Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
File: 0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa (raw, json)
Hash identifier: N+QzMKb+E+FAZAmA7gb8fRDlrRUnjDW6vxRQKAiFF84=
Subject key identifier: D1:AA:09:29:82:89:F6:DE:A3:4E:F7:E8:4A:94:34:04:17:D8:0C:9B
Certificate issuer: /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Certificate serial: 3A
Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
Signing time: Sun 30 Jun 2024 01:28:49 +0000
ROA not before: Sun 30 Jun 2024 01:28:49 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 63771
IP address blocks: 202.223.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Validity
Not Before: Jun 30 01:28:49 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=D1AA09298289F6DEA34EF7E84A94340417D80C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:e6:7a:11:d8:af:6c:4d:58:98:22:76:c1:
0c:de:16:66:6e:3d:88:b3:c2:e8:4b:ef:36:2d:83:
59:aa:93:8e:97:ad:ce:01:bf:c2:84:fc:bf:ea:00:
6d:02:43:9e:f6:2f:ef:d0:20:f3:23:96:65:37:6c:
71:0d:2b:7a:ec:06:b8:97:6f:58:18:2a:c0:03:bf:
96:2e:c3:0e:4d:bf:c3:be:d8:9e:93:c4:01:95:fb:
28:49:d6:51:1d:ca:a1:40:13:72:85:69:58:0a:0b:
7a:47:61:f2:3c:42:b7:d3:f5:3b:45:70:06:b0:4d:
6d:6f:ad:85:c1:a5:a9:df:1a:2f:97:11:c0:38:6b:
93:7d:51:51:8a:5d:19:40:11:5d:e9:df:51:68:38:
b7:d7:8c:50:d4:6b:22:13:4c:13:60:6e:1a:aa:a3:
df:44:b6:d2:83:16:ef:29:fe:e0:2d:5a:1b:62:01:
0e:f7:18:fe:c2:7e:18:34:40:76:cb:d7:fe:30:59:
2e:64:cd:d8:03:29:ff:9c:a7:79:fe:44:61:ad:e1:
07:f0:97:0e:ea:e6:07:15:c4:9b:29:7d:fc:a2:dc:
32:91:e6:6b:ee:76:8d:e8:e8:0a:78:4b:51:89:e9:
9c:b1:22:0e:c1:2b:37:81:f6:0e:3d:e3:75:74:0d:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:09:29:82:89:F6:DE:A3:4E:F7:E8:4A:94:34:04:17:D8:0C:9B
X509v3 Authority Key Identifier:
keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.223.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:76:46:8a:8f:c5:4f:d5:17:66:d8:77:83:f0:8f:83:dc:3c:
15:ad:b5:88:c6:ce:fd:19:07:b0:5d:4b:17:20:cd:c7:90:05:
c4:92:6d:25:c3:33:78:8a:56:1e:ab:45:fe:f1:7d:65:3e:e9:
43:9f:a0:9f:1e:18:82:41:a1:8e:e7:56:e7:54:45:e7:14:2b:
35:6e:11:fe:c0:e1:e9:78:79:98:c1:bb:21:c6:c2:0c:78:36:
3f:a6:7c:cf:f6:32:cc:72:b8:2f:cf:75:33:6d:dc:fb:36:c6:
55:11:4f:e1:4a:0c:ce:fc:df:1b:da:36:46:ad:7b:fe:e5:ec:
ca:52:3d:5e:af:13:02:55:a9:95:92:e7:c0:06:b5:a6:c2:7c:
13:16:70:d8:c9:07:9f:f7:ae:3b:ee:50:e8:d8:3c:45:e0:1b:
0c:1c:7a:60:80:a0:6f:b4:cc:12:8a:cf:49:2e:c2:b0:92:4f:
22:7f:6c:35:d0:ec:d7:49:cc:39:4c:2c:b1:ab:d7:aa:4c:b9:
9d:75:b2:55:ee:01:48:12:9f:60:5f:0f:13:3c:64:d2:f1:43:
cc:7d:74:c0:1b:34:85:3e:05:fb:44:af:4a:cc:47:cd:a0:79:
49:a8:5e:22:11:d1:09:be:6a:51:20:e2:a4:42:62:c6:96:98:
de:47:4c:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:56:41 2025 by rpki-client