![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
File: djpHi6jC01c_zorYnpZbwrLCKio.roa (raw, json)
Hash identifier: kR/rl5GM0UmRbPReoFZeO4evYDb6odrVQQeuO1xTaeU=
Subject key identifier: 76:3A:47:8B:A8:C2:D3:57:3F:CE:8A:D8:9E:96:5B:C2:B2:C2:2A:2A
Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial: 28
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
Signing time: Sun 01 Oct 2023 01:29:54 +0000
ROA not before: Sun 01 Oct 2023 01:29:54 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 146987
IP address blocks: 157.120.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Validity
Not Before: Oct 1 01:29:54 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=763A478BA8C2D3573FCE8AD89E965BC2B2C22A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:d0:15:c3:cc:d2:bd:55:47:17:f5:9f:04:
b3:7b:2c:a4:fb:ec:0d:5a:4d:be:1a:79:ac:96:26:
37:e6:fd:6b:03:25:66:df:49:61:84:9f:2b:cc:eb:
b5:98:97:dd:6c:c0:92:d7:57:51:00:0a:90:f8:46:
d2:ee:d9:64:f7:65:2f:fc:19:4c:ec:ff:8d:ba:45:
52:8c:36:0c:c7:45:87:5e:b8:8e:a0:a8:98:48:eb:
0b:42:8f:67:1a:73:3a:2b:24:e7:4f:a2:c5:12:44:
71:fa:3b:ec:8e:29:5b:49:42:53:3d:a9:4b:9e:bf:
91:01:5f:10:15:20:69:cb:d0:2c:c8:a3:2f:aa:89:
72:01:2e:7c:c0:47:f2:ec:59:eb:25:cd:bd:a4:15:
16:85:e4:ef:6f:df:ef:b5:d7:79:00:e8:a0:59:14:
0e:15:3a:21:d0:5f:90:07:5d:20:9b:cc:f4:bc:6d:
3f:57:14:2d:d4:b5:8b:60:62:c8:1c:3e:4e:9d:f1:
ec:97:f8:51:85:07:16:3b:94:3f:1f:e5:28:92:4f:
fc:cd:d5:53:32:88:3e:28:fe:fc:66:9c:e8:f0:79:
69:9a:3d:0a:fc:bc:0b:bf:ae:5e:e0:2f:20:6c:47:
a5:cc:af:1d:1a:00:78:14:72:b2:bc:bf:72:a6:31:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3A:47:8B:A8:C2:D3:57:3F:CE:8A:D8:9E:96:5B:C2:B2:C2:2A:2A
X509v3 Authority Key Identifier:
keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.120.112.0/24
Signature Algorithm: sha256WithRSAEncryption
02:37:1c:69:7b:dd:11:ab:ec:97:78:85:8d:1a:38:76:db:21:
d3:98:8d:b4:99:99:f7:f8:2a:b2:c4:aa:be:c6:59:01:23:de:
fc:48:9d:c6:13:ff:c6:8a:fb:db:86:18:76:58:ab:0e:69:e5:
c6:b7:d3:ba:25:2a:39:89:5e:d4:f8:10:50:7b:77:8d:51:fe:
8d:77:7c:8c:3c:43:62:46:f9:67:59:da:ff:9b:5f:9c:90:b2:
e4:93:4f:42:68:09:43:bf:14:12:50:30:c8:9e:9d:f5:b2:e5:
49:ba:73:c0:96:16:54:0d:28:b5:a4:6c:38:a5:d5:e3:10:25:
f3:cc:29:0e:75:93:df:f4:a2:4b:c8:64:9c:f6:47:84:df:4f:
75:ca:ad:35:de:a6:e2:c3:a7:7c:6c:78:49:17:3a:90:60:54:
e5:61:64:38:bc:d6:9b:05:05:e1:11:b9:b7:4b:22:80:7d:f7:
c5:89:41:b8:b8:31:40:50:2e:e7:d4:45:da:27:ba:96:0a:17:
d4:00:72:3f:f4:e4:12:9b:ae:45:ad:ce:59:45:1f:b8:d8:a9:
bf:9e:0e:37:1e:c7:fc:79:67:c4:4d:7c:a7:48:ce:7c:cf:3e:
fe:99:e3:05:f2:9e:89:13:ee:c3:53:c4:67:8f:cb:ba:a1:9e:
dd:1e:78:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:41 2025 by rpki-client