Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yVH0uVCGgsZE37ZM3KgaoQ47AgY.roa
File: yVH0uVCGgsZE37ZM3KgaoQ47AgY.roa (raw, json)
Hash identifier: L7wBUS4FXh6Elpe3/2MHS/zuPv2OFLim0iMKCGomDL0=
Subject key identifier: C9:51:F4:B9:50:86:82:C6:44:DF:B6:4C:DC:A8:1A:A1:0E:3B:02:06
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yVH0uVCGgsZE37ZM3KgaoQ47AgY.roa
Signing time: Thu 01 Jun 2023 17:59:33 +0000
ROA not before: Thu 01 Jun 2023 17:59:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:59:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C951F4B9508682C644DFB64CDCA81AA10E3B0206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:6e:87:94:3a:73:77:ec:0e:b6:8d:65:3c:
6a:88:fd:f3:99:02:56:e6:29:66:00:30:5a:06:1b:
fe:b4:6f:91:c3:33:bd:c1:74:03:9f:5a:86:bd:63:
c7:86:65:38:39:dd:70:54:db:29:e6:01:4b:7f:eb:
2d:f6:49:6a:dc:20:b9:d6:60:db:43:a9:2e:b2:bc:
01:57:0f:8c:7e:ee:ef:30:2a:40:c4:b6:fc:bc:5a:
5a:0c:ee:6e:17:76:33:94:15:53:a5:da:ef:ef:00:
fd:e8:f1:b4:e6:81:2f:3c:17:c3:56:d0:71:20:24:
86:84:85:e6:2a:21:79:77:3b:4d:9c:ce:77:a4:a6:
8e:bc:23:32:ca:dc:25:f0:83:5c:6c:57:e4:a2:70:
c9:c4:32:89:03:36:9d:2c:94:c1:25:f3:89:7b:23:
71:f5:ca:e6:b5:db:7e:3f:00:5d:ea:36:ee:81:0f:
1d:64:b0:39:2f:8a:cd:fb:ea:83:e5:af:f0:c2:3c:
5c:9a:79:30:30:27:65:44:40:3d:3c:7b:b8:07:ec:
0e:03:97:4c:81:ee:b5:b6:ef:d2:ac:20:3c:f6:68:
c0:12:7f:4a:b1:92:e1:50:95:3b:e8:f8:bf:0e:83:
a9:e5:c5:c2:e8:81:b3:3b:4c:be:fb:e3:ac:be:17:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:F4:B9:50:86:82:C6:44:DF:B6:4C:DC:A8:1A:A1:0E:3B:02:06
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yVH0uVCGgsZE37ZM3KgaoQ47AgY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.128.0/18
Signature Algorithm: sha256WithRSAEncryption
67:ab:ad:58:77:a2:e3:f7:6c:01:43:20:c1:bd:43:92:74:40:
9c:bf:6b:f7:4a:79:7e:06:04:be:88:46:fa:ca:2a:84:50:05:
29:c6:c5:3d:6a:30:5d:34:89:6e:eb:56:40:d8:30:6e:59:48:
27:31:01:85:9a:7e:a8:47:33:b5:c7:fd:9b:ec:f7:b7:70:24:
71:b1:7b:42:19:38:5b:7f:c6:d7:99:87:a0:90:75:17:ad:ea:
4d:37:94:5a:92:b9:55:46:3d:89:77:65:9d:ae:3c:06:af:6a:
78:15:39:6a:b5:90:cc:75:99:1a:a6:92:ff:31:08:dc:57:1c:
f5:47:dd:ce:c1:1a:16:44:2a:1a:a4:dc:fc:1f:fe:4b:a5:c3:
41:a3:3e:ed:89:4e:ed:6f:cd:a3:d2:d0:45:cf:81:15:1c:f2:
8d:50:aa:d7:c4:15:ed:72:1b:2e:62:3b:1a:50:4f:85:26:2d:
69:d2:00:6d:be:97:15:e6:33:d4:dd:fb:97:b3:8f:2f:3f:6e:
f4:48:ee:3f:e4:ff:b1:b4:38:ab:68:9c:27:8e:01:1f:fb:f7:
78:80:78:ba:4c:d4:d4:76:99:e9:3d:60:93:2e:4d:0e:36:7e:
e9:49:17:c6:35:86:2a:8d:cd:9b:61:5a:49:58:b3:b6:97:a3:
13:92:0f:f2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU5MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM5NTFGNEI5NTA4Njgy
QzY0NERGQjY0Q0RDQTgxQUExMEUzQjAyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKq26HlDpzd+wOto1lPGqI/fOZAlbmKWYAMFoGG/60b5HDM73B
dAOfWoa9Y8eGZTg53XBU2ynmAUt/6y32SWrcILnWYNtDqS6yvAFXD4x+7u8wKkDE
tvy8WloM7m4XdjOUFVOl2u/vAP3o8bTmgS88F8NW0HEgJIaEheYqIXl3O02cznek
po68IzLK3CXwg1xsV+SicMnEMokDNp0slMEl84l7I3H1yua1234/AF3qNu6BDx1k
sDkvis376oPlr/DCPFyaeTAwJ2VEQD08e7gH7A4Dl0yB7rW279KsIDz2aMASf0qx
kuFQlTvo+L8Og6nlxcLogbM7TL7746y+F4JHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyVH0uVCGgsZE37ZM3KgaoQ47AgYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lWSDB1VkNHZ3NaRTM3Wk0zS2dhb1E0N0FnWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYxaIAwDQYJKoZIhvcNAQELBQADggEBAGerrVh3ouP3bAFDIMG9Q5J0QJy/
a/dKeX4GBL6IRvrKKoRQBSnGxT1qMF00iW7rVkDYMG5ZSCcxAYWafqhHM7XH/Zvs
97dwJHGxe0IZOFt/xteZh6CQdRet6k03lFqSuVVGPYl3ZZ2uPAavangVOWq1kMx1
mRqmkv8xCNxXHPVH3c7BGhZEKhqk3Pwf/kulw0GjPu2JTu1vzaPS0EXPgRUc8o1Q
qtfEFe1yGy5iOxpQT4UmLWnSAG2+lxXmM9Td+5ezjy8/bvRI7j/k/7G0OKtonCeO
AR/793iAeLpM1NR2mek9YJMuTQ42fulJF8Y1hiqNzZthWklYs7aXoxOSD/I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org