![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
File: Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa (raw, json)
Hash identifier: xxnVi7btytbQJn5U2VWyrC/aRUGFGIoLSVxlqwqiD/0=
Subject key identifier: 5B:07:BD:92:BF:A4:69:8A:B5:5C:96:E1:13:EC:EE:6B:19:37:68:A7
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 38
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
Signing time: Sat 01 Jul 2023 01:28:15 +0000
ROA not before: Sat 01 Jul 2023 01:28:15 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24295
IP address blocks: 103.28.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Jul 1 01:28:15 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=5B07BD92BFA4698AB55C96E113ECEE6B193768A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:43:d0:09:6e:d3:28:c0:b2:cb:5a:96:bf:
71:9f:f2:60:64:71:18:ca:9c:f8:4f:e5:93:26:9d:
4c:da:c6:dd:fd:43:21:63:51:79:51:4a:2f:bb:9f:
27:e7:58:e7:3d:bf:71:e8:58:b5:6c:6e:f9:53:f1:
5e:38:d7:c9:62:82:07:48:8f:62:37:35:ad:7a:f3:
15:53:52:9b:f3:5e:e1:e1:d7:ee:f8:3d:5b:b2:f3:
89:d6:bc:2c:78:d3:e9:20:66:b9:60:57:2e:d5:d8:
42:eb:0c:95:93:46:66:c9:6d:fd:d0:d4:c4:70:00:
bf:16:49:0f:51:96:de:8e:ac:55:08:ec:bd:68:cd:
a3:73:6c:02:c2:58:09:23:ac:b6:51:e9:9c:30:1b:
82:32:e0:04:5b:0a:5e:23:5d:4d:8c:5a:10:ce:1e:
58:17:77:83:50:3e:e3:8f:9b:7b:27:f9:34:36:41:
2e:82:82:8e:8d:06:44:0e:fb:90:26:25:d6:d1:00:
26:b2:ca:a1:54:14:74:27:ec:46:19:88:f1:e6:a6:
17:ec:94:bd:a9:94:53:fb:c6:d5:ae:21:d1:1c:3c:
aa:51:84:2d:0a:d5:58:e4:7d:23:a5:c8:57:0d:e3:
b2:9e:34:2f:34:81:f9:19:fd:39:85:b3:5c:4b:f2:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:BD:92:BF:A4:69:8A:B5:5C:96:E1:13:EC:EE:6B:19:37:68:A7
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.24.0/22
Signature Algorithm: sha256WithRSAEncryption
29:6d:df:7c:e0:fb:b8:ad:7b:c9:52:ca:d2:9c:0c:b3:ce:2f:
15:8d:ec:d0:56:27:32:1f:8e:d3:40:78:46:8f:14:8e:0d:ea:
1c:19:d6:d0:e2:e3:a0:c4:95:0a:7a:e5:90:06:68:ef:38:6a:
bc:d7:ff:2e:42:7f:da:83:21:90:37:c7:7f:2d:49:91:ca:66:
18:df:eb:e0:ab:8d:ab:aa:9b:61:64:f4:e9:08:64:05:8c:9f:
97:11:6e:3c:07:b5:e3:b0:50:4b:b9:2d:11:16:c9:d5:36:d6:
c2:be:a1:1d:5a:77:85:ae:67:95:2f:c4:2a:7d:96:3e:90:4f:
48:cf:9c:6d:6a:98:09:f8:bf:91:de:4e:ce:4b:c7:34:6f:4e:
e4:77:34:b4:c0:4c:e5:73:00:ea:42:cf:65:3b:37:94:c7:44:
3d:59:2c:3d:52:01:c3:85:36:fe:53:99:b0:10:9c:49:99:dc:
a9:a8:e8:b3:e1:7e:90:e5:c5:a1:3f:22:7a:f8:16:10:b9:e2:
f2:e8:7d:1b:b5:b3:8c:e7:f7:bc:64:cf:5a:f1:f9:66:8f:2c:
e2:ec:c9:9a:0c:eb:9d:87:11:c2:05:c7:f3:02:32:b3:e0:f3:
ff:4a:95:c7:0a:be:4d:36:a8:45:8c:ba:b0:f8:fb:71:58:dc:
e8:29:c4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:13 2025 by rpki-client