![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/OOg0Bnbp_wNnSw7w6-1Puvv2icg.roa
File: OOg0Bnbp_wNnSw7w6-1Puvv2icg.roa (raw, json)
Hash identifier: GI4FuSGOhbW17M/B0UPGXM9dSQwljHtvJ8OXAQe4wzY=
Subject key identifier: 38:E8:34:06:76:E9:FF:03:67:4B:0E:F0:EB:ED:4F:BA:FB:F6:89:C8
Certificate issuer: /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial: 1F
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/OOg0Bnbp_wNnSw7w6-1Puvv2icg.roa
Signing time: Tue 01 Mar 2022 01:33:04 +0000
ROA not before: Tue 01 Mar 2022 01:33:04 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 2515
IP address blocks: 202.12.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Validity
Not Before: Mar 1 01:33:04 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=38E8340676E9FF03674B0EF0EBED4FBAFBF689C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:73:17:1c:2b:f4:36:ae:01:8d:87:d9:8e:
fa:a8:06:b6:d1:3e:c9:e5:d6:ec:71:91:67:d1:35:
05:78:b0:dc:67:f4:f1:13:af:32:d3:e9:c1:7d:ef:
c4:f5:d2:30:74:90:51:e4:e6:be:79:4f:73:40:6a:
8f:a5:be:6e:84:3e:03:9a:97:4d:18:f1:b0:e8:17:
86:ab:b9:b3:88:4f:8a:fb:3e:f5:1a:c6:32:ce:07:
04:89:3e:ae:92:20:ff:1c:0c:af:a9:ab:50:41:00:
19:55:9a:91:c2:36:21:df:8e:c9:de:5e:f0:91:68:
d7:06:48:b4:cf:59:2b:69:24:5e:b8:e6:84:7d:7d:
b7:13:ee:f5:f5:fe:d9:30:95:0e:3b:f5:58:2e:82:
b4:b0:c6:ee:58:a1:cc:97:39:09:3f:d3:6c:f5:a7:
28:f2:15:10:48:35:91:5b:d3:c3:bb:e2:90:dc:b4:
0e:c7:52:2d:32:2b:3c:d0:76:da:57:82:82:56:dd:
cb:d1:9f:8c:c9:92:97:10:0f:74:1d:5c:2c:bc:91:
3b:fd:b0:dd:4a:ad:e4:cb:93:27:e9:fb:ef:ce:19:
eb:56:a9:72:dc:1d:07:3b:82:e7:78:43:4c:6b:fa:
c1:1f:39:f4:e1:cf:8a:85:27:a1:02:68:34:56:65:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E8:34:06:76:E9:FF:03:67:4B:0E:F0:EB:ED:4F:BA:FB:F6:89:C8
X509v3 Authority Key Identifier:
keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/OOg0Bnbp_wNnSw7w6-1Puvv2icg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:dc:e2:bd:16:93:92:74:a9:7b:9e:ac:09:32:55:1d:72:c2:
2d:48:e8:16:b3:71:e0:ac:f7:30:9b:75:a5:d3:fb:2c:3e:aa:
cd:99:55:a1:fd:a7:01:b3:38:66:fc:99:b7:76:65:82:fd:49:
de:a7:ee:a8:53:76:b0:94:cb:fd:e8:e4:e8:c4:77:7b:ab:ae:
b1:dc:b2:5d:20:9a:f2:9f:3f:ca:8e:82:e0:66:5a:36:f4:68:
9e:30:2c:bc:2a:bf:67:2a:53:16:83:f8:05:eb:cd:59:f0:a7:
a6:db:ae:2b:f8:79:88:69:3e:0f:82:6a:f4:4e:2a:15:78:66:
b7:29:42:5c:24:9a:e8:5b:59:c4:c2:bc:28:64:30:3e:e4:91:
48:0a:77:53:87:10:7d:47:41:81:78:fa:04:84:40:24:0a:f4:
7d:f3:5c:98:0d:f9:79:64:af:6b:dc:bf:18:3b:88:7b:09:83:
ee:3f:17:72:7a:cf:88:56:0b:a4:dc:e4:d0:80:c4:86:84:5e:
5b:69:d4:1d:e8:27:89:7d:c0:22:57:51:ed:44:ce:d9:bd:c6:
7b:d7:fe:74:1e:7c:75:4a:0a:3d:05:03:dd:50:72:7a:9d:64:
11:cd:1b:41:eb:66:4f:85:a1:cc:cb:83:e0:34:cf:c9:7c:d0:
92:c9:da:cf
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUNE
QUIxRTFFQTYzM0JBOEFEMThBMkFDQjcyMzYwRTkyODBDNEI2MB4XDTIyMDMwMTAx
MzMwNFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMzhFODM0MDY3NkU5RkYw
MzY3NEIwRUYwRUJFRDRGQkFGQkY2ODlDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfHcxccK/Q2rgGNh9mO+qgGttE+yeXW7HGRZ9E1BXiw3Gf08ROv
MtPpwX3vxPXSMHSQUeTmvnlPc0Bqj6W+boQ+A5qXTRjxsOgXhqu5s4hPivs+9RrG
Ms4HBIk+rpIg/xwMr6mrUEEAGVWakcI2Id+Oyd5e8JFo1wZItM9ZK2kkXrjmhH19
txPu9fX+2TCVDjv1WC6CtLDG7lihzJc5CT/TbPWnKPIVEEg1kVvTw7vikNy0DsdS
LTIrPNB22leCglbdy9GfjMmSlxAPdB1cLLyRO/2w3Uqt5MuTJ+n7784Z61apctwd
BzuC53hDTGv6wR859OHPioUnoQJoNFZlRLkCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQ46DQGdun/A2dLDvDr7U+6+/aJyDAfBgNVHSMEGDAWgBSKzaseHqYzuorRiirL
cjYOkoDEtjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAwMy9pczJySGg2bU03cUswWW9xeTNJMkRwS0F4TFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pczJySGg2bU03cUswWW9xeTNJMkRw
S0F4TFkuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTAwMy9PT2cwQm5icF93Tm5Tdzd3Ni0xUHV2djJpY2cucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAygweMA0GCSqGSIb3DQEBCwUAA4IB
AQAq3OK9FpOSdKl7nqwJMlUdcsItSOgWs3HgrPcwm3Wl0/ssPqrNmVWh/acBszhm
/Jm3dmWC/Unep+6oU3awlMv96OToxHd7q66x3LJdIJrynz/KjoLgZlo29GieMCy8
Kr9nKlMWg/gF681Z8Kem264r+HmIaT4Pgmr0TioVeGa3KUJcJJroW1nEwrwoZDA+
5JFICndThxB9R0GBePoEhEAkCvR981yYDfl5ZK9r3L8YO4h7CYPuPxdyes+IVguk
3OTQgMSGhF5badQd6CeJfcAiV1HtRM7ZvcZ71/50Hnx1Sgo9BQPdUHJ6nWQRzRtB
62ZPhaHMy4PgNM/JfNCSydrP
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:49 2025 by rpki-client