Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
File: vFaGZcMIpna2VPNbjGcjnJv25sM.roa (raw, json)
Hash identifier: tzQC8gRkDyUgQfllqZzSxCiYEJLaeLQoi5UzWnsjr2w=
Subject key identifier: BC:56:86:65:C3:08:A6:76:B6:54:F3:5B:8C:67:23:9C:9B:F6:E6:C3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0319
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
Signing time: Thu 01 Jun 2023 16:05:33 +0000
ROA not before: Thu 01 Jun 2023 16:05:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=BC568665C308A676B654F35B8C67239C9BF6E6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:df:f4:a7:06:44:b6:1f:31:18:fc:92:da:
59:49:5d:19:ea:f6:ea:f1:20:38:8c:32:23:ae:9e:
d2:f5:23:94:92:60:86:07:a2:4a:92:4d:d3:1b:9c:
6e:fe:53:32:b1:04:5b:78:e6:4e:39:e8:d4:e1:24:
b5:46:6a:91:a7:1f:24:05:74:1a:ed:10:6f:11:37:
d4:fe:1a:25:e2:ec:e7:b0:01:de:30:ca:0f:f9:6a:
54:13:09:b2:63:42:bf:34:5b:04:40:7b:bb:6e:c4:
08:27:1f:d3:72:66:ae:2a:cc:5c:a6:8b:2e:51:f2:
cb:cc:22:15:ed:60:3d:c8:3f:05:20:74:a0:ee:6e:
56:a8:ed:75:02:1f:92:f6:54:37:6c:bb:82:cc:6b:
2d:27:8f:d9:e3:50:96:11:87:27:9c:a7:cd:ef:0a:
52:bb:13:35:93:7d:36:0b:1e:a4:17:3b:6c:f7:e3:
ad:ad:7e:9e:f9:1c:9e:ce:22:97:c1:b2:6a:fd:3f:
02:75:db:45:aa:dc:d3:1d:8c:61:c3:1f:3e:c1:52:
c4:81:a3:70:61:5d:f2:38:be:7a:7e:10:0a:59:2e:
a6:8b:b0:58:7f:ae:7f:f3:4b:a2:79:4c:a3:de:ea:
29:16:2e:57:c1:f4:8c:bd:db:19:37:09:61:30:67:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:86:65:C3:08:A6:76:B6:54:F3:5B:8C:67:23:9C:9B:F6:E6:C3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.50.0/23
Signature Algorithm: sha256WithRSAEncryption
03:98:42:22:ac:90:7b:66:e1:22:92:84:89:fe:2d:00:58:fb:
7f:04:7f:87:5d:8f:62:10:a8:63:12:0a:e0:c9:6b:1b:3d:d8:
ba:54:90:fe:1a:03:3d:1c:94:e1:6c:24:8f:44:4a:27:19:eb:
68:bc:63:e6:67:d5:3c:aa:3a:18:7b:3a:67:42:48:07:18:d8:
09:3d:cc:18:94:4d:d3:71:90:7d:41:78:8a:b6:cc:12:11:33:
bb:38:78:1c:e6:7d:43:5d:ac:89:65:1d:78:3c:95:05:51:dc:
a3:46:76:fa:d1:fa:70:4f:34:03:59:b4:06:8a:9e:7a:1e:f7:
de:dd:de:43:e8:0c:20:e4:5c:f7:84:bf:0a:44:0e:c9:03:bd:
8b:83:f8:0c:20:3b:8c:10:c5:ec:1a:8b:f8:99:69:9c:bd:d5:
33:ba:b3:bc:79:5c:a0:a3:fa:7e:1a:f7:0d:7b:0f:b9:ae:4b:
7b:4d:48:65:8d:5c:20:40:d7:22:a1:11:67:47:74:16:97:06:
11:88:73:16:a1:c4:5b:ae:ee:b5:5b:26:89:c5:88:11:45:87:
8f:db:41:6f:5f:59:f0:6e:4e:90:1b:27:0a:52:06:a9:76:8d:
c0:17:0e:16:cf:28:8e:5c:8a:53:bc:2c:31:94:f5:65:29:16:
40:3f:50:52
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJDNTY4NjY1QzMwOEE2
NzZCNjU0RjM1QjhDNjcyMzlDOUJGNkU2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcAt/0pwZEth8xGPyS2llJXRnq9urxIDiMMiOuntL1I5SSYIYH
okqSTdMbnG7+UzKxBFt45k456NThJLVGapGnHyQFdBrtEG8RN9T+GiXi7OewAd4w
yg/5alQTCbJjQr80WwRAe7tuxAgnH9NyZq4qzFymiy5R8svMIhXtYD3IPwUgdKDu
blao7XUCH5L2VDdsu4LMay0nj9njUJYRhyecp83vClK7EzWTfTYLHqQXO2z3462t
fp75HJ7OIpfBsmr9PwJ120Wq3NMdjGHDHz7BUsSBo3BhXfI4vnp+EApZLqaLsFh/
rn/zS6J5TKPe6ikWLlfB9Iy92xk3CWEwZ6S5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvFaGZcMIpna2VPNbjGcjnJv25sMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3ZGYUdaY01JcG5hMlZQTmJqR2Nqbkp2MjVzTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYjIwDQYJKoZIhvcNAQELBQADggEBAAOYQiKskHtm4SKShIn+LQBY+38E
f4ddj2IQqGMSCuDJaxs92LpUkP4aAz0clOFsJI9ESicZ62i8Y+Zn1TyqOhh7OmdC
SAcY2Ak9zBiUTdNxkH1BeIq2zBIRM7s4eBzmfUNdrIllHXg8lQVR3KNGdvrR+nBP
NANZtAaKnnoe997d3kPoDCDkXPeEvwpEDskDvYuD+AwgO4wQxewai/iZaZy91TO6
s7x5XKCj+n4a9w17D7muS3tNSGWNXCBA1yKhEWdHdBaXBhGIcxahxFuu7rVbJonF
iBFFh4/bQW9fWfBuTpAbJwpSBql2jcAXDhbPKI5cilO8LDGU9WUpFkA/UFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org