![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
File: 2H6g5qFuIS04rdGvA7XRbGIyNN8.roa (raw, json)
Hash identifier: UUz7cVAIxnD5o+fwbXP5fWxX49yF0Er7M9XbnVwqn90=
Subject key identifier: D8:7E:A0:E6:A1:6E:21:2D:38:AD:D1:AF:03:B5:D1:6C:62:32:34:DF
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0199
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
Signing time: Mon 01 May 2023 01:30:33 +0000
ROA not before: Mon 01 May 2023 01:30:33 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 121.106.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:30:33 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=D87EA0E6A16E212D38ADD1AF03B5D16C623234DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:a7:78:65:72:7c:3c:e3:79:d7:60:60:34:
f5:c7:2f:81:5a:60:8e:6f:33:a4:23:3f:0e:01:88:
ce:58:ad:90:a6:5d:0e:95:0e:1e:1f:ac:bf:b5:a5:
71:05:bb:7f:a9:7e:c5:75:8a:16:be:24:55:46:72:
d2:64:2b:8b:6e:c4:85:42:6d:9b:14:09:41:2f:7a:
9b:a6:d9:7b:13:a9:7b:b0:f3:dd:9e:db:ac:b4:ec:
cc:26:91:c2:b1:08:1e:d6:e4:93:0c:a0:19:f6:ed:
61:45:d7:82:cc:9c:c5:d2:09:f5:ad:fc:c2:22:5b:
48:a1:63:ef:45:68:9c:d1:20:3a:7b:ec:76:14:b8:
40:4a:2f:ef:26:29:52:d3:f2:4c:3f:49:8d:17:37:
42:1e:8e:b7:b1:e0:82:03:d1:eb:a1:0b:21:27:bd:
0d:42:3b:ed:7b:9d:f2:90:b8:91:6b:91:92:1d:eb:
a2:f8:ad:1f:de:aa:a5:73:34:0c:8c:e4:00:ef:28:
ce:fc:51:22:e6:0c:8c:e6:d1:ea:c1:ea:99:e5:21:
d5:0c:93:d6:68:f6:cb:0e:a1:ab:05:8a:e8:50:3e:
8e:c7:24:8c:a2:61:fd:30:60:bc:65:f7:dd:5c:30:
8b:ba:8b:10:85:2d:e8:cf:17:f7:ca:0c:29:64:13:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:A0:E6:A1:6E:21:2D:38:AD:D1:AF:03:B5:D1:6C:62:32:34:DF
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.106.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:76:4c:42:68:31:47:50:3d:af:ba:73:8d:1f:7e:a7:ce:f5:
57:55:6a:d4:65:3e:84:fa:57:0f:92:f2:11:41:35:b7:db:a2:
6a:a8:21:be:f6:7a:02:6e:26:42:e7:a3:f8:cc:5b:29:4b:db:
94:e3:22:be:c7:e9:f7:13:2a:e0:c1:4d:cf:34:22:88:7a:c8:
55:26:c6:c0:ba:2a:f9:7a:0d:02:de:db:9a:13:96:06:58:e7:
51:6a:d1:73:7b:18:18:81:8a:04:ea:28:27:66:96:67:5e:e7:
71:88:6e:1b:9f:6d:65:77:dc:d0:cb:0e:9f:91:38:78:b6:fc:
a6:d3:ba:b6:05:e2:50:59:bb:8f:de:2f:aa:ce:da:85:c6:41:
0f:ef:27:d3:af:a2:42:41:42:01:a0:8c:7a:12:ae:ea:47:9b:
30:74:67:ea:4b:ca:87:c4:43:42:28:89:18:10:5f:fc:14:67:
b0:75:fd:9a:bd:2e:e2:fb:df:f8:40:cb:a5:2d:ba:a4:8d:8f:
67:4c:a7:4b:b1:7a:aa:b7:67:cb:24:a6:54:61:e9:51:04:0a:
3b:ba:b1:7f:bb:8b:3c:f4:53:9f:36:1f:0d:ec:43:f9:db:b1:
36:4b:9b:33:e4:f9:13:fa:5b:8e:b4:bc:95:88:ec:0c:d8:bf:
5e:64:d2:af
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMwMzNaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4N0VBMEU2QTE2RTIx
MkQzOEFERDFBRjAzQjVEMTZDNjIzMjM0REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC70Kd4ZXJ8PON512BgNPXHL4FaYI5vM6QjPw4BiM5YrZCmXQ6V
Dh4frL+1pXEFu3+pfsV1iha+JFVGctJkK4tuxIVCbZsUCUEvepum2XsTqXuw892e
26y07MwmkcKxCB7W5JMMoBn27WFF14LMnMXSCfWt/MIiW0ihY+9FaJzRIDp77HYU
uEBKL+8mKVLT8kw/SY0XN0Iejrex4IID0euhCyEnvQ1CO+17nfKQuJFrkZId66L4
rR/eqqVzNAyM5ADvKM78USLmDIzm0erB6pnlIdUMk9Zo9ssOoasFiuhQPo7HJIyi
Yf0wYLxl991cMIu6ixCFLejPF/fKDClkEz2ZAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU2H6g5qFuIS04rdGvA7XRbGIyNN8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzJINmc1cUZ1SVMwNHJkR3ZBN1hSYkdJeU5OOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB5ajANBgkqhkiG9w0BAQsFAAOCAQEAh3ZMQmgxR1A9r7pzjR9+p871V1Vq
1GU+hPpXD5LyEUE1t9uiaqghvvZ6Am4mQuej+MxbKUvblOMivsfp9xMq4MFNzzQi
iHrIVSbGwLoq+XoNAt7bmhOWBljnUWrRc3sYGIGKBOooJ2aWZ17ncYhuG59tZXfc
0MsOn5E4eLb8ptO6tgXiUFm7j94vqs7ahcZBD+8n06+iQkFCAaCMehKu6kebMHRn
6kvKh8RDQiiJGBBf/BRnsHX9mr0u4vvf+EDLpS26pI2PZ0ynS7F6qrdnyySmVGHp
UQQKO7qxf7uLPPRTnzYfDexD+duxNkubM+T5E/pbjrS8lYjsDNi/XmTSrw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:21 2025 by rpki-client