Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
File: yaP6snP4TFf6Thvf91bN5KNziYw.roa (raw, json)
Hash identifier: I68v8Pln+XQ7yPf7S80t3cd2ynRAgLlhrC6F5VRZRSs=
Subject key identifier: C9:A3:FA:B2:73:F8:4C:57:FA:4E:1B:DF:F7:56:CD:E4:A3:73:89:8C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 95
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
Signing time: Wed 29 Mar 2023 16:05:01 +0000
ROA not before: Wed 29 Mar 2023 16:05:01 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:01 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C9A3FAB273F84C57FA4E1BDFF756CDE4A373898C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:df:af:73:4c:10:75:2f:58:7a:d5:a2:e8:
45:b7:b4:a3:65:a9:73:9a:69:44:77:cd:6f:5e:d7:
0f:5c:93:87:a2:83:71:27:21:c6:99:69:66:b6:df:
8c:7e:b1:96:7e:9b:56:9c:d8:ba:ec:4e:37:bb:e7:
49:6c:69:30:e9:dd:ab:c4:12:3c:64:2c:b1:7f:e6:
8f:4e:83:a0:93:27:b7:e6:ec:a8:bb:31:7c:da:3e:
49:00:70:13:6a:b4:13:c5:5b:a5:e4:b2:fd:b2:7c:
da:21:18:40:80:8c:a9:18:c3:29:57:14:ae:94:d6:
5b:71:ef:19:27:36:08:a6:66:c8:d8:a1:ae:39:b1:
44:76:0c:bd:e8:dd:b4:18:fd:b9:23:2f:84:72:d9:
43:a4:02:62:1e:06:79:5e:28:ff:7c:f4:95:a0:60:
ef:24:1a:bb:68:4c:a1:e1:9b:f0:5d:a8:f6:2f:5e:
71:a1:e1:48:b2:f5:e1:3e:4f:5f:5a:72:71:34:ba:
43:44:7b:5a:23:de:d9:4b:6c:94:cb:ca:14:5d:f9:
9e:5a:eb:6f:5e:b0:03:74:ad:09:9a:0a:90:ca:a7:
98:a1:c8:1d:c0:3a:ff:bc:07:58:33:4a:9a:3c:66:
ec:a2:26:9c:89:a3:bd:fc:57:36:e7:82:19:80:ba:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:FA:B2:73:F8:4C:57:FA:4E:1B:DF:F7:56:CD:E4:A3:73:89:8C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yaP6snP4TFf6Thvf91bN5KNziYw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.132.0/23
Signature Algorithm: sha256WithRSAEncryption
44:25:7f:2e:c4:08:78:9e:cb:22:6c:ea:c8:f2:96:67:ee:9d:
8c:48:d2:52:d4:2e:1b:99:c1:d5:e0:20:bb:eb:16:b3:ac:22:
a6:ed:77:93:54:f9:e5:d4:3f:e6:a5:e4:cf:68:c6:09:c2:01:
69:62:68:18:28:37:d8:8b:46:f0:95:2e:19:27:77:80:b5:a4:
c6:f8:75:78:49:7d:1c:01:19:9b:ef:5c:9c:58:97:5d:ac:10:
8b:ec:9a:5e:9a:70:2b:18:76:28:f5:92:f3:06:c9:d4:e6:55:
be:12:61:c4:52:e4:92:6c:00:4c:b1:30:90:db:0b:c2:7f:99:
e7:2a:f4:1b:c9:e8:a0:9b:dc:29:c6:ef:1f:c8:db:ff:12:21:
d3:bc:b6:08:a7:65:87:79:22:e6:c6:94:5a:77:8f:a3:8d:84:
9d:82:05:f0:5a:1d:90:20:6c:58:e4:0f:79:c9:34:0a:ec:aa:
6e:3f:3f:c2:bf:ae:c1:9f:d3:d1:bf:1b:3c:9d:c1:9e:9a:19:
5f:d9:69:02:d4:a0:61:1e:56:92:ae:51:29:92:ba:4d:10:66:
88:cb:52:ee:86:04:41:47:4e:90:8e:e2:ea:3c:90:20:02:be:
9d:b3:c4:6e:f3:34:50:26:8f:b0:e6:28:a8:23:69:40:e7:0d:
34:90:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:51 2025 by rpki-client