![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
File: h5hfjNXgkImplnZIL-NdzfARV2s.roa (raw, json)
Hash identifier: rJOY7CtUh2OXesJPEmxGFUOnTGm9Xq5TudX7GxqEs+A=
Subject key identifier: 87:98:5F:8C:D5:E0:90:89:A9:96:76:48:2F:E3:5D:CD:F0:11:57:6B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0275
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
Signing time: Sun 01 Oct 2023 01:32:29 +0000
ROA not before: Sun 01 Oct 2023 01:32:29 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 118.159.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Oct 1 01:32:29 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=87985F8CD5E09089A99676482FE35DCDF011576B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:2b:46:b4:ae:80:16:41:a3:b5:33:70:aa:
0d:7f:8e:28:79:8a:a5:af:69:9a:6f:12:ba:7a:f2:
e8:c5:c9:31:9e:53:d2:9d:95:e1:d8:8b:0a:49:80:
3f:31:05:99:cb:e6:22:e7:80:1c:56:f2:7f:c9:6d:
f3:c4:47:47:28:96:37:97:60:1a:42:25:88:d9:a4:
04:91:73:53:38:f3:d8:5c:6c:09:67:59:eb:52:e2:
de:2e:3a:4e:4e:70:66:3f:65:f8:2b:07:71:95:39:
ce:4a:1a:3d:5c:52:28:8d:1b:68:45:d8:85:2f:3b:
a7:00:0a:d4:8f:7e:88:cb:b8:bd:1f:3d:75:2c:96:
e2:5c:91:b6:a9:42:e3:c9:c3:b8:60:a0:ee:20:15:
f0:8c:9c:42:42:c5:9d:24:7d:09:72:fa:34:37:62:
97:40:17:bf:58:f4:1c:41:c3:01:fa:99:bf:5b:79:
9d:bb:61:e1:a3:bb:ca:ed:4a:a4:8c:ec:ce:79:0c:
0d:8d:5c:bf:2b:b7:97:f0:7a:59:38:aa:aa:47:37:
20:89:32:54:bf:f7:a8:0e:60:52:be:63:b0:81:13:
46:93:aa:73:29:67:e5:3b:00:3b:7e:e4:ed:14:e5:
3e:b0:22:f5:19:97:0d:9e:c3:cf:39:91:26:cc:16:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:5F:8C:D5:E0:90:89:A9:96:76:48:2F:E3:5D:CD:F0:11:57:6B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
39:dd:9c:93:c5:e4:4a:ad:44:1d:9f:56:10:0d:69:de:f0:e2:
d4:d9:90:86:9e:d0:17:64:d8:22:8f:07:06:49:5d:c7:8d:e1:
0b:c2:54:4c:31:be:d9:1e:12:c7:85:67:7c:b8:c8:3e:d7:3d:
d4:f5:75:59:81:5a:dc:aa:6d:58:ae:32:72:bf:05:ce:23:7f:
7e:dd:be:95:e6:d6:f7:04:55:79:f9:ff:ef:12:3e:77:aa:e4:
1a:a4:03:36:5d:b2:46:c7:35:d7:cf:80:82:3d:82:3a:3b:2e:
ee:d8:b7:b4:30:26:6e:a1:fa:41:25:ea:a1:3b:ba:dd:56:88:
3f:20:fe:a4:cc:cb:5b:61:75:1a:20:8b:2d:0a:db:48:97:71:
1c:a5:44:20:08:af:42:ca:e2:5b:cb:57:88:d8:c8:8f:fc:48:
fa:a1:5c:c4:95:96:b9:b3:d1:af:a4:4f:6f:a1:5b:84:cb:49:
f8:e0:a8:94:34:65:ad:3f:d3:70:1c:3d:58:1e:93:b0:fc:6c:
0d:28:3c:51:7e:a2:35:d7:c4:2e:23:e4:d9:f7:04:a2:22:e6:
ec:fd:22:81:05:a3:53:ca:79:cf:de:1c:3a:8a:56:b0:b5:4e:
7f:c3:db:80:6b:a9:ad:ac:1b:1b:cc:61:a3:41:d9:a7:72:ca:
1c:20:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:12 2025 by rpki-client