![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa
File: 5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa (raw, json)
Hash identifier: J4lmatPKNVkfTqFNY/gnSXSsZXjbTgV0G/5cW8ZJLKc=
Subject key identifier: E5:CE:54:10:7E:C3:43:08:97:34:D5:92:E0:B6:64:35:9D:6E:2F:C3
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 6D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa
Signing time: Sat 08 May 2021 04:05:39 +0000
ROA not before: Sat 08 May 2021 04:05:39 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 203.140.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:39 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=E5CE54107EC343089734D592E0B664359D6E2FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:a6:2c:7c:71:56:c0:2d:ff:be:a2:1e:4a:
b5:7a:1a:98:67:0b:5a:c6:54:24:35:66:7c:8f:1e:
f6:b1:ff:9c:5a:2b:e6:00:b6:21:5b:8c:4f:90:3f:
0a:62:d7:fa:62:72:b3:6b:a3:69:8a:7c:62:49:7b:
47:47:ea:f5:f1:01:31:cf:98:1c:4a:cb:75:d7:98:
85:68:5d:95:93:87:9f:ab:8b:e0:7c:80:52:5c:91:
c9:84:3f:0c:8f:3d:1d:26:06:e9:cf:d2:16:0a:88:
b5:5f:68:86:b4:bf:57:79:91:8d:54:51:bb:ce:0f:
92:90:52:cc:f6:b0:68:2a:b5:ab:e2:1f:15:ec:79:
4f:3a:5e:ea:ae:65:f9:61:c3:6d:30:cb:44:90:8c:
0e:d2:41:08:76:b5:9e:6c:4c:d9:f2:f2:70:16:35:
b6:5b:5c:dd:e9:0e:00:6a:9d:bd:1f:db:7e:e3:ae:
3a:50:b6:77:7e:3f:56:77:50:2a:dd:17:c4:cd:f9:
fc:7c:50:12:f9:a6:f9:3d:54:a7:88:54:e1:62:c5:
8d:ce:a7:45:00:70:0d:c1:03:b7:42:cd:02:49:0b:
51:66:47:bf:2e:a0:f4:23:79:03:c9:72:3b:32:a7:
9e:b9:7a:b0:55:78:3c:c6:25:9f:5c:4d:ed:56:d7:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:54:10:7E:C3:43:08:97:34:D5:92:E0:B6:64:35:9D:6E:2F:C3
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa
sbgp-ipAddrBlock: critical
IPv4:
203.140.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:6b:0d:63:fd:b6:f8:48:a4:37:31:ef:63:cd:89:30:e7:6a:
18:fc:99:9b:86:bb:e5:0a:9c:be:33:0b:c6:dd:a2:fa:bd:58:
ef:fb:aa:f0:78:0c:1d:86:0c:fe:35:b6:f8:aa:65:36:fc:60:
d7:50:da:b3:44:5b:19:1e:f9:10:8b:59:89:50:36:de:1c:be:
d3:11:d4:31:91:d7:5c:55:9a:70:1e:84:d1:dc:dd:76:be:61:
eb:55:18:30:12:a1:23:78:2f:c9:09:37:96:34:54:d6:e4:3d:
9f:9e:f3:01:b3:b5:02:34:e2:7d:dc:b8:6c:85:c6:32:5a:66:
98:0e:99:18:b2:35:25:0c:ef:7e:fb:4f:bc:d5:c4:8c:f1:8b:
a0:05:c1:eb:d9:80:ba:59:ab:0c:61:c7:20:35:74:16:87:18:
9e:4e:e8:d6:8e:c2:ce:af:87:11:a2:9c:1f:c7:39:6c:16:4e:
83:58:d2:04:31:61:3b:f4:a8:39:9e:d5:7b:1e:9e:95:38:1e:
f5:03:0d:d5:dd:4f:8b:8a:d8:c6:db:50:70:e1:65:76:c0:8d:
cc:5c:be:1b:fe:b6:b0:3c:35:c6:a1:45:e4:21:48:9d:c1:ce:
55:18:b3:83:8e:90:0e:24:e1:2a:89:48:ed:3e:11:56:c0:b5:
07:e3:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:34 2025 by rpki-client