![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
File: CnKMHo6ILvGIocP7iIwHsAnkBv0.roa (raw, json)
Hash identifier: 6RunEFMWYWo8FxMOPzwqX+W/CbA2i73+OF9fZITsDkk=
Subject key identifier: 0A:72:8C:1E:8E:88:2E:F1:88:A1:C3:FB:88:8C:07:B0:09:E4:06:FD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: C6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
Signing time: Tue 14 Jun 2022 09:14:00 +0000
ROA not before: Tue 14 Jun 2022 09:14:00 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 2516
IP address blocks: 111.108.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Jun 14 09:14:00 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=0A728C1E8E882EF188A1C3FB888C07B009E406FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:dc:e2:67:14:78:06:20:ae:13:c8:c5:af:
65:2e:83:99:4e:c2:c7:cb:5c:48:31:bb:d8:47:23:
95:d3:8b:32:1a:67:fb:a1:53:e3:77:0d:40:93:0e:
7f:ec:cd:2c:b7:e6:4e:d3:8b:56:58:a4:dd:d5:3c:
3f:3c:5f:e6:7d:86:4f:ec:d4:1e:35:b7:63:68:87:
65:e2:3c:55:15:59:d9:8f:01:3f:f2:af:fa:cd:a1:
53:b9:7a:05:7d:7e:0a:aa:c1:f1:7f:7f:8c:9a:c5:
64:1f:de:2a:99:c5:8f:ff:cb:ea:aa:f2:a4:10:6d:
12:7e:e2:81:62:1a:9e:67:1b:77:04:2a:35:33:cc:
09:6a:97:bf:19:ae:42:18:45:05:fb:5d:92:e6:d4:
44:cf:bd:38:34:c3:7e:79:96:8f:c1:be:9d:e3:8f:
00:0b:1d:4c:fa:3e:36:6b:ce:d6:79:9c:0f:79:f9:
7a:96:4f:3e:53:4f:7c:cf:ae:45:31:5a:9d:c4:c3:
0a:03:54:ad:d1:1d:39:c6:44:4f:24:7b:8b:05:19:
d0:2a:59:68:68:7f:9b:65:74:40:89:18:cc:e9:78:
0d:10:cc:5e:e1:fd:84:17:ce:c9:75:a5:39:6b:27:
1c:61:55:53:7e:5e:15:7b:7b:12:1d:09:77:53:ac:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:8C:1E:8E:88:2E:F1:88:A1:C3:FB:88:8C:07:B0:09:E4:06:FD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:62:be:99:6c:06:67:1f:c4:7d:07:81:e8:20:1c:02:1a:88:
fa:60:3a:fb:cc:ef:e6:38:61:fd:a7:76:df:25:37:f1:f9:21:
77:b4:42:83:37:69:92:ff:e7:51:fd:ae:2e:8a:9f:70:f9:40:
02:fc:18:f4:d1:c1:4d:fa:01:2d:3a:88:ff:89:f7:2a:0e:d0:
93:dc:ed:ae:11:f4:27:c6:26:06:ba:b0:32:8b:8e:1a:73:d2:
cc:59:35:17:c1:f0:50:46:f7:0a:5f:dd:39:a6:a2:bd:61:7c:
7d:a7:a6:48:22:97:21:e6:ad:58:77:ea:12:4f:38:e6:a4:92:
d1:75:86:22:61:c2:ca:6c:c5:4f:f6:65:b2:e7:66:2e:dd:00:
36:ab:96:68:b5:03:74:9e:f8:98:f6:3f:78:98:3c:8d:6d:68:
5d:2b:48:72:0b:84:d0:fd:4d:50:7c:2a:8c:01:5e:95:5c:e4:
9d:15:bc:e1:49:0d:10:58:d6:cd:ce:f2:0d:1d:f8:94:4f:9f:
35:af:f4:60:31:4f:a5:0e:d8:d3:63:b6:3f:e8:49:34:35:ed:
da:48:06:09:c7:23:13:5e:88:1b:da:f4:c8:a9:e9:8b:09:2d:
a9:15:a2:6c:fc:1c:c7:3b:92:f0:b4:fc:2e:9e:c4:52:e3:05:
6b:c0:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:20 2025 by rpki-client