Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
File: n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa (raw, json)
Hash identifier: BjMs4aNXFKO7HsOXamic39SaLQABv0dXBxPoNAvTcNU=
Subject key identifier: 9F:9B:32:D5:1B:F7:97:A2:F3:88:B2:10:87:CC:20:4F:E9:80:C8:C2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A51
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
Signing time: Sun 30 Jun 2024 01:48:31 +0000
ROA not before: Sun 30 Jun 2024 01:48:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 211.14.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=9F9B32D51BF797A2F388B21087CC204FE980C8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:14:fe:b3:de:8c:e1:0e:10:e8:78:8d:6e:
d4:87:62:09:53:f9:65:72:97:a0:78:07:4c:c2:92:
81:91:70:bd:8e:23:5e:25:f8:1a:47:75:5c:0c:a2:
da:a8:57:fe:f7:15:78:cd:ab:52:32:7f:6e:e3:94:
0a:a9:48:4f:0e:f3:7b:08:70:bb:cd:48:82:71:0d:
a8:02:aa:2c:eb:cb:d9:26:36:ad:88:0c:6a:02:6a:
cc:70:ec:80:76:d5:ad:28:d1:73:30:09:3b:30:6e:
7b:bf:33:e2:a3:c5:97:6f:5e:35:15:5d:96:75:69:
c0:17:05:14:e5:53:a9:83:6d:ca:52:f7:42:b5:40:
f9:d6:32:c5:41:3e:60:1e:7f:7e:50:30:f0:64:07:
25:6d:18:1f:2b:53:88:f7:b2:79:3c:ea:da:29:5d:
4e:96:a6:cc:14:46:41:d4:84:46:38:68:f9:c9:56:
33:28:ad:94:74:f6:95:0b:3a:cb:15:67:63:45:70:
dc:33:f9:db:35:b3:6f:5e:52:2f:c5:f5:c9:14:16:
36:c5:bf:e7:6c:f1:73:2f:bb:44:be:bf:c0:3f:99:
cd:ea:23:a8:f8:59:50:2d:2a:97:56:63:c7:7c:19:
2a:d7:93:72:ac:37:dc:58:d9:16:84:2f:50:02:2f:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:32:D5:1B:F7:97:A2:F3:88:B2:10:87:CC:20:4F:E9:80:C8:C2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.100.0/22
Signature Algorithm: sha256WithRSAEncryption
03:87:e2:2c:b2:59:d1:7b:aa:29:89:6d:69:a1:4e:09:37:d2:
da:ff:e6:aa:c6:79:7b:b1:07:18:63:6f:ce:43:6f:52:03:9f:
4b:3c:c2:e0:fb:75:b6:87:44:29:de:3d:94:0b:35:e5:3f:e2:
ce:7e:a2:ca:46:48:7d:56:09:a9:9e:4c:cc:de:0a:af:ca:8e:
75:46:9e:b8:0d:bc:42:28:f7:02:e0:cd:fc:9f:34:65:e7:11:
67:f7:15:f0:9d:4a:65:ae:28:d4:03:2e:60:a8:d0:75:12:ff:
64:2b:fd:b9:f5:71:41:eb:0f:2c:50:0f:6c:5c:c1:b9:8f:9c:
ba:8f:cb:b7:b2:ca:d1:be:26:51:06:41:66:f5:74:20:10:aa:
39:12:9f:89:dd:df:3b:75:a2:49:59:87:b7:2d:d9:53:1a:36:
dc:8d:af:6c:78:fe:ea:44:dd:bf:7a:f5:0f:10:49:52:a9:83:
0b:2c:0b:2d:2d:b3:b5:43:c0:ae:88:cc:c6:b6:6e:e5:03:1d:
2c:0a:b2:e5:67:80:d9:ae:37:9a:0c:1e:75:70:d7:fc:bc:95:
d1:8c:7b:fc:b3:85:be:b4:cc:47:66:e6:4d:13:9c:d7:5e:54:
82:c5:b1:28:e9:4e:79:f6:7b:8e:20:27:c0:76:20:10:72:8e:
d0:ca:33:d4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICClEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ4MzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDlGOUIzMkQ1MUJGNzk3
QTJGMzg4QjIxMDg3Q0MyMDRGRTk4MEM4QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCgBT+s96M4Q4Q6HiNbtSHYglT+WVyl6B4B0zCkoGRcL2OI14l
+BpHdVwMotqoV/73FXjNq1Iyf27jlAqpSE8O83sIcLvNSIJxDagCqizry9kmNq2I
DGoCasxw7IB21a0o0XMwCTswbnu/M+KjxZdvXjUVXZZ1acAXBRTlU6mDbcpS90K1
QPnWMsVBPmAef35QMPBkByVtGB8rU4j3snk86topXU6WpswURkHUhEY4aPnJVjMo
rZR09pULOssVZ2NFcNwz+ds1s29eUi/F9ckUFjbFv+ds8XMvu0S+v8A/mc3qI6j4
WVAtKpdWY8d8GSrXk3KsN9xY2RaEL1ACL/zdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUn5sy1Rv3l6LziLIQh8wgT+mAyMIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L241c3kxUnYzbDZMemlMSVFoOHdnVC1tQXlNSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALTDmQwDQYJKoZIhvcNAQELBQADggEBAAOH4iyyWdF7qimJbWmhTgk30tr/
5qrGeXuxBxhjb85Db1IDn0s8wuD7dbaHRCnePZQLNeU/4s5+ospGSH1WCameTMze
Cq/KjnVGnrgNvEIo9wLgzfyfNGXnEWf3FfCdSmWuKNQDLmCo0HUS/2Qr/bn1cUHr
DyxQD2xcwbmPnLqPy7eyytG+JlEGQWb1dCAQqjkSn4nd3zt1oklZh7ct2VMaNtyN
r2x4/upE3b969Q8QSVKpgwssCy0ts7VDwK6IzMa2buUDHSwKsuVngNmuN5oMHnVw
1/y8ldGMe/yzhb60zEdm5k0TnNdeVILFsSjpTnn2e44gJ8B2IBByjtDKM9Q=
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:55:34 2025 by rpki-client