![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/xa4IME5e5ZrQvYjETZCUqSWsuK8.roa
File: xa4IME5e5ZrQvYjETZCUqSWsuK8.roa (raw, json)
Hash identifier: fE4MAExB+2XHaQ9jGjJWrPBAsm5j/TSAXO1rmu6yYO8=
Subject key identifier: C5:AE:08:30:4E:5E:E5:9A:D0:BD:88:C4:4D:90:94:A9:25:AC:B8:AF
Certificate issuer: /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial: 19
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/xa4IME5e5ZrQvYjETZCUqSWsuK8.roa
Signing time: Sat 01 Oct 2022 01:29:56 +0000
ROA not before: Sat 01 Oct 2022 01:29:56 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 131921
IP address blocks: 180.131.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Validity
Not Before: Oct 1 01:29:56 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=C5AE08304E5EE59AD0BD88C44D9094A925ACB8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:a6:76:c7:34:68:1a:13:13:3d:18:08:12:
81:64:ae:74:ec:6c:77:b1:98:6a:d2:55:95:bb:c7:
3c:ce:4b:d2:d5:d9:55:9c:aa:9c:af:d2:6d:12:b0:
a1:ef:3a:06:ee:bb:3a:9c:38:15:55:e5:2f:b7:ce:
18:ad:73:cc:15:87:36:ea:a8:2b:3c:99:80:ef:31:
23:57:1d:3a:00:99:27:70:9b:66:2c:bd:57:2b:83:
44:f9:49:c3:27:f7:62:83:bf:71:a6:d6:73:78:c0:
c7:fa:e2:e4:c0:a6:97:94:46:62:f7:ee:56:c0:92:
1a:0e:eb:98:71:34:c3:8b:7c:e5:19:82:ae:66:47:
c7:6e:69:b1:a3:1e:ed:da:fb:f3:23:dd:c1:91:97:
8e:77:20:40:21:73:e7:5d:77:72:67:60:5b:cf:df:
3a:be:16:80:97:e5:74:c5:aa:e4:11:bb:b0:e9:45:
6f:bd:6f:50:0d:33:b9:90:e4:6a:76:eb:f3:97:8a:
53:c9:f8:a7:5b:b3:2c:3d:08:5d:e2:f3:de:9d:f8:
d9:e1:c4:e5:78:6f:30:8c:07:f7:3e:71:17:2d:26:
c3:7d:18:71:81:99:45:d1:cb:35:36:d3:71:63:62:
d3:31:74:86:df:b9:50:fc:69:3d:37:d2:ca:00:0b:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:08:30:4E:5E:E5:9A:D0:BD:88:C4:4D:90:94:A9:25:AC:B8:AF
X509v3 Authority Key Identifier:
keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/xa4IME5e5ZrQvYjETZCUqSWsuK8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:c5:46:b3:02:e8:03:e3:f5:6a:b9:33:a8:a0:2c:d3:8a:28:
27:e3:78:a0:64:b0:0f:d9:f4:c8:10:f2:1e:6c:c1:39:77:78:
26:90:57:62:1d:2e:f2:9d:d3:05:2d:56:b5:cb:81:2a:b3:c4:
44:1e:e3:94:63:db:61:6f:f1:d3:7a:48:63:ab:15:24:0e:7d:
05:b0:de:4e:af:13:1b:dc:b6:86:3d:01:5b:0f:0b:db:12:a2:
ac:6d:17:98:e2:57:e9:b9:64:a8:23:c0:56:fc:c5:69:c4:ca:
75:2f:ae:11:3b:b0:9a:a6:c5:4f:01:09:53:22:48:d6:56:e9:
00:e4:c4:e9:ad:38:7c:cf:3e:f4:1b:b8:ca:42:51:04:77:a2:
df:64:f3:0a:24:25:d2:38:8c:54:54:3d:c8:53:eb:73:ee:19:
97:d7:90:0e:3f:d0:f4:ed:be:c6:81:bf:f1:8c:14:66:4a:fd:
39:8a:08:d4:67:b6:01:89:62:c5:a6:48:f1:16:b8:8d:da:0d:
1c:8d:1a:0b:57:8c:2a:c6:d9:fc:95:8d:5f:99:26:6e:9c:64:
ff:de:01:fe:e1:38:15:32:0e:ae:71:bd:a8:6c:79:0d:e7:db:
a1:83:bc:e4:5f:9b:fe:47:f5:47:bc:e4:89:b8:3a:e4:7f:5c:
9d:67:e4:15
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QTY1
REIyMjI5OTYzRURFRkVBOUE0MTJCNTczMUVBM0M1MDdFNzE0MB4XDTIyMTAwMTAx
Mjk1NloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQzVBRTA4MzA0RTVFRTU5
QUQwQkQ4OEM0NEQ5MDk0QTkyNUFDQjhBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN0rpnbHNGgaExM9GAgSgWSudOxsd7GYatJVlbvHPM5L0tXZVZyq
nK/SbRKwoe86Bu67Opw4FVXlL7fOGK1zzBWHNuqoKzyZgO8xI1cdOgCZJ3CbZiy9
VyuDRPlJwyf3YoO/cabWc3jAx/ri5MCml5RGYvfuVsCSGg7rmHE0w4t85RmCrmZH
x25psaMe7dr78yPdwZGXjncgQCFz5113cmdgW8/fOr4WgJfldMWq5BG7sOlFb71v
UA0zuZDkanbr85eKU8n4p1uzLD0IXeLz3p342eHE5XhvMIwH9z5xFy0mw30YcYGZ
RdHLNTbTcWNi0zF0ht+5UPxpPTfSygALjnUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTFrggwTl7lmtC9iMRNkJSpJay4rzAfBgNVHSMEGDAWgBRKZdsiKZY+3v6ppBK1
cx6jxQfnFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA5NjYvU21YYklpbVdQdDctcWFRU3RYTWVvOFVINXhRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU21YYklpbVdQdDctcWFRU3RYTWVv
OFVINXhRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwOTY2L3hhNElNRTVlNVpyUXZZakVUWkNVcVNXc3VLOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAO0g4gwDQYJKoZIhvcNAQELBQADggEBAKzFRrMC6APj9Wq5M6igLNOK
KCfjeKBksA/Z9MgQ8h5swTl3eCaQV2IdLvKd0wUtVrXLgSqzxEQe45Rj22Fv8dN6
SGOrFSQOfQWw3k6vExvctoY9AVsPC9sSoqxtF5jiV+m5ZKgjwFb8xWnEynUvrhE7
sJqmxU8BCVMiSNZW6QDkxOmtOHzPPvQbuMpCUQR3ot9k8wokJdI4jFRUPchT63Pu
GZfXkA4/0PTtvsaBv/GMFGZK/TmKCNRntgGJYsWmSPEWuI3aDRyNGgtXjCrG2fyV
jV+ZJm6cZP/eAf7hOBUyDq5xvahseQ3n26GDvORfm/5H9Ue85Im4OuR/XJ1n5BU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:29 2025 by rpki-client