![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
File: qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa (raw, json)
Hash identifier: 2Z5GtcSmNxWkSaS5C6oGAVA3/UGdAs+poADwRQ4R4M8=
Subject key identifier: A8:74:3B:66:43:86:82:26:7D:95:AB:5F:59:91:7E:81:EF:A1:67:F8
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 49
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
Signing time: Thu 13 Apr 2023 09:52:37 +0000
ROA not before: Thu 13 Apr 2023 09:52:37 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 55391
IP address blocks: 217.178.0.0/16 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Apr 13 09:52:37 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A8743B66438682267D95AB5F59917E81EFA167F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:75:93:f1:1e:29:24:68:f7:3a:00:84:6e:
4b:3a:1f:c1:a7:fd:8a:2b:df:8f:a6:1d:a3:7d:d7:
56:35:a9:39:83:43:15:a3:30:fe:de:b5:b2:63:e4:
32:66:88:76:f0:ed:0e:5f:e6:36:28:5d:39:41:ca:
0d:50:00:c8:81:6d:b2:1b:98:35:a1:a5:46:1b:13:
b8:d7:dc:d9:27:ef:67:82:42:5a:8c:26:cc:46:64:
8d:a0:96:ed:2c:53:21:67:4e:41:a4:e8:45:1a:71:
14:b0:9b:b0:3f:81:7c:b0:4c:82:b4:1f:8f:79:9c:
4f:90:46:ae:58:3c:bc:c1:d5:2c:72:a2:8e:30:9c:
1a:be:a0:a9:ee:40:84:22:d9:b3:0b:a0:99:56:e6:
fa:8e:83:af:34:60:9c:9b:ab:f7:8f:64:88:5c:f8:
49:92:f7:d5:55:28:3a:6c:d8:d1:27:1c:cd:24:1d:
4d:1e:24:92:38:7e:f5:ed:6a:db:4b:7a:c4:47:8c:
47:45:5a:8c:48:40:1e:f4:30:f6:58:22:2a:a0:d8:
66:ca:56:f0:38:b8:54:86:2f:a4:c0:88:61:e6:6a:
fe:13:b0:08:c0:49:c0:32:8f:06:3d:ce:fe:05:fb:
90:de:84:06:9e:9b:61:0f:00:44:d2:18:30:df:71:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:3B:66:43:86:82:26:7D:95:AB:5F:59:91:7E:81:EF:A1:67:F8
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/qHQ7ZkOGgiZ9latfWZF-ge-hZ_g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:b9:b2:3a:a4:9d:32:8d:11:4c:71:06:ff:31:aa:23:1a:0f:
84:5f:b5:28:64:8c:84:a9:5b:a7:b7:08:92:9a:79:27:37:50:
37:84:94:8f:e8:49:d2:af:b9:4c:71:63:a2:82:05:62:12:31:
3e:8c:dd:c1:d5:c8:9d:2f:4a:3e:ca:fc:15:53:c3:3f:bd:59:
a6:24:f1:69:e6:0d:61:c3:a5:c5:5d:b3:4a:7b:51:95:16:53:
52:87:1a:70:3c:15:0c:57:02:d5:f8:99:49:3f:fa:c3:b5:aa:
f0:fc:ee:69:ce:04:df:71:e8:20:64:52:c7:f0:08:69:ef:fe:
99:0c:59:f6:d7:49:ba:9e:16:35:21:36:16:3a:21:c0:ed:15:
a8:9c:e5:0e:d4:fa:1a:dc:64:1c:84:e0:b3:bb:73:69:8e:a8:
d5:fd:8d:4d:c2:d9:df:c4:be:27:21:88:5a:89:96:bf:fb:c0:
55:22:c5:d1:26:e4:e5:41:42:ad:01:26:f2:0c:1c:40:e0:fb:
4e:54:03:f8:81:c0:6c:9e:3c:82:38:6a:c7:ee:e4:29:4f:57:
a1:82:06:16:5f:3b:b2:88:4c:e0:0b:9b:9d:62:9a:bc:34:0d:
8c:5b:e4:40:c5:a9:e2:fe:df:80:eb:97:f8:35:3f:af:ba:a4:
74:0e:8c:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:30 2025 by rpki-client