Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qc3ngBJev4VoE9tiJA9I5QI94js.roa
File: qc3ngBJev4VoE9tiJA9I5QI94js.roa (raw, json)
Hash identifier: wIGfKdqvkRllROwQuaQYWuHY8JaDmSa8PH7YDCZ9Pl0=
Subject key identifier: A9:CD:E7:80:12:5E:BF:85:68:13:DB:62:24:0F:48:E5:02:3D:E2:3B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04BA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qc3ngBJev4VoE9tiJA9I5QI94js.roa
Signing time: Thu 27 Jul 2023 16:48:12 +0000
ROA not before: Thu 27 Jul 2023 16:48:12 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.101.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:48:12 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=A9CDE780125EBF856813DB62240F48E5023DE23B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:fc:16:74:0d:9d:97:a7:c4:29:60:ee:7e:
50:9e:ca:e5:e5:68:37:3e:1b:de:c6:d6:83:93:52:
ea:3a:62:cb:68:d5:f0:7e:8f:dd:7d:35:3e:1b:08:
4c:0d:22:2a:a1:62:d2:1a:91:d6:ff:ed:3a:ae:09:
68:1b:1d:90:bf:12:db:eb:99:3c:63:b5:f6:47:28:
d1:80:d8:3b:a6:a2:22:21:c8:ed:ae:22:45:96:66:
a1:aa:1d:16:03:fe:9e:46:e1:e0:10:60:27:52:4b:
cc:a3:12:4a:99:23:95:3d:11:b1:68:0f:70:3d:16:
6d:88:df:94:e4:bb:cc:44:4f:ad:09:83:9b:29:81:
d3:06:17:25:b4:8d:9f:e6:21:9f:82:4c:2a:93:78:
80:27:34:23:14:a2:44:a7:c2:66:0f:29:e8:db:e1:
03:63:40:71:49:d4:af:56:21:1c:56:3d:71:a0:49:
1a:f7:22:ea:da:74:da:df:ca:af:56:d9:a8:c9:08:
b7:32:00:01:df:ea:a7:b3:0b:e2:de:37:1b:3e:7e:
32:5e:f5:24:0b:6f:49:63:4d:63:cf:55:1c:3e:0d:
28:61:09:00:69:ee:32:30:49:c2:03:8f:56:09:f2:
f4:7c:0a:a5:77:c7:0f:5e:ee:27:de:a1:6f:35:42:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CD:E7:80:12:5E:BF:85:68:13:DB:62:24:0F:48:E5:02:3D:E2:3B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qc3ngBJev4VoE9tiJA9I5QI94js.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.101.192.0/18
Signature Algorithm: sha256WithRSAEncryption
42:63:0d:6a:4f:c6:96:94:24:5b:df:ea:88:0e:ae:fd:87:1d:
f9:21:b1:4b:5a:21:32:68:67:d7:20:c6:d4:d6:0d:b3:3c:3f:
8b:d1:19:d2:5c:02:94:de:ed:84:23:59:08:46:f9:fb:6f:df:
fe:b2:0f:a9:fe:f3:c0:92:93:2c:1b:15:22:d8:22:b5:dd:20:
c1:4e:4a:21:82:04:29:e1:4e:b9:fa:fc:71:d7:a8:f6:cf:b0:
30:a8:7c:96:4c:08:07:d8:62:19:a7:1d:fd:14:55:7b:48:86:
54:61:a7:20:f9:e6:33:d3:f1:55:8e:0f:bc:46:15:18:1a:0a:
b9:8e:4c:46:b3:02:09:5f:b1:3d:25:f5:36:d9:b3:8b:7d:f7:
12:be:4d:e3:69:5a:7b:93:cc:3c:17:85:8e:28:9a:bf:91:32:
59:e8:fa:8a:3b:50:40:db:51:65:43:cf:76:f8:c6:c4:bf:d6:
d8:fa:cc:13:07:f7:f9:d8:a4:e2:be:bc:9b:76:ce:f5:f3:90:
74:c9:9d:79:db:e9:0a:a2:c2:68:e0:77:74:e0:66:69:73:fa:
cc:a8:47:f4:b6:40:71:41:42:21:65:85:a5:30:1c:23:1a:42:
13:64:94:71:f5:a2:6c:77:eb:89:fe:9c:ab:8b:9b:44:ef:4c:
c9:63:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:54 2025 by rpki-client