![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
File: aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa (raw, json)
Hash identifier: xGxkfeZg+q5fSRZ6GkRWMPEVqVPXv5x06YjPAx4C3i0=
Subject key identifier: 68:D7:E9:3E:05:C1:18:E4:0F:9F:F7:0D:D5:72:23:1B:5B:54:91:99
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 36
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
Signing time: Thu 22 Jun 2023 00:34:02 +0000
ROA not before: Thu 22 Jun 2023 00:34:02 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 115.166.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:34:02 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=68D7E93E05C118E40F9FF70DD572231B5B549199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:83:ed:37:80:8f:a9:4d:aa:4d:93:ee:51:
f8:48:ae:53:d0:6a:de:9b:31:de:57:dc:e1:17:40:
12:7c:b4:4f:20:59:9b:58:24:c6:72:d8:da:dd:73:
99:2b:aa:44:84:f1:e6:3b:a4:f0:c0:d6:15:44:55:
83:53:50:07:97:ad:e0:5a:3c:60:5c:c6:45:79:74:
5e:bd:dd:72:d8:81:00:6f:62:d3:9f:1f:16:3d:f6:
6c:a4:a0:ff:15:bf:87:93:32:61:4b:03:b2:2c:1a:
be:b5:0a:5d:06:33:ad:47:03:cf:24:da:79:b4:47:
ed:e9:89:67:51:9b:88:f3:76:6e:33:48:1c:97:d4:
3f:29:8d:32:6e:7c:1a:84:1a:db:0d:10:36:00:4d:
68:e1:08:62:05:d0:bf:d0:b5:96:56:56:9c:9d:18:
d0:56:cf:94:3a:5f:59:e7:0e:69:1b:8d:e7:28:01:
5b:ba:22:1e:98:74:22:94:2c:51:b2:68:08:4e:10:
c7:20:17:5e:3f:7b:c3:12:88:95:5b:cd:99:c0:7e:
13:b2:1c:b8:8e:83:a2:b4:65:0b:36:03:8f:f6:41:
56:db:fd:2d:e7:1b:e2:b4:f2:9b:a4:1a:e6:dc:49:
77:cf:9f:af:c9:ee:14:8d:7b:6b:fb:34:55:b3:9f:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:E9:3E:05:C1:18:E4:0F:9F:F7:0D:D5:72:23:1B:5B:54:91:99
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.166.189.0/24
Signature Algorithm: sha256WithRSAEncryption
10:66:bf:ca:af:e6:7f:09:ee:2c:fa:72:7f:8d:dc:82:13:10:
12:ba:c4:d4:97:3d:25:89:c5:30:02:7d:b3:39:17:b9:5d:d0:
61:37:fb:ca:84:b0:06:5a:45:54:bc:a9:56:2c:06:85:58:56:
1c:1b:05:78:7d:0c:89:06:0e:75:99:0d:83:3d:4c:a5:0f:76:
9b:8b:dc:89:3b:75:c7:c6:76:69:9c:82:50:5f:00:df:1c:f4:
85:9c:33:4d:20:e8:b4:44:bf:33:ff:25:6b:87:0c:54:85:57:
e3:df:bb:76:45:8d:d7:11:82:0f:44:8f:59:b0:96:50:36:9d:
26:c6:06:ea:61:c0:e1:9a:d0:f0:68:0a:8b:5b:ae:5e:1f:f9:
91:d6:7d:a3:41:52:1e:97:66:2d:28:6c:44:e4:a0:f7:b6:cd:
22:dc:dc:01:fa:68:6b:cd:4d:d8:6b:21:36:18:da:d6:a6:14:
d8:39:c9:5f:f1:8b:dd:c3:0a:8f:8a:f3:bd:a0:7c:92:e9:31:
d0:08:d9:a5:6b:91:09:86:b3:d8:86:fd:5a:f5:c0:4a:c4:98:
ad:b8:8f:fc:59:89:4e:8a:28:13:92:a1:dc:2c:73:97:df:89:
86:2f:03:0a:02:e7:78:e3:3c:85:1b:de:79:79:60:69:52:e8:
9d:d1:1f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:36 2025 by rpki-client