Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa
File: 2rkQNIuNau35kkTrElBGwMAdGI8.roa (raw, json)
Hash identifier: qnOnfwe5DTuAwVBcec8oeiMl8Bl9EFHNwmHo8cDo5Kg=
Subject key identifier: DA:B9:10:34:8B:8D:6A:ED:F9:92:44:EB:12:50:46:C0:C0:1D:18:8F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A09
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa
Signing time: Sun 30 Jun 2024 01:44:15 +0000
ROA not before: Sun 30 Jun 2024 01:44:15 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.80.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:44:15 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=DAB910348B8D6AEDF99244EB125046C0C01D188F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:71:7b:f3:a5:3b:5b:87:89:cc:e9:54:4e:
1e:b1:ed:be:50:6d:ba:31:85:50:54:ca:4d:99:b5:
1d:ff:50:fe:c2:f4:e8:96:9c:dc:4e:5d:9d:29:6a:
8d:d8:28:9d:2b:8d:a0:ba:6c:92:21:17:84:d2:df:
6e:b8:4f:bb:cb:5a:cb:91:ed:4a:f5:7d:d0:eb:34:
91:bf:08:39:9d:b4:35:84:8c:f4:7d:05:c7:1e:fa:
4d:15:f9:f8:8e:9c:42:64:3e:81:4b:4f:72:72:00:
fa:ac:66:ee:3c:f1:12:ce:67:25:24:80:97:b9:f2:
44:f9:90:0b:da:55:99:11:f9:2d:0d:d8:57:c6:c0:
fc:36:e0:d0:18:40:1b:8f:2f:72:69:aa:92:02:28:
25:be:f4:6c:1a:20:ee:93:90:04:33:89:6d:e4:1a:
f1:b1:09:0f:a2:50:0d:0f:12:c2:fe:b8:42:f1:ea:
ca:f6:1e:5b:1c:90:ed:b3:c6:a4:71:e4:39:68:9c:
0f:2e:85:72:05:5d:7b:7e:24:20:99:bd:4c:63:3d:
81:3b:0b:43:3f:db:65:6b:cd:9e:ce:4e:9b:2f:81:
b5:49:97:1e:10:f3:0f:59:79:b4:06:43:10:af:3d:
f6:86:a7:71:96:c0:8a:dd:8c:74:fb:ec:fb:ba:b2:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B9:10:34:8B:8D:6A:ED:F9:92:44:EB:12:50:46:C0:C0:1D:18:8F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2rkQNIuNau35kkTrElBGwMAdGI8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.80.0/23
Signature Algorithm: sha256WithRSAEncryption
89:6c:1b:1d:0f:a5:34:ce:e8:ee:d7:82:e7:18:0a:da:51:89:
75:0e:c1:64:35:b5:2d:99:d2:19:6c:40:bf:51:f8:8b:7f:88:
bf:85:61:e0:b5:ee:ed:88:20:7d:c1:cb:e6:f4:a3:eb:f4:6e:
4b:90:17:28:e9:61:8d:fb:c0:3e:d0:85:63:44:e8:c0:57:3f:
7a:9c:cb:66:76:34:ba:78:8f:a0:57:d9:50:59:3f:18:25:38:
4a:75:fd:a1:4e:01:8b:9d:2c:43:47:ab:51:51:57:f0:8f:0d:
1c:a4:da:ff:4e:d4:dd:e3:c2:c6:11:ac:dd:28:da:3f:40:6f:
33:95:92:ae:ab:a6:c4:d0:49:b6:aa:8d:4e:6a:b6:64:52:3c:
d2:f5:ac:f0:d8:c1:df:bf:76:66:c8:24:26:0a:a9:98:e2:3c:
14:89:d5:57:d2:fb:1c:e2:b2:62:ad:3c:41:ef:74:25:a9:ab:
c7:93:dd:36:d2:44:e2:ba:74:77:8d:ad:06:72:1c:9f:a2:b3:
10:b9:c0:de:98:09:b6:6e:90:9e:8d:36:4e:15:96:1f:a2:68:
8f:1d:2d:7a:27:3f:f2:b4:19:98:83:3d:aa:79:27:2b:01:88:
05:83:8a:41:47:c7:88:c3:b5:5e:a7:37:21:0e:29:79:fb:65:
46:8b:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:48:32 2025 by rpki-client