![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
File: srUaVgSaQi_4zDQuHbKD_FpRrc4.roa (raw, json)
Hash identifier: tDaNrD8ABgjYqLaYL5KPfKTE14DEEblllvTimDJeyx4=
Subject key identifier: B2:B5:1A:56:04:9A:42:2F:F8:CC:34:2E:1D:B2:83:FC:5A:51:AD:CE
Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial: 15
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
Signing time: Mon 20 Nov 2023 03:54:11 +0000
ROA not before: Mon 20 Nov 2023 03:54:11 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 7511
IP address blocks: 203.140.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Validity
Not Before: Nov 20 03:54:11 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=B2B51A56049A422FF8CC342E1DB283FC5A51ADCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:3d:1d:6b:ee:06:e7:a3:df:7f:df:57:7b:
48:d9:c3:b7:03:e2:35:e7:a1:e8:4e:10:02:39:6c:
40:d8:49:02:f5:c4:37:19:f6:86:75:35:da:20:23:
c6:87:42:4d:bb:c7:48:27:9e:cd:d7:d9:1b:c7:a6:
6e:2b:41:a4:c9:88:99:66:48:11:35:bf:9f:c3:6b:
d4:bb:26:3f:97:bc:ce:ce:b3:09:1f:e5:78:6f:33:
99:a3:ee:08:9b:9b:5b:25:7f:a2:a5:a8:22:e5:13:
70:36:72:85:14:ef:8b:55:a6:60:83:c0:a0:df:50:
0c:46:ea:e6:95:3d:b7:c4:66:4f:2f:df:b5:55:60:
23:2e:a3:f4:92:d1:5d:57:73:c9:e2:0b:fc:e1:e2:
28:c8:76:68:00:fe:64:88:6c:3a:cb:7d:91:58:22:
b6:44:f4:f3:c6:f2:45:24:a4:bb:c5:0b:d7:e9:52:
9f:59:0f:8f:5c:2f:b2:28:0b:cd:a0:6c:66:21:54:
58:df:35:d5:b9:9a:9d:52:dd:c5:ef:da:7a:6a:ba:
24:f8:20:62:a3:5a:07:7b:00:5b:8d:1c:ab:e1:87:
cb:7b:ea:08:ea:24:d7:2f:07:a4:ae:00:4a:53:1b:
07:8a:cd:da:e7:43:fe:30:36:ca:25:a6:2e:14:0c:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:1A:56:04:9A:42:2F:F8:CC:34:2E:1D:B2:83:FC:5A:51:AD:CE
X509v3 Authority Key Identifier:
keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.140.160.0/20
Signature Algorithm: sha256WithRSAEncryption
14:72:07:20:af:27:58:5b:ee:b2:9d:d9:64:ec:90:e1:a2:29:
82:b7:80:77:04:4f:12:87:2c:44:13:0b:d1:1c:7e:7e:20:7f:
6d:9d:f5:de:82:44:53:0f:a9:0c:0e:35:7f:e0:d7:f6:52:62:
68:2a:8f:30:ab:c5:64:8b:5b:39:11:55:bf:91:fb:c0:1c:e7:
50:e2:f5:2c:00:22:6c:16:dc:d0:03:0d:13:86:55:fd:80:5e:
10:f0:00:2b:e1:ab:5d:9b:95:a0:c6:4e:66:9c:5e:55:cd:02:
cb:bd:09:00:c4:2c:42:eb:3b:89:56:e8:53:a6:92:a1:af:6b:
4d:57:44:01:96:e6:1f:b8:2e:8b:db:9d:02:c1:58:e1:4b:cc:
20:3e:de:99:b4:8a:de:46:3e:20:8c:91:92:42:73:a1:03:7b:
a3:52:c6:f6:60:0a:ac:f4:43:0c:5d:cf:00:69:a2:8b:ff:ef:
2e:ef:96:11:40:f0:01:e5:5d:37:29:f4:eb:f8:a0:29:d2:8c:
d7:6a:da:cf:e4:47:d5:fa:7a:cd:3e:d8:2d:3d:a0:e4:83:dd:
b5:75:94:77:df:db:ef:4e:27:d4:a1:d6:02:9a:ff:d0:bf:f4:
85:67:6b:6f:11:26:52:44:b7:f3:3c:ac:b5:64:02:2e:dd:ae:
af:1e:6c:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:12 2025 by rpki-client