![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
File: GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa (raw, json)
Hash identifier: 91JVLSq5v/et2QtQaUR1bp7TWjFDoDiAhgz/ixRbcP8=
Subject key identifier: 18:0A:06:F8:B4:3B:54:7E:6E:5C:C0:1E:7A:5E:C9:39:2E:8F:2F:7A
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01B8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
Signing time: Wed 01 Nov 2023 01:29:18 +0000
ROA not before: Wed 01 Nov 2023 01:29:18 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 112.78.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:29:18 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=180A06F8B43B547E6E5CC01E7A5EC9392E8F2F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:c9:b4:7b:1e:79:cd:f4:52:38:c9:5c:93:
a8:a6:31:63:86:44:10:2f:f6:50:67:64:be:18:61:
ac:c5:93:b6:b6:ee:37:64:c7:a0:4e:a5:ee:0e:19:
5d:7e:8b:3d:16:3c:fa:a7:71:72:85:39:f4:bd:68:
50:e1:b2:99:f9:de:24:28:3e:17:fa:5f:ed:c0:3e:
75:42:95:2d:f4:09:d9:95:19:a7:e9:f8:d8:6f:0c:
82:4f:53:52:65:40:51:b6:e0:26:34:ad:75:70:49:
8a:9d:5c:de:94:a8:18:fa:81:e0:82:ed:e4:97:a7:
3c:ee:db:a7:f7:cf:84:d6:e9:ce:0e:a3:58:c8:b4:
f9:47:25:b9:d1:c3:83:b7:3e:76:6a:0d:51:5b:e7:
da:4e:e8:85:70:69:80:1b:2f:4d:fc:b2:25:fa:fd:
9f:ff:b0:4f:e9:27:91:54:a8:17:6e:81:b8:5d:02:
33:30:eb:14:81:88:8a:8e:a7:69:31:e1:6c:03:b1:
40:cb:1f:e7:a6:a4:6d:d2:df:31:7e:75:5f:eb:65:
86:21:7e:2b:c2:b7:25:54:04:68:21:4e:a5:11:ef:
79:2c:7b:f5:46:67:80:bd:84:ce:e3:86:69:c5:f8:
aa:cd:5e:16:9a:ed:bd:16:b2:13:e0:ea:17:92:f5:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:06:F8:B4:3B:54:7E:6E:5C:C0:1E:7A:5E:C9:39:2E:8F:2F:7A
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.112.0/20
Signature Algorithm: sha256WithRSAEncryption
83:fe:e3:07:a9:34:e0:a7:46:d6:f3:3a:26:3d:3a:9b:da:d8:
03:53:d3:8f:ee:ee:d2:01:81:e8:8b:95:7a:c4:15:ac:53:69:
4f:19:0f:00:a7:25:25:a4:08:40:a7:4a:32:8e:4d:26:5d:4e:
8f:4b:a2:22:08:73:89:e1:06:ac:1e:15:ab:e1:4f:3b:fb:3f:
d3:24:82:5a:f5:fa:ba:64:5d:bd:9a:6d:b1:ae:2a:15:d3:75:
97:0f:05:4f:50:1f:59:97:9f:b6:9d:d0:29:94:e5:f3:69:9b:
d7:ec:83:d8:5c:2f:09:4a:48:67:9c:f6:81:53:2d:76:77:b6:
f3:9b:e0:24:59:1a:81:90:a6:44:01:51:22:ce:03:4c:71:f6:
ac:95:2b:a9:c8:2e:c0:b2:6b:9f:4c:f7:bb:b7:56:5b:82:da:
01:11:07:36:f9:95:60:2a:19:5a:cc:08:65:8b:82:b1:31:b0:
29:8a:47:11:90:0e:e5:33:f2:d8:09:62:c7:7c:89:f0:b2:4c:
a5:08:d3:53:b5:aa:88:f5:77:49:86:7f:70:4f:e3:b3:10:9f:
a6:c1:46:ab:52:08:17:83:56:b7:d9:f2:27:5c:be:e6:75:55:
f0:9b:c8:07:c6:49:dd:15:67:50:1b:78:96:63:d8:62:3d:13:
7e:1c:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:41 2025 by rpki-client