Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qb1hCBqjpyjBfYYjDroNT8Gw9hw.roa
File: qb1hCBqjpyjBfYYjDroNT8Gw9hw.roa (raw, json)
Hash identifier: TLg9cafcjaGWHFK0C75rPP1EjCKVKMWmzEWjeHgjaLI=
Subject key identifier: A9:BD:61:08:1A:A3:A7:28:C1:7D:86:23:0E:BA:0D:4F:C1:B0:F6:1C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: DA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qb1hCBqjpyjBfYYjDroNT8Gw9hw.roa
Signing time: Wed 24 May 2023 16:02:22 +0000
ROA not before: Wed 24 May 2023 16:02:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:02:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A9BD61081AA3A728C17D86230EBA0D4FC1B0F61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:c6:d7:92:15:38:09:87:f6:0b:c4:4a:be:
1e:be:1c:44:98:86:9a:a7:ab:27:4a:28:dd:6d:0a:
d5:c2:ee:39:0f:5e:85:c1:a3:b1:f3:f2:c0:08:bb:
d0:0a:11:37:36:cc:60:ee:0f:1d:53:95:0c:cd:1b:
f0:4d:5f:5c:b0:f5:75:d7:fb:80:da:c5:9c:aa:92:
6e:5c:da:79:b0:5f:0d:96:ae:cd:34:be:7d:4b:46:
4d:a3:52:20:6e:40:be:bb:e0:15:55:b7:81:9b:f8:
f6:c7:c3:00:6b:d5:be:bc:df:9d:21:bf:5f:42:1a:
7a:eb:50:f5:cb:ea:e5:4e:44:f4:65:d0:e7:b3:42:
9f:f9:2c:23:7a:7a:3e:ee:5e:64:0d:10:f3:ae:42:
b6:76:57:66:b7:17:d1:c3:c6:78:cc:f2:4d:f9:c0:
4e:da:17:5d:65:75:75:a0:89:6e:bc:00:9f:15:7b:
ed:88:b0:a0:e6:84:ed:ce:97:4e:66:ff:49:ad:67:
f2:ab:07:9f:9a:65:80:28:13:c2:88:97:85:70:f5:
49:38:67:a0:69:7b:25:ec:f6:7b:63:14:fe:74:57:
99:63:f4:2c:9d:4a:80:52:82:b0:83:4c:3a:3c:2c:
e8:8d:a3:d2:27:ed:94:54:1e:cc:f2:83:8d:6f:a7:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:61:08:1A:A3:A7:28:C1:7D:86:23:0E:BA:0D:4F:C1:B0:F6:1C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qb1hCBqjpyjBfYYjDroNT8Gw9hw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:26:c5:d3:4f:72:4c:e5:71:5b:10:1c:25:76:e8:ce:29:58:
d0:36:84:cf:6e:b0:6a:e0:d8:ae:f7:95:6d:b1:c7:dd:d6:a9:
11:9a:bf:58:21:a8:52:38:04:3d:95:57:35:0d:b5:73:93:df:
b1:41:5b:24:e6:fa:d4:7b:84:df:22:d4:05:aa:be:37:e1:46:
53:b7:87:94:11:f9:43:5f:9c:c0:cb:8a:f2:f6:82:a2:0e:0e:
33:34:eb:41:b9:b8:12:8f:db:e0:7c:b7:c7:7c:71:f4:66:ea:
ec:44:bf:e1:66:4f:84:cf:a5:ac:66:80:43:ac:fe:14:c6:08:
be:b2:f1:43:bf:a6:ca:75:0b:e7:68:88:8b:52:49:85:01:f1:
8f:32:60:cc:5a:79:9e:10:dc:c6:8e:94:ac:2a:6f:bb:10:72:
59:c1:28:fb:fd:6a:79:7e:8b:82:b7:7e:c6:fa:fb:cb:ee:4b:
06:0c:1e:05:e2:f8:2c:ae:4a:79:5b:3f:72:a7:24:0b:39:21:
a6:b4:1d:9a:4a:23:00:4a:19:0e:a6:68:63:5e:18:b6:2d:f7:
c7:bf:a7:e4:80:8d:7d:62:54:6b:f5:0a:31:84:f4:a6:53:2d:
99:31:db:51:45:8f:9a:6d:2d:80:05:22:b3:cc:01:98:96:3a:
de:b6:e7:96
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjAyMjJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE5QkQ2MTA4MUFBM0E3
MjhDMTdEODYyMzBFQkEwRDRGQzFCMEY2MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4WcbXkhU4CYf2C8RKvh6+HESYhpqnqydKKN1tCtXC7jkPXoXB
o7Hz8sAIu9AKETc2zGDuDx1TlQzNG/BNX1yw9XXX+4DaxZyqkm5c2nmwXw2Wrs00
vn1LRk2jUiBuQL674BVVt4Gb+PbHwwBr1b68350hv19CGnrrUPXL6uVORPRl0Oez
Qp/5LCN6ej7uXmQNEPOuQrZ2V2a3F9HDxnjM8k35wE7aF11ldXWgiW68AJ8Ve+2I
sKDmhO3Ol05m/0mtZ/KrB5+aZYAoE8KIl4Vw9Uk4Z6BpeyXs9ntjFP50V5lj9Cyd
SoBSgrCDTDo8LOiNo9In7ZRUHszyg41vp4kvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqb1hCBqjpyjBfYYjDroNT8Gw9hwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3FiMWhDQnFqcHlqQmZZWWpEcm9OVDhHdzlody5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYDAwDQYJKoZIhvcNAQELBQADggEBALQmxdNPckzlcVsQHCV26M4pWNA2
hM9usGrg2K73lW2xx93WqRGav1ghqFI4BD2VVzUNtXOT37FBWyTm+tR7hN8i1AWq
vjfhRlO3h5QR+UNfnMDLivL2gqIODjM060G5uBKP2+B8t8d8cfRm6uxEv+FmT4TP
paxmgEOs/hTGCL6y8UO/psp1C+doiItSSYUB8Y8yYMxaeZ4Q3MaOlKwqb7sQclnB
KPv9anl+i4K3fsb6+8vuSwYMHgXi+CyuSnlbP3KnJAs5Iaa0HZpKIwBKGQ6maGNe
GLYt98e/p+SAjX1iVGv1CjGE9KZTLZkx21FFj5ptLYAFIrPMAZiWOt6255Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org