Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa
File: PTjrlu2lsgmpLAdgMvEabl1APGQ.roa (raw, json)
Hash identifier: piVjFvu5PtPte9N3KpRLq4tkYhU9T46ffdwKzZ1Kio0=
Subject key identifier: 3D:38:EB:96:ED:A5:B2:09:A9:2C:07:60:32:F1:1A:6E:5D:40:3C:64
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A59
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa
Signing time: Sun 30 Jun 2024 01:48:34 +0000
ROA not before: Sun 30 Jun 2024 01:48:34 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2649 (0xa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:34 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=3D38EB96EDA5B209A92C076032F11A6E5D403C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:da:cf:e1:32:a4:c7:88:98:68:82:85:a8:
fd:18:9d:72:47:07:85:4d:25:c1:06:d4:34:2f:19:
41:45:06:6c:05:55:e8:e3:d9:c2:b1:f2:19:ad:bd:
a0:8a:8e:ff:20:1c:71:1e:14:19:f1:90:a9:3f:5e:
5f:86:35:eb:65:5c:75:66:ad:a9:49:82:cb:0e:4d:
21:55:a9:89:64:fc:8c:81:3f:e6:45:31:a0:fa:39:
3b:c6:f4:87:5b:ba:69:f3:55:22:c5:c7:1a:34:9b:
ad:e2:2e:a0:be:fc:4d:a4:29:88:c2:da:c3:c8:85:
3d:23:d8:7a:c9:d9:50:12:11:8f:01:8e:e0:2b:ab:
90:a0:2f:28:70:95:0c:7d:92:b8:78:fb:bd:ec:4d:
2a:c4:08:e5:df:2a:e2:a9:de:b3:d0:67:70:90:e1:
5a:b3:dc:14:b9:16:de:35:05:8d:18:8e:a4:72:2f:
dd:a8:75:cf:1e:a5:0e:5f:4e:7b:8a:f2:d2:b5:9c:
58:cc:16:ed:fe:12:d8:ad:dc:b0:3d:00:93:5e:30:
d8:dc:17:1e:23:54:c1:94:7d:97:a5:01:e4:6a:34:
9b:1c:c3:a3:ef:3c:fe:da:6f:83:10:0f:06:6a:92:
71:69:07:9b:36:87:22:4b:06:ae:ae:42:1a:49:28:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:EB:96:ED:A5:B2:09:A9:2C:07:60:32:F1:1A:6E:5D:40:3C:64
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTjrlu2lsgmpLAdgMvEabl1APGQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.230.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c3:65:46:cb:8d:c5:5f:98:6f:60:fa:ae:f6:42:15:cd:7a:
f2:18:dc:6b:6e:4a:d5:64:ef:4f:c5:6e:49:93:21:80:17:68:
a2:13:04:e0:ac:b3:5e:67:72:cb:aa:ec:c2:65:2a:a3:02:96:
30:33:ea:9f:02:f0:bd:82:c7:35:77:ae:60:a2:46:99:b2:3c:
0f:f7:3b:68:e0:09:ee:fe:82:a7:89:30:66:c0:10:26:b6:9f:
bb:3e:fc:7c:d8:fb:50:26:77:69:01:b6:60:2b:ac:dc:68:3a:
4f:91:4a:2b:26:d2:35:d9:34:23:42:cf:61:7f:bb:3f:6e:f2:
62:6d:81:b3:cc:51:e3:86:4d:97:df:1e:69:69:b8:45:3d:ca:
a3:12:d2:1d:e9:35:52:2b:17:d0:f3:18:55:0e:45:fb:c2:f1:
cb:af:78:c5:58:32:65:4f:ae:3a:9c:04:d1:5e:6d:af:29:d9:
03:3f:ea:cd:01:64:ea:bf:1c:20:93:66:17:6a:14:4e:0d:94:
90:0d:10:84:e6:20:a5:7d:10:53:85:1e:9d:44:8e:a3:fd:d9:
f5:4e:2f:13:10:1f:d6:f3:98:7c:c8:b9:c5:f5:98:bf:05:6e:
f7:57:28:23:3f:67:c8:64:d2:dd:9c:43:44:08:b5:8a:63:21:
8c:d2:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:08:25 2025 by rpki-client