Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
File: ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa (raw, json)
Hash identifier: REVOnPdrFQEUiUFiFDneLLXY41KIOfWi3CX55noRT5A=
Subject key identifier: C9:BA:B9:5C:9E:8F:EC:40:36:CE:4F:03:D3:0B:EC:37:6F:FD:80:7B
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 0F
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
Signing time: Mon 18 Mar 2024 01:57:42 +0000
ROA not before: Mon 18 Mar 2024 01:57:42 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 17698
IP address blocks: 122.49.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 18 01:57:42 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=C9BAB95C9E8FEC4036CE4F03D30BEC376FFD807B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:70:d6:06:e8:85:17:26:02:ee:84:60:f8:
36:72:ec:c3:a0:39:61:47:84:5c:22:20:ac:c9:4c:
38:58:84:ce:81:0e:f9:a3:bb:9c:19:9b:41:f0:e4:
9e:16:2a:54:57:1b:94:c4:78:e5:8d:b4:51:ec:4a:
1c:cc:bf:10:c8:43:cb:2f:c2:4f:46:31:3e:a6:e2:
e0:c2:06:0e:ab:5d:23:27:81:93:1a:7e:61:1e:ee:
29:ce:04:e0:43:6b:af:10:f9:fe:4a:08:70:cc:4c:
45:b0:56:e5:b7:71:26:5d:27:22:9f:44:d3:f1:57:
cf:21:9f:5a:2a:1e:7d:5b:e2:d9:31:60:24:bd:c7:
7b:d5:32:4c:33:4b:b7:92:98:86:f7:0a:4b:27:85:
ed:7c:2a:5a:58:ba:7a:4a:ef:ed:0b:90:02:d7:0c:
95:99:5e:4c:54:6d:4c:b0:aa:67:10:07:8f:70:b2:
e1:b5:7e:18:1e:3d:ce:74:60:6e:0e:b9:fd:23:2c:
85:ba:5c:67:c0:bd:a6:4a:ee:ed:4b:38:6c:f3:68:
01:1d:8d:3f:a4:15:53:61:b2:61:f9:ef:c0:3a:ea:
1d:9c:f3:b9:a7:d4:85:b9:93:01:f3:65:a9:14:c4:
70:3d:ce:10:47:02:a2:d4:07:5e:e5:64:d9:54:54:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:B9:5C:9E:8F:EC:40:36:CE:4F:03:D3:0B:EC:37:6F:FD:80:7B
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.49.232.0/21
Signature Algorithm: sha256WithRSAEncryption
38:4c:1d:6d:6c:22:68:ac:7f:4b:24:af:a1:5a:8c:d8:96:2d:
fd:f2:66:7a:c4:08:44:b0:bb:6e:af:70:85:10:41:b9:a3:48:
4b:63:d5:d0:9a:29:cb:e9:38:10:5e:4d:b6:e5:a0:b0:fe:7d:
69:95:af:d0:d1:67:bc:9e:43:2c:c5:bc:be:30:ab:56:6a:33:
2d:48:6c:cb:5f:3c:00:8b:f2:d2:29:e1:17:75:c4:38:da:bb:
ac:0b:95:2f:cd:96:98:1e:9f:9a:ec:5c:79:71:e6:f7:28:8a:
19:da:bc:21:eb:04:6f:99:ee:81:9e:68:13:a3:f0:ea:1e:ad:
43:f6:e1:54:92:c2:b0:20:41:c4:02:ce:87:ed:cc:f9:34:76:
62:3f:0f:68:06:a1:d0:54:92:6a:65:4b:30:bd:40:d7:39:06:
56:18:d1:84:da:02:e7:8a:c8:54:e6:1e:54:25:19:95:c3:c1:
83:8f:7e:dd:ca:c8:71:a1:21:6a:d8:6f:58:76:de:59:f2:3f:
77:bb:70:63:d8:a3:d4:a9:a3:2f:77:74:eb:84:51:3b:32:bc:
3b:4f:96:39:34:46:b2:60:c2:ff:9b:99:88:4f:b0:1f:e7:e6:
b1:c2:2b:97:8f:e5:08:0f:d1:b3:c1:f7:00:26:92:6f:47:3a:
25:b4:cc:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 21:42:58 2025 by rpki-client