Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa
File: YMFnYohIJGvzDxoA8pOQxEIQD_U.roa (raw, json)
Hash identifier: ydKNFW0w3zMPfq0n3eDPjn/9y44CqNncVlD+ZbFQLH4=
Subject key identifier: 60:C1:67:62:88:48:24:6B:F3:0F:1A:00:F2:93:90:C4:42:10:0F:F5
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 03
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa
Signing time: Thu 04 Jul 2024 08:25:35 +0000
ROA not before: Thu 04 Jul 2024 08:25:35 +0000
ROA not after: Thu 03 Jul 2025 05:04:45 +0000
asID: 18282
IP address blocks: 180.94.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Jul 4 08:25:35 2024 GMT
Not After : Jul 3 05:04:45 2025 GMT
Subject: CN=60C167628848246BF30F1A00F29390C442100FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:a7:64:49:a9:12:7b:02:f0:a6:17:d4:bd:
df:60:08:0d:bb:61:1c:52:0b:cd:1a:48:d5:ba:02:
08:44:3e:5a:bb:67:0d:8d:ac:5c:43:d4:1c:9c:2e:
37:a6:c8:36:84:42:67:9e:06:35:bd:ae:1e:45:2f:
22:6c:c7:48:30:41:d2:ee:d4:e1:95:64:07:5b:a1:
02:4c:da:dc:93:f7:0b:ae:25:d8:2f:49:b1:a4:ee:
c7:88:90:a8:dc:76:a8:7d:ea:2b:58:ca:25:8e:35:
1d:de:96:aa:63:91:33:02:2b:06:f5:3a:92:31:61:
27:82:99:61:20:bd:b9:08:60:42:7f:df:dd:af:ac:
63:03:46:28:f4:b0:52:e0:ce:21:a9:c5:06:92:29:
9c:9e:be:ce:3d:94:6a:5b:ca:62:04:4a:be:43:4b:
1e:6d:17:32:7e:10:a1:45:51:fc:ac:20:1f:15:19:
00:c0:e6:3a:04:2e:ac:2c:22:82:03:18:9b:64:e6:
11:8e:a8:55:d3:bb:98:05:52:8a:15:ad:1b:d6:75:
90:4d:2b:84:be:21:84:23:2a:f0:73:67:12:36:ad:
61:57:b0:1e:7f:1d:f3:f5:49:21:10:3b:c9:eb:7a:
31:ff:89:e9:10:b3:9c:0c:d5:5b:3b:06:d2:03:7d:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:67:62:88:48:24:6B:F3:0F:1A:00:F2:93:90:C4:42:10:0F:F5
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/YMFnYohIJGvzDxoA8pOQxEIQD_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
12:6b:44:c5:71:cf:38:1d:dc:32:0b:8c:f3:f2:db:dd:5a:1d:
49:04:2e:d7:65:e0:45:68:d3:76:10:7e:7f:3f:30:0b:0f:33:
ae:73:20:0f:72:ee:fe:c9:4a:0b:0a:00:6b:29:f1:65:bf:fe:
65:3b:f3:d5:b1:13:ad:8b:42:5d:d7:fa:dd:06:62:4a:80:6a:
59:d6:b9:a7:4a:1e:40:fa:8d:0e:f2:1f:05:b2:fe:5e:d1:7c:
c6:c8:a6:8e:7c:7c:71:2e:be:6e:61:e3:66:8c:29:24:5a:ee:
3a:52:32:9e:01:65:6a:52:e5:2f:b6:ea:52:48:79:8a:0d:a5:
0f:72:9f:ae:2d:cd:3c:a3:50:9b:b5:56:ad:1c:a3:03:86:aa:
3a:ab:15:1d:ce:b1:c5:23:cd:d1:cf:25:6d:64:02:7a:58:51:
d2:17:f0:1c:8e:cf:70:17:1e:17:38:5f:fe:37:83:84:23:75:
ca:fd:4d:19:37:4b:55:9d:f3:4e:5e:f2:6b:1c:a0:a4:c3:f2:
dc:15:83:0d:e4:95:a7:f9:6c:cc:f3:47:60:04:a1:49:dc:47:
8e:0b:ff:9b:d9:e3:51:cc:01:3a:24:13:1b:65:13:71:3f:8b:
28:9c:27:2a:b4:d1:ef:13:ac:04:cd:19:fa:ce:83:10:d6:66:
64:62:8f:69
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNTA0
MDFDNzg4QjU2OUIzRDQ0MDA0MTczMEUyOEE5OTFGNDAxOEQyMB4XDTI0MDcwNDA4
MjUzNVoXDTI1MDcwMzA1MDQ0NVowMzExMC8GA1UEAxMoNjBDMTY3NjI4ODQ4MjQ2
QkYzMEYxQTAwRjI5MzkwQzQ0MjEwMEZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMChp2RJqRJ7AvCmF9S932AIDbthHFILzRpI1boCCEQ+WrtnDY2s
XEPUHJwuN6bINoRCZ54GNb2uHkUvImzHSDBB0u7U4ZVkB1uhAkza3JP3C64l2C9J
saTux4iQqNx2qH3qK1jKJY41Hd6WqmORMwIrBvU6kjFhJ4KZYSC9uQhgQn/f3a+s
YwNGKPSwUuDOIanFBpIpnJ6+zj2UalvKYgRKvkNLHm0XMn4QoUVR/KwgHxUZAMDm
OgQurCwiggMYm2TmEY6oVdO7mAVSihWtG9Z1kE0rhL4hhCMq8HNnEjatYVewHn8d
8/VJIRA7yet6Mf+J6RCznAzVWzsG0gN9U2sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRgwWdiiEgka/MPGgDyk5DEQhAP9TAfBgNVHSMEGDAWgBQFBAHHiLVps9RABBcw
4oqZH0AY0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNjAvQlFRQng0aTFhYlBVUUFRWE1PS0ttUjlBR05JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQlFRQng0aTFhYlBVUUFRWE1PS0tt
UjlBR05JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTYwL1lNRm5Zb2hJSkd2ekR4b0E4cE9ReEVJUURfVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAS0XvAwDQYJKoZIhvcNAQELBQADggEBABJrRMVxzzgd3DILjPPy291a
HUkELtdl4EVo03YQfn8/MAsPM65zIA9y7v7JSgsKAGsp8WW//mU789WxE62LQl3X
+t0GYkqAalnWuadKHkD6jQ7yHwWy/l7RfMbIpo58fHEuvm5h42aMKSRa7jpSMp4B
ZWpS5S+26lJIeYoNpQ9yn64tzTyjUJu1Vq0cowOGqjqrFR3OscUjzdHPJW1kAnpY
UdIX8ByOz3AXHhc4X/43g4Qjdcr9TRk3S1Wd805e8mscoKTD8twVgw3klaf5bMzz
R2AEoUncR44L/5vZ41HMATokExtlE3E/iyicJyq00e8TrATNGfrOgxDWZmRij2k=
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:23:33 2025 by rpki-client