![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa
File: ZbhzzTuACXi7tzCv1omD8UMTdOU.roa (raw, json)
Hash identifier: M6+YQ5l3faBkF7cpxSAp8hj9L7obJGmKXBdwLb9LKGw=
Subject key identifier: 65:B8:73:CD:3B:80:09:78:BB:B7:30:AF:D6:89:83:F1:43:13:74:E5
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0289
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa
Signing time: Mon 05 Feb 2024 09:29:40 +0000
ROA not before: Mon 05 Feb 2024 09:29:40 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2516
IP address blocks: 14.12.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Feb 5 09:29:40 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=65B873CD3B800978BBB730AFD68983F1431374E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:9a:74:53:75:06:40:a1:ba:c5:a5:ac:eb:
f4:e4:e2:f4:02:33:e8:af:d1:4b:11:23:c0:bb:ee:
cf:31:ef:f5:b5:35:bf:e0:83:63:7a:c6:ae:f1:08:
5b:72:b1:af:48:49:e2:b5:11:42:85:d0:c9:e4:be:
26:7e:79:c5:27:34:cb:af:d6:4e:5d:83:08:39:66:
22:36:62:73:1c:4c:1a:37:ac:04:cb:a7:29:da:de:
bd:fd:64:9f:bc:dc:30:ad:fb:0d:99:ea:51:bb:6d:
63:ef:c7:95:93:ad:d9:7d:64:88:c0:d8:7f:fe:16:
7e:5a:4e:05:cf:cc:31:d8:f9:82:22:c7:71:f2:81:
bc:1b:b5:2a:77:87:2e:80:24:40:78:d0:a0:e8:fd:
77:30:55:db:89:7d:8d:21:8e:3f:7f:44:ac:47:b2:
a1:54:64:f4:17:99:8c:3e:5d:7e:a0:30:e6:6f:65:
d7:15:d7:30:57:a9:a5:c4:06:f8:f4:66:fd:f6:0e:
80:c0:60:99:be:ac:42:bd:93:f4:81:91:ce:a9:82:
d3:17:04:07:a5:3a:10:69:21:9f:d3:fd:e4:3b:8e:
74:ae:82:c3:f4:3d:f4:3b:67:13:09:b8:db:a7:31:
13:c0:b2:aa:8e:aa:d4:b2:95:a1:66:06:19:02:fd:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:73:CD:3B:80:09:78:BB:B7:30:AF:D6:89:83:F1:43:13:74:E5
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.12.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2a:0e:ea:7b:92:ab:ea:67:fd:80:aa:fd:21:31:78:f5:14:17:
49:1e:7f:3c:d6:e8:ba:16:1b:8d:32:23:51:d4:85:30:9d:8b:
00:f6:ce:d9:b8:69:78:fb:62:4c:79:49:6d:31:91:b6:c9:c6:
56:ff:74:63:33:73:c3:b9:bc:0c:28:a4:ba:6d:95:9f:9c:df:
56:15:d7:0f:82:b0:a8:51:7b:cc:d6:ca:b6:18:1c:7d:9d:e3:
ea:c7:2b:65:38:9f:8c:c3:20:08:c2:d4:b8:f3:41:6c:cb:46:
56:6f:61:bd:6f:cd:ec:bb:03:bd:91:af:92:79:f1:e2:04:0a:
61:be:04:88:10:8b:22:d3:41:93:d1:90:d0:69:e2:48:6b:46:
fa:93:32:f2:8b:a5:97:a2:b2:d6:f7:90:99:f5:9d:1e:b0:6c:
20:6b:73:6c:5d:e3:7d:02:45:f5:0a:19:a7:d4:8c:f3:47:43:
a3:1a:ae:da:43:d9:95:21:88:b6:62:7c:55:e6:ef:66:0c:45:
55:3f:60:f8:b7:d0:7e:b7:58:28:38:46:93:00:53:57:f7:d6:
9c:d3:7f:b8:f1:30:b7:2f:54:ac:de:aa:09:25:d2:6a:3b:8b:
2a:65:65:0a:d6:9d:5c:f2:41:2b:32:68:20:b7:aa:38:ab:2e:
ea:74:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:24 2025 by rpki-client