![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa
File: k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa (raw, json)
Hash identifier: Q3S1XxDuMHLpcz1yC1v+l+xdyWuOd4ZkpqQOGbjYs6E=
Subject key identifier: 93:CF:B0:FB:86:97:84:5F:59:D2:2A:ED:75:22:6B:08:82:B5:16:A3
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 99
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa
Signing time: Sat 05 Jun 2021 03:47:31 +0000
ROA not before: Sat 05 Jun 2021 03:47:31 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 218.44.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:31 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=93CFB0FB8697845F59D22AED75226B0882B516A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:58:a8:26:f4:e6:aa:44:0f:d5:ed:85:af:
92:00:83:23:81:3c:d1:ec:05:1c:10:41:b6:f8:c6:
f0:11:cf:fa:68:43:25:81:3f:3a:f3:7a:ea:c8:f0:
e1:24:4f:bf:bc:68:2e:e2:9b:f7:46:c8:0e:48:c1:
cb:78:5d:6e:0d:1d:62:96:52:e3:bd:dc:d7:54:ca:
0d:74:48:5c:a7:e7:c7:02:3d:b4:c0:7c:7b:c5:56:
5a:7a:86:33:00:bd:12:d2:2e:24:df:a8:1e:0f:70:
0b:10:dc:99:64:c4:f0:28:ed:95:d8:a2:86:d6:07:
56:6e:33:57:e4:f0:4d:e8:6d:14:8e:79:d2:ae:a6:
f4:a4:e0:6d:7b:73:2d:cb:b8:ea:69:b1:49:48:26:
c3:37:47:13:fc:33:90:37:9e:e7:ac:6d:c7:aa:dc:
da:6f:2e:63:53:74:c1:6c:88:70:26:9d:8a:90:fc:
f4:0e:8e:5b:ad:24:5c:50:e0:35:8d:b8:e4:31:53:
ed:b5:13:01:47:99:5b:88:c2:84:f4:71:ef:62:5b:
d6:d8:22:85:6f:43:3f:33:5e:1c:a0:d8:d3:ad:1f:
26:4c:34:a7:ed:47:30:e0:1a:2e:8b:17:7c:40:fb:
ff:af:b6:e4:de:1a:b8:f1:8d:e4:30:89:75:d6:1e:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:B0:FB:86:97:84:5F:59:D2:2A:ED:75:22:6B:08:82:B5:16:A3
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/k8-w-4aXhF9Z0irtdSJrCIK1FqM.roa
sbgp-ipAddrBlock: critical
IPv4:
218.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:1b:06:b3:b8:0a:e0:8f:56:b7:66:3d:b6:a1:ef:5d:3e:d7:
65:ca:99:2b:9d:e7:23:3b:72:92:16:22:2c:60:c1:29:c8:96:
9e:d7:10:37:60:19:85:36:eb:91:4b:5d:86:38:09:d1:67:4d:
f3:5d:6c:0f:3e:ac:28:df:53:c0:ba:5e:a8:c8:1e:82:ed:24:
e8:10:7d:85:d2:e1:19:e6:c0:0a:f0:8c:17:d7:f9:55:27:13:
b1:5a:37:8c:16:d1:54:13:25:f9:ef:81:9c:f9:11:2e:6e:32:
ef:1d:6c:76:71:00:ed:7c:c3:d9:ae:97:33:c6:cd:ac:b8:06:
81:1c:66:95:da:54:ad:c4:0c:25:cd:c3:14:75:86:d7:c4:8c:
d5:ed:2d:a2:a3:10:45:ae:e0:fc:64:49:34:7e:96:62:0d:e3:
d4:5b:99:f0:3e:c6:21:91:73:f8:55:89:4c:7b:4c:74:e1:49:
68:07:24:2d:fe:56:d9:1c:01:6a:a9:4e:c4:5c:2b:0e:85:0a:
5a:2b:fb:80:07:ed:43:26:5c:39:1b:d3:0f:6c:82:25:70:05:
bd:6a:d0:94:cf:0d:b7:fb:e5:0a:c0:b4:71:51:db:4e:14:c9:
ae:48:ae:1e:fb:90:0d:19:6b:91:c5:f5:e6:30:fc:17:06:aa:
5a:0f:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:31 2025 by rpki-client