Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa
File: jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa (raw, json)
Hash identifier: qTSRb65TidIqGevgFLdZt6RhrmN+Q2+tHV5Qh7twR00=
Subject key identifier: 8C:B5:1D:3B:64:07:2F:32:3C:64:63:51:6D:B6:01:53:F2:F2:F2:E4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A46
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa
Signing time: Sun 30 Jun 2024 01:48:26 +0000
ROA not before: Sun 30 Jun 2024 01:48:26 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2630 (0xa46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:26 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=8CB51D3B64072F323C6463516DB60153F2F2F2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:95:c8:7c:6b:86:a3:7c:c7:e8:5d:d1:e4:
a4:c7:b3:ff:08:43:56:d2:ba:f6:c3:9f:31:10:7d:
b4:4f:f6:6b:f8:df:55:a1:e0:5f:41:b5:9e:7d:24:
38:cb:cf:a1:16:a8:82:91:b6:8b:27:45:d7:7f:5f:
7d:ae:a8:2c:2e:55:19:7c:41:26:7f:e2:66:8d:26:
b0:dd:db:32:43:ed:8c:a0:cc:7a:f3:d7:48:06:91:
ea:ac:ec:ea:79:28:8b:9c:86:0c:e6:5b:3e:12:52:
aa:df:14:c1:48:c4:7e:d5:64:20:19:00:0c:58:15:
94:ae:ac:79:1f:6a:9d:f3:61:3b:e1:93:08:87:77:
32:c9:03:02:f5:c4:3d:bd:a3:dd:a6:62:0d:cc:4c:
c8:55:5b:74:b9:9a:59:e0:1c:9c:20:49:78:6a:76:
4f:b8:db:8b:63:81:bb:dd:87:ea:36:2f:b4:69:ee:
90:16:cf:ff:cb:51:07:59:e5:74:ef:54:f9:66:14:
0c:c5:69:23:c6:a6:06:83:e3:e7:f3:64:74:f4:1d:
c4:a0:a8:14:ba:cf:6c:ac:aa:b8:77:54:ce:83:ae:
4d:1f:98:ce:51:b6:02:60:3d:fe:19:d4:58:4e:57:
c6:9e:6a:28:e7:89:89:54:66:1a:af:3f:b9:11:1e:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:1D:3B:64:07:2F:32:3C:64:63:51:6D:B6:01:53:F2:F2:F2:E4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jLUdO2QHLzI8ZGNRbbYBU_Ly8uQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ba:3d:0b:2c:9b:bb:23:2c:1f:14:9a:51:49:13:be:cd:55:
81:5d:ea:ea:51:b2:11:54:1a:69:c0:d1:b3:6c:7c:8b:a1:27:
f0:3c:7f:b0:0c:5a:74:77:86:37:9b:45:65:63:26:ab:e3:a4:
7c:8e:b5:1f:b7:da:34:af:2a:50:77:24:5b:93:46:99:d1:54:
15:5f:d5:44:2f:a8:28:e4:0c:fc:b1:e0:78:99:38:99:31:eb:
24:5b:1c:4c:cc:cc:2d:38:85:8a:eb:50:bb:0c:8e:19:32:66:
b0:83:85:a2:0b:76:a6:61:2e:b2:99:a4:95:d4:a8:be:f1:81:
74:54:88:af:4f:3f:22:2c:42:94:8e:fd:e7:eb:c8:fa:ad:42:
e5:aa:11:b8:89:62:0b:2d:c0:d2:9f:5a:aa:18:e8:de:33:9f:
36:9a:3a:98:14:92:90:58:39:50:6d:ae:a2:23:36:f8:b9:8d:
71:ff:59:e1:b9:af:18:f1:30:80:61:6e:94:13:49:d3:6c:3c:
84:f2:55:c0:14:f0:bb:22:39:12:af:7c:5d:1e:9e:9f:61:cb:
dd:8e:8a:53:fe:90:12:0d:5e:b4:2f:e6:f4:b9:b5:ad:f9:fd:
57:a1:95:5a:4d:53:1d:9a:e3:af:fe:83:5d:94:ec:92:38:32:
9a:27:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:04:46 2025 by rpki-client