![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
File: 2GEcPdassmTG4Gd05C1kh_dFjk4.roa (raw, json)
Hash identifier: 1LicF5yr6VyLbv9BdehBkA0lV2wJnsd4gLkoofM0YiQ=
Subject key identifier: D8:61:1C:3D:D6:AC:B2:64:C6:E0:67:74:E4:2D:64:87:F7:45:8E:4E
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01BC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
Signing time: Wed 01 Nov 2023 01:29:20 +0000
ROA not before: Wed 01 Nov 2023 01:29:20 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 182.163.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:29:20 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=D8611C3DD6ACB264C6E06774E42D6487F7458E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:15:fd:30:06:bd:5b:2f:3b:48:b2:dc:ca:
a0:45:45:e2:bc:53:25:66:3e:11:84:da:84:d4:2f:
08:cd:0b:d4:de:47:e3:2a:d7:04:81:b4:90:8a:eb:
da:c1:3b:fb:d5:84:14:90:b1:be:39:e5:86:6a:e2:
2d:f9:53:85:07:83:4f:1b:2e:e0:aa:cd:af:89:20:
69:23:67:1b:7e:76:20:28:be:aa:d8:2a:5b:99:af:
20:e4:b1:66:a7:15:35:fa:20:ce:0c:ce:cd:55:70:
46:46:bc:7d:59:ee:83:be:ac:14:c1:ee:1f:8b:90:
1a:ab:25:88:55:41:22:24:35:73:01:47:a9:22:b0:
31:5d:cd:8f:87:4f:5a:ba:54:6f:0f:bb:e3:95:69:
a9:7e:32:5e:28:9a:49:ce:8a:e6:48:2d:54:64:e6:
a9:50:2a:da:2d:bc:5b:51:cc:86:d1:17:a9:02:e5:
ab:f7:af:aa:ee:6a:0c:5a:e6:79:b3:2d:15:71:2b:
51:04:59:b7:c5:e4:c1:a9:f8:dc:5d:26:2b:7a:89:
78:47:3e:4c:e1:f8:ed:81:02:ea:d8:d1:94:13:65:
92:96:99:cb:38:a8:ad:35:c3:04:3f:56:4e:e9:d5:
66:1d:c4:8f:b0:f2:7e:61:e6:ba:ca:bb:10:2d:68:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:1C:3D:D6:AC:B2:64:C6:E0:67:74:E4:2D:64:87:F7:45:8E:4E
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.163.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c3:24:62:7b:21:b7:4f:a3:9a:a0:4b:3e:02:d1:10:4e:01:2e:
44:c7:86:8a:77:66:3c:c8:9e:f1:1f:cd:9c:dc:b1:6d:ef:71:
fc:4a:7e:1b:26:e4:f4:b0:31:b7:ff:e9:1b:5c:dc:11:12:fa:
d6:18:90:62:e4:a8:10:74:7f:d0:5a:65:f5:e2:9c:5d:92:49:
38:64:81:f6:27:d9:d2:cd:cb:0d:96:b6:92:6d:78:6b:6a:6f:
62:97:fb:69:04:9f:3a:58:dd:db:b2:51:1d:b0:47:40:26:f7:
5f:61:8a:b2:bf:97:be:df:a6:c9:fd:4f:81:7d:65:a4:36:21:
19:67:6a:3c:10:4f:41:b5:6c:17:fa:5d:69:6e:6c:8a:3d:6b:
d9:2d:f1:7b:c0:c9:02:c1:b2:2e:88:21:c7:28:1f:b2:de:10:
de:91:09:6b:eb:22:13:1d:36:dd:2c:7c:4c:34:6d:dc:d5:ac:
99:a0:f1:bf:60:35:77:82:a3:47:17:e0:54:c6:ff:90:59:5d:
08:59:e1:d4:2d:07:d3:64:54:d3:39:07:8b:fe:7b:02:b7:bb:
71:9a:5b:ed:92:8b:17:6b:d3:38:af:cb:90:9c:f3:38:bc:e0:
57:4d:ba:69:fa:f3:b7:32:25:3d:c4:b0:fe:69:3d:c4:78:49:
81:ed:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:43 2025 by rpki-client