![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
File: PbcLa-QGDjLxRe78vE1jVDvKZTc.roa (raw, json)
Hash identifier: Ld/YvNGdUJpzyrze7nqa0FnMIcJn4xeZJmF6QolQa9U=
Subject key identifier: 3D:B7:0B:6B:E4:06:0E:32:F1:45:EE:FC:BC:4D:63:54:3B:CA:65:37
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 9E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
Signing time: Tue 07 Jun 2022 10:21:16 +0000
ROA not before: Tue 07 Jun 2022 10:21:16 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 2516
IP address blocks: 222.1.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Jun 7 10:21:16 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=3DB70B6BE4060E32F145EEFCBC4D63543BCA6537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:f6:63:cb:fe:f2:21:56:5a:49:b4:13:3f:
3a:db:54:56:bb:04:5d:fd:94:55:49:b0:da:58:14:
4b:95:6d:48:ef:fd:12:27:bb:be:ad:61:41:b3:73:
e2:c1:6b:1a:cd:d7:9a:f5:6a:62:a9:79:94:e3:b8:
b8:0c:d2:7a:7e:f0:fc:7a:20:46:37:28:ab:93:11:
e8:e1:d4:dc:4b:20:92:38:58:6e:9b:7a:dd:22:f2:
7d:27:da:71:93:4b:be:34:f9:f9:16:b6:84:9f:02:
a2:ec:88:82:ec:74:9b:78:4a:a9:ab:9b:ad:32:e1:
7b:9e:0a:2d:1d:a3:ed:23:67:9f:02:95:5a:42:25:
99:48:1a:e6:a3:af:3a:26:78:7d:b5:0d:5f:59:59:
16:cf:9c:51:9b:81:8e:67:6c:e8:f1:34:f2:61:cd:
44:9a:2b:8a:65:87:df:4c:79:e3:40:70:c5:a1:36:
ed:16:f4:78:1c:4f:e3:67:39:2b:f8:fb:61:66:bf:
82:30:c5:82:ef:f4:45:c8:14:79:f0:25:19:e0:68:
7a:a5:63:0c:ee:ab:42:e7:e8:ef:b1:8d:8c:da:de:
98:dc:33:69:bf:ab:3f:0f:de:6d:81:d9:8f:cd:b1:
33:52:75:45:d7:26:81:d8:e9:8d:21:b5:6f:de:df:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:0B:6B:E4:06:0E:32:F1:45:EE:FC:BC:4D:63:54:3B:CA:65:37
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:48:81:0d:73:3b:d3:bd:7f:62:fd:ae:3c:04:f2:a5:52:fd:
18:29:27:3f:46:f1:6c:74:74:d3:3e:7c:41:b7:a5:35:b5:29:
f9:04:15:4d:d5:a4:f4:6c:7b:4b:25:64:b8:4e:16:4a:2d:8b:
93:b4:b9:b4:dd:62:86:9a:4d:d8:a1:37:92:3b:e6:ac:80:cc:
a7:ab:37:e5:eb:24:18:9e:f8:7c:a1:be:4a:10:98:3e:50:9a:
b6:52:e5:cf:1b:02:71:58:46:88:d4:f6:77:12:e4:2e:94:06:
e7:d4:97:84:a8:88:89:f5:7e:af:27:0f:75:83:b2:1a:2c:55:
aa:12:c4:71:6c:24:de:51:ee:45:f7:fb:da:8d:27:2c:81:94:
63:79:a9:04:49:91:cd:06:4d:d1:f1:26:75:d6:ea:db:94:66:
2e:fe:cf:1b:d5:48:cf:0c:d5:4c:48:c5:1a:b9:58:59:7d:40:
54:76:cb:5c:9f:ec:81:95:95:12:bc:12:9d:93:d6:80:51:e1:
2a:4d:b7:7d:5b:55:6d:87:c8:ca:cb:fd:7c:5c:27:e9:62:a6:
27:83:d8:44:20:a2:2e:73:40:1c:ac:b1:4b:c8:5d:10:d0:a6:
55:82:c5:bf:60:1e:1e:6f:42:c3:20:19:0c:c0:c2:6d:f9:3e:
ec:1b:0f:6d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDIxMTZaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDNEQjcwQjZCRTQwNjBF
MzJGMTQ1RUVGQ0JDNEQ2MzU0M0JDQTY1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq0PZjy/7yIVZaSbQTPzrbVFa7BF39lFVJsNpYFEuVbUjv/RIn
u76tYUGzc+LBaxrN15r1amKpeZTjuLgM0np+8Px6IEY3KKuTEejh1NxLIJI4WG6b
et0i8n0n2nGTS740+fkWtoSfAqLsiILsdJt4Sqmrm60y4XueCi0do+0jZ58ClVpC
JZlIGuajrzomeH21DV9ZWRbPnFGbgY5nbOjxNPJhzUSaK4plh99MeeNAcMWhNu0W
9HgcT+NnOSv4+2Fmv4IwxYLv9EXIFHnwJRngaHqlYwzuq0Ln6O+xjYza3pjcM2m/
qz8P3m2B2Y/NsTNSdUXXJoHY6Y0htW/e31cLAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUPbcLa+QGDjLxRe78vE1jVDvKZTcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1BiY0xhLVFHRGpMeFJlNzh2RTFqVkR2S1pUYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeATANBgkqhkiG9w0BAQsFAAOCAQEAbEiBDXM7071/Yv2uPATypVL9GCkn
P0bxbHR00z58QbelNbUp+QQVTdWk9Gx7SyVkuE4WSi2Lk7S5tN1ihppN2KE3kjvm
rIDMp6s35eskGJ74fKG+ShCYPlCatlLlzxsCcVhGiNT2dxLkLpQG59SXhKiIifV+
rycPdYOyGixVqhLEcWwk3lHuRff72o0nLIGUY3mpBEmRzQZN0fEmddbq25RmLv7P
G9VIzwzVTEjFGrlYWX1AVHbLXJ/sgZWVErwSnZPWgFHhKk23fVtVbYfIysv9fFwn
6WKmJ4PYRCCiLnNAHKyxS8hdENCmVYLFv2AeHm9CwyAZDMDCbfk+7BsPbQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:12 2025 by rpki-client