTqC7Wvbuv9yUFouRvQOAN9AgICPc2i+OH3F+KcJKDHbslsOfs
BxczLAmr0AeANww3z+OewHJBeoO5xjFKPEtPVQtqld3Tj9BkN7E1Jm3aFl3jqBgT
6epkQANBJDIG2nVSTgTQMEm9ZmYRIFs495q5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp+jYLGv/7HnhObq1P5bHO5sgJ7EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3AtallMR3ZfN0huaE9icTFQNWJITzVzZ0o3RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxbdAwDQYJKoZIhvcNAQELBQADggEBAFkwSihE2mHprLTp7WE1Rt7NQYVT
/bD9ykmig4WJJUmVEHf+24jAaxoiH2oUpUgkyLShzpvNjlYa1RK2+BLEOKnb+89e
cvyIxbAqks6a2ZPaPWFq9mFhWFf8Lmpk1jGrzTANYVtk8s+NCQzsBwQN7fdy4876
cGE9yGgCP/TQpkOkspVwge0ZCUsfpFYMG8O69waYS34chmE25rOd80ojEfDwptH4
FIS4NE3UmxIo15Z0yoSTGBF/DV5etlMD6qR2eVotHBq53YU95Avtg20qo165H7FE
dMXXlp6J5EPpGYpLfz8qtXYM7x3A3ozkaASzjaKo4GY6O5X9AbLsj+xzNDg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:43 2025 by rpki-client