Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
File: yW1sifJam0eE3d_p7sJ0aep96MI.roa (raw, json)
Hash identifier: eoGN9dPdE0c1NkWw2pfrIxWIWN0ozRweGH3aG/kWy1Q=
Subject key identifier: C9:6D:6C:89:F2:5A:9B:47:84:DD:DF:E9:EE:C2:74:69:EA:7D:E8:C2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: A2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
Signing time: Wed 29 Mar 2023 16:05:46 +0000
ROA not before: Wed 29 Mar 2023 16:05:46 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:46 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C96D6C89F25A9B4784DDDFE9EEC27469EA7DE8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:71:5c:2e:d9:cd:46:ac:fb:fb:28:ee:7f:
21:89:63:c9:38:0f:dd:61:94:41:cc:8d:6a:d4:66:
88:2a:e2:04:1c:77:f3:32:81:53:0f:84:ec:d4:af:
b7:fd:29:31:1e:0d:25:6d:03:ac:ee:29:7a:eb:b6:
f3:5b:52:6e:47:bc:0a:89:22:ee:9c:d2:c3:72:03:
c9:42:91:d4:58:56:ef:b4:f7:2e:a5:41:08:d1:66:
01:94:f7:4d:85:27:9e:e7:b7:f6:7e:22:16:01:fb:
35:80:db:43:69:03:76:3b:69:e2:90:1a:95:c2:a9:
18:01:bb:18:65:92:11:bb:46:71:4b:9e:b5:d2:aa:
5e:f0:cf:15:5c:b8:17:5b:17:3c:90:e8:30:4a:81:
31:aa:ca:d5:b6:d5:26:43:8c:ad:40:e2:13:8e:53:
cd:d7:d7:19:07:23:0b:6f:e7:c3:43:66:62:7c:04:
7c:80:6c:25:e6:c4:22:06:02:88:51:de:18:93:35:
41:a8:a2:77:00:24:96:a8:4f:c6:3a:57:90:61:f1:
d4:17:9f:c4:5f:62:90:0f:c9:79:6d:cc:4b:41:15:
be:ac:c8:7f:28:d1:70:71:2c:ea:49:04:fb:e4:8a:
ac:c8:a5:5e:95:2c:cb:3f:40:07:72:e8:f9:73:62:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:6C:89:F2:5A:9B:47:84:DD:DF:E9:EE:C2:74:69:EA:7D:E8:C2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.196.0/22
Signature Algorithm: sha256WithRSAEncryption
41:38:71:2c:5e:df:61:02:93:3b:4e:8b:68:be:6c:68:e9:ac:
aa:16:1f:be:49:e6:3c:ae:fc:6a:52:13:d4:1b:bc:fe:4b:b2:
a7:8b:17:15:5d:b5:88:45:04:f3:21:e3:27:d5:b6:d0:f8:97:
52:2c:5d:d0:77:d9:a9:2e:c7:1c:44:cb:48:d3:e6:cb:90:99:
0c:33:cb:07:cf:fa:2d:da:c0:6a:1d:b4:2a:23:7b:7d:6d:eb:
97:a7:75:5c:7b:52:08:a0:35:c1:99:29:5a:73:cb:53:96:16:
75:70:76:0b:24:40:96:f4:0c:85:57:3a:d0:cc:da:90:0b:a7:
ed:7c:6f:0e:46:92:07:65:bb:d8:73:6d:af:82:be:c0:a5:8c:
9e:7d:c0:37:ab:f2:4f:49:27:68:d5:f2:cb:c2:57:b3:cf:c8:
6d:7b:26:c1:d3:34:c1:f5:0f:dd:ef:cc:ea:c6:9d:dc:38:c0:
28:40:a3:d0:5b:0c:b8:65:51:b3:48:e1:00:17:b0:c8:89:04:
62:5b:5c:a3:02:92:da:ea:f9:5a:57:84:15:46:61:e7:79:80:
7e:80:05:57:db:d3:f2:9b:99:88:a7:e3:45:5a:bf:3c:4a:7d:
20:65:30:95:d0:2d:69:a0:e5:8b:5a:7c:3e:9d:42:e8:8a:32:
97:e0:83:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NDZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM5NkQ2Qzg5RjI1QTlC
NDc4NEREREZFOUVFQzI3NDY5RUE3REU4QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtTXFcLtnNRqz7+yjufyGJY8k4D91hlEHMjWrUZogq4gQcd/My
gVMPhOzUr7f9KTEeDSVtA6zuKXrrtvNbUm5HvAqJIu6c0sNyA8lCkdRYVu+09y6l
QQjRZgGU902FJ57nt/Z+IhYB+zWA20NpA3Y7aeKQGpXCqRgBuxhlkhG7RnFLnrXS
ql7wzxVcuBdbFzyQ6DBKgTGqytW21SZDjK1A4hOOU83X1xkHIwtv58NDZmJ8BHyA
bCXmxCIGAohR3hiTNUGooncAJJaoT8Y6V5Bh8dQXn8RfYpAPyXltzEtBFb6syH8o
0XBxLOpJBPvkiqzIpV6VLMs/QAdy6PlzYvwbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyW1sifJam0eE3d/p7sJ0aep96MIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lXMXNpZkphbTBlRTNkX3A3c0owYWVwOTZNSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYsQwDQYJKoZIhvcNAQELBQADggEBAEE4cSxe32ECkztOi2i+bGjprKoW
H75J5jyu/GpSE9QbvP5LsqeLFxVdtYhFBPMh4yfVttD4l1IsXdB32akuxxxEy0jT
5suQmQwzywfP+i3awGodtCoje31t65endVx7UgigNcGZKVpzy1OWFnVwdgskQJb0
DIVXOtDM2pALp+18bw5Gkgdlu9hzba+CvsCljJ59wDer8k9JJ2jV8svCV7PPyG17
JsHTNMH1D93vzOrGndw4wChAo9BbDLhlUbNI4QAXsMiJBGJbXKMCktrq+VpXhBVG
Yed5gH6ABVfb0/KbmYin40VavzxKfSBlMJXQLWmg5YtafD6dQuiKMpfggxg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org