![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa
File: LqmgvDuwW6r09ROQO1bcLoDz2wU.roa (raw, json)
Hash identifier: L/RawMudodFMFA0auwF4p+mN1luGFHA+ODXOLa7Q6d8=
Subject key identifier: 2E:A9:A0:BC:3B:B0:5B:AA:F4:F5:13:90:3B:56:DC:2E:80:F3:DB:05
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: B6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa
Signing time: Fri 01 Apr 2022 01:28:11 +0000
ROA not before: Fri 01 Apr 2022 01:28:11 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 211.129.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:11 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=2EA9A0BC3BB05BAAF4F513903B56DC2E80F3DB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:6d:c8:b8:41:65:55:31:e0:95:bd:92:00:
a8:67:00:78:b8:c5:d7:c3:9e:78:d1:d1:db:dd:ba:
ea:9a:bc:1a:a7:5a:66:c8:e4:2c:4e:5e:42:50:11:
ee:82:1f:1b:73:2b:c6:04:f7:bd:a1:b7:5b:f9:44:
c0:e5:32:4e:9f:cf:fb:54:8e:54:62:10:94:2b:37:
c0:57:48:04:9c:ae:33:71:17:13:ff:c3:ad:75:bc:
cc:8d:fc:e9:55:24:86:5c:7c:1d:c6:57:6c:83:21:
23:63:4f:c1:09:c3:77:8e:5e:5f:8c:d7:1b:04:ea:
78:49:4d:80:a3:29:a7:b8:38:b5:e0:ee:26:e8:a3:
47:c3:45:dc:af:36:b2:4c:8e:18:71:fd:7f:b3:a2:
93:c2:bb:ce:59:aa:02:d6:1b:40:c3:b2:92:93:5e:
09:61:a9:d4:ae:12:a2:33:b4:95:d4:13:4c:ce:71:
e2:bb:9a:65:19:7d:30:fa:09:73:5f:c7:61:16:20:
02:4a:e6:31:f3:28:e3:3e:43:b4:90:38:db:f5:fb:
d5:c0:d9:48:3b:f5:70:ed:59:c8:05:14:51:0d:3e:
21:44:a8:48:94:05:e8:c2:af:74:09:41:1a:c1:43:
aa:33:29:b3:36:7e:fe:fb:24:8c:64:6a:b0:92:b8:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:A0:BC:3B:B0:5B:AA:F4:F5:13:90:3B:56:DC:2E:80:F3:DB:05
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LqmgvDuwW6r09ROQO1bcLoDz2wU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:11:6d:ac:90:5f:2e:b1:c4:31:c1:5c:6b:f2:da:b7:af:87:
75:60:df:17:40:b4:65:96:cc:f0:e8:2b:0d:dd:55:a5:7b:63:
78:3e:84:6e:0a:03:33:9d:ac:91:d7:26:85:f8:32:29:13:cf:
7f:b2:fa:ea:a4:d4:5e:b8:d8:dd:d9:e4:9c:27:2a:ab:59:1e:
0b:de:82:34:32:c4:83:15:33:ab:4f:74:7c:90:83:46:10:ca:
cd:7c:d9:8e:ab:45:1c:c8:51:3e:51:b3:3b:e2:14:62:f1:51:
05:44:0e:61:93:8e:51:34:b9:c7:b4:e0:20:9a:05:54:82:4e:
b3:e3:0a:3a:50:d3:5f:47:ad:6b:c0:14:67:9a:5d:e8:c7:31:
6f:be:d7:f3:0c:2e:19:70:0c:97:dd:e5:92:a3:91:e7:14:66:
b0:16:b7:f0:a6:3e:8c:af:fa:f2:6d:7c:d0:24:25:f3:60:21:
75:84:45:1d:3d:f8:6f:c5:03:52:d8:5e:b2:50:c0:42:46:9f:
b8:05:5a:e5:07:d2:84:cd:bd:cb:ba:56:6f:bc:cb:19:d3:9d:
e5:e4:3f:a7:6f:41:aa:fb:d0:e0:ad:3c:ee:9c:bd:bf:9c:76:
fa:50:44:07:66:60:04:2b:0a:eb:d5:e8:c6:ee:8d:e0:12:e9:
4a:82:39:52
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTFaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDJFQTlBMEJDM0JCMDVC
QUFGNEY1MTM5MDNCNTZEQzJFODBGM0RCMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAnm3IuEFlVTHglb2SAKhnAHi4xdfDnnjR0dvduuqavBqnWmbI
5CxOXkJQEe6CHxtzK8YE972ht1v5RMDlMk6fz/tUjlRiEJQrN8BXSAScrjNxFxP/
w611vMyN/OlVJIZcfB3GV2yDISNjT8EJw3eOXl+M1xsE6nhJTYCjKae4OLXg7ibo
o0fDRdyvNrJMjhhx/X+zopPCu85ZqgLWG0DDspKTXglhqdSuEqIztJXUE0zOceK7
mmUZfTD6CXNfx2EWIAJK5jHzKOM+Q7SQONv1+9XA2Ug79XDtWcgFFFENPiFEqEiU
BejCr3QJQRrBQ6ozKbM2fv77JIxkarCSuF7rAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQULqmgvDuwW6r09ROQO1bcLoDz2wUwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL0xxbWd2RHV3VzZyMDlST1FPMWJjTG9EejJ3VS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTgTANBgkqhkiG9w0BAQsFAAOCAQEA
FxFtrJBfLrHEMcFca/Lat6+HdWDfF0C0ZZbM8OgrDd1VpXtjeD6EbgoDM52skdcm
hfgyKRPPf7L66qTUXrjY3dnknCcqq1keC96CNDLEgxUzq090fJCDRhDKzXzZjqtF
HMhRPlGzO+IUYvFRBUQOYZOOUTS5x7TgIJoFVIJOs+MKOlDTX0eta8AUZ5pd6Mcx
b77X8wwuGXAMl93lkqOR5xRmsBa38KY+jK/68m180CQl82AhdYRFHT34b8UDUthe
slDAQkafuAVa5QfShM29y7pWb7zLGdOd5eQ/p29BqvvQ4K087py9v5x2+lBEB2Zg
BCsK69Xoxu6N4BLpSoI5Ug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:04 2025 by rpki-client