Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
File: BsU3ILY26XStuuLk6UtkznI7R0s.roa (raw, json)
Hash identifier: +nT/yMWHSUdhXkE7gml8vS4o+4F6pwBXUYMPjuYPdCg=
Subject key identifier: 06:C5:37:20:B6:36:E9:74:AD:BA:E2:E4:E9:4B:64:CE:72:3B:47:4B
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 6C
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
Signing time: Sun 30 Jun 2024 01:29:10 +0000
ROA not before: Sun 30 Jun 2024 01:29:10 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 55900
IP address blocks: 180.131.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Jun 30 01:29:10 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=06C53720B636E974ADBAE2E4E94B64CE723B474B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:38:ef:6f:d6:77:49:f0:e6:a6:7c:8b:54:
49:c4:7d:65:c0:e6:cc:31:d7:ea:c2:44:c6:b1:82:
54:2a:4c:b2:b0:f9:c1:46:25:1f:f7:ec:14:23:f9:
4e:b6:e2:5b:b8:9f:1c:b3:8a:f4:ce:fb:69:c0:b4:
a9:e0:d4:ec:5c:3b:13:b6:b8:4d:27:34:79:df:77:
0e:7e:be:6e:15:92:d2:6b:71:06:99:88:55:ec:cf:
ee:e0:e5:06:74:91:6d:d8:47:0d:5d:7d:f1:bd:3c:
bb:63:0b:08:78:6b:eb:f2:88:9c:df:80:76:17:73:
85:50:bf:8f:ee:2a:7b:84:5b:79:c0:36:0c:19:4b:
96:07:5c:fd:1e:7a:b6:8a:65:51:53:7d:82:40:14:
a5:2a:69:3b:f1:2f:65:42:9c:67:b5:1f:79:f0:90:
08:bb:a2:9a:b2:ec:d6:e4:d7:8c:4c:65:5c:0f:b2:
48:be:e3:fc:1c:c0:13:7c:fc:21:e3:6b:a3:a8:83:
c1:49:6b:ce:66:ff:42:ae:36:9d:7b:7a:38:04:2f:
0f:b6:7e:ca:52:e7:d5:e6:8f:58:b8:2e:97:5d:c7:
4a:6d:1b:30:29:a4:ed:21:22:f3:ca:fb:24:e2:a4:
74:fd:20:0b:02:d1:a5:9a:de:27:43:34:5a:3b:cd:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:37:20:B6:36:E9:74:AD:BA:E2:E4:E9:4B:64:CE:72:3B:47:4B
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BsU3ILY26XStuuLk6UtkznI7R0s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.224.0/19
Signature Algorithm: sha256WithRSAEncryption
90:d6:13:43:8f:a6:f5:78:4f:de:f1:7f:e4:25:07:85:08:2f:
f6:ca:2c:31:ca:a5:4d:15:3a:32:c5:88:8b:4d:73:78:16:f9:
0e:5b:98:be:d9:14:8b:8f:9b:24:37:84:bb:2b:9b:9c:b2:fe:
07:e9:ea:99:71:92:ba:d2:42:53:c7:0c:f1:4a:fc:f4:95:73:
fd:e4:63:08:60:b0:31:eb:1a:3d:7e:82:92:8c:4c:36:46:cc:
29:1f:3a:17:fc:ce:d5:97:47:48:59:3f:42:c0:78:c7:25:fc:
4c:fa:68:48:1f:82:11:c0:71:77:9c:90:65:02:6d:db:a5:a1:
68:e9:b3:b9:09:37:44:5f:85:60:f7:70:5d:cd:b1:60:d1:3f:
dc:fa:ec:ed:20:f2:fa:da:e8:18:7a:8f:8c:96:c4:01:08:33:
0c:cc:80:71:be:01:c4:2c:93:8b:47:13:20:fc:8f:38:4d:a9:
7c:63:bc:5d:fd:88:fd:be:f7:47:e6:ed:86:e0:74:a6:dd:15:
f2:1b:3e:20:4b:a9:c9:2d:d4:e9:2a:8b:61:be:25:f3:32:07:
ba:d4:cb:55:61:da:21:33:31:3e:4c:89:2d:1c:05:d9:39:a6:
a7:d4:26:51:e0:d9:5f:69:18:f6:1e:69:44:80:08:bd:65:1f:
7a:0b:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:10:45 2025 by rpki-client