Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa
File: u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa (raw, json)
Hash identifier: MwrfUVZcW6HlxDFPTz9mfX87vmXYFx/VLUhBeqLpyjU=
Subject key identifier: BB:C7:30:B1:FA:A8:2C:9C:1F:89:02:32:B7:23:39:56:6E:F1:17:12
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0117
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa
Signing time: Wed 24 May 2023 16:30:13 +0000
ROA not before: Wed 24 May 2023 16:30:13 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:13 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=BBC730B1FAA82C9C1F890232B72339566EF11712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:77:a0:4d:2b:3c:5e:c6:e8:de:7f:62:14:
48:4c:ba:36:12:00:1a:0d:9b:a1:0c:71:30:d2:86:
1c:39:2e:a3:f0:39:e6:c2:55:95:59:55:43:38:1f:
ff:8e:ad:1a:4a:93:c8:a8:6c:9f:fe:0a:f9:bb:d4:
8f:fa:5a:19:ec:48:41:f3:ce:47:0b:37:9c:27:35:
1f:4a:91:1f:d2:ac:43:3f:1f:d7:14:db:0b:2c:0c:
11:82:67:d5:b0:b2:5f:c1:00:b7:91:48:b8:28:b6:
e8:d8:2d:4b:e9:56:72:7d:48:81:8a:ce:e1:bc:8c:
42:9e:b2:02:8e:58:1f:a1:73:c4:cb:c2:79:b4:4d:
a1:fa:06:8f:b9:9a:5d:68:87:be:74:01:1d:a6:83:
4b:64:4f:34:3b:8d:a9:39:6f:b9:64:c8:c3:a7:f5:
28:09:08:a0:fe:ac:d3:19:99:57:a9:d0:93:26:01:
e3:ae:87:3d:74:81:f6:d2:b2:52:ae:fe:a1:78:11:
ce:ac:81:61:51:fb:18:08:80:5d:d2:b3:c1:9b:b7:
d6:1c:bb:a6:3d:d8:ad:ce:8e:a3:9c:17:7a:26:c5:
46:8e:79:e3:35:3a:02:bd:b2:7c:0c:bf:2a:05:90:
66:9e:6a:ca:c6:3d:ce:dd:19:52:a7:65:be:7b:0e:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:30:B1:FA:A8:2C:9C:1F:89:02:32:B7:23:39:56:6E:F1:17:12
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u8cwsfqoLJwfiQIytyM5Vm7xFxI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:b9:59:45:44:7f:0f:bd:c1:3e:89:f2:e2:01:6a:13:1e:76:
a0:b4:d9:08:eb:9f:1a:f1:99:3a:31:23:41:75:95:b4:c5:7f:
a7:ba:8a:99:15:e5:03:e9:dc:4b:0e:89:38:27:e0:0f:a9:b2:
8f:de:b2:cc:cc:1b:38:1f:fe:7e:b2:ce:14:08:d6:c5:81:a3:
1f:19:bd:87:7c:4c:20:bd:4a:13:64:20:a4:54:11:d2:3d:cd:
e4:73:59:56:9a:56:d5:91:02:4e:a2:f9:e4:ba:82:77:73:6d:
09:93:b5:8a:45:83:db:64:c3:98:ed:6e:82:0e:31:9d:c1:79:
20:f7:49:ac:52:3b:74:e0:01:3e:c2:3b:be:e5:fd:55:a5:80:
43:74:b7:a2:64:53:c0:e7:18:22:69:51:46:16:c7:37:b0:82:
6e:42:26:2e:eb:38:63:32:6e:99:3d:ee:11:6e:6f:d8:7a:58:
90:d2:de:45:7d:86:97:15:bf:3d:60:38:3e:91:d0:f6:1b:8d:
f4:aa:c0:04:78:ec:f1:84:0e:0e:97:0d:ca:32:d6:41:4e:1e:
2f:6f:4b:b2:36:bb:ac:70:ab:61:a0:db:97:0d:46:18:bd:92:
49:04:bc:c3:5f:e3:7e:a1:09:b2:74:fc:11:08:7d:29:75:11:
da:35:22:1e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMwMTNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJCQzczMEIxRkFBODJD
OUMxRjg5MDIzMkI3MjMzOTU2NkVGMTE3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG03egTSs8Xsbo3n9iFEhMujYSABoNm6EMcTDShhw5LqPwOebC
VZVZVUM4H/+OrRpKk8iobJ/+Cvm71I/6WhnsSEHzzkcLN5wnNR9KkR/SrEM/H9cU
2wssDBGCZ9Wwsl/BALeRSLgotujYLUvpVnJ9SIGKzuG8jEKesgKOWB+hc8TLwnm0
TaH6Bo+5ml1oh750AR2mg0tkTzQ7jak5b7lkyMOn9SgJCKD+rNMZmVep0JMmAeOu
hz10gfbSslKu/qF4Ec6sgWFR+xgIgF3Ss8Gbt9Ycu6Y92K3OjqOcF3omxUaOeeM1
OgK9snwMvyoFkGaeasrGPc7dGVKnZb57DpjdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUu8cwsfqoLJwfiQIytyM5Vm7xFxIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3U4Y3dzZnFvTEp3ZmlRSXl0eU01Vm03eEZ4SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxarAwDQYJKoZIhvcNAQELBQADggEBAE+5WUVEfw+9wT6J8uIBahMedqC0
2QjrnxrxmToxI0F1lbTFf6e6ipkV5QPp3EsOiTgn4A+pso/esszMGzgf/n6yzhQI
1sWBox8ZvYd8TCC9ShNkIKRUEdI9zeRzWVaaVtWRAk6i+eS6gndzbQmTtYpFg9tk
w5jtboIOMZ3BeSD3SaxSO3TgAT7CO77l/VWlgEN0t6JkU8DnGCJpUUYWxzewgm5C
Ji7rOGMybpk97hFub9h6WJDS3kV9hpcVvz1gOD6R0PYbjfSqwAR47PGEDg6XDcoy
1kFOHi9vS7I2u6xwq2Gg25cNRhi9kkkEvMNf436hCbJ0/BEIfSl1Edo1Ih4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org