![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
File: cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa (raw, json)
Hash identifier: /TpQRwQo8RPu1PeM74XrYBHD65V74d6QLC08wImTzKs=
Subject key identifier: 71:97:31:A1:E1:7E:CC:BD:62:5F:15:6B:62:FB:D9:AA:65:52:90:99
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 19
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
Signing time: Wed 01 Jun 2022 01:29:03 +0000
ROA not before: Wed 01 Jun 2022 01:29:03 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 24277
IP address blocks: 203.160.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 1 01:29:03 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=719731A1E17ECCBD625F156B62FBD9AA65529099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:83:5a:ab:bd:79:36:cf:36:45:83:db:73:
25:c7:ee:c5:10:e0:99:5d:1c:05:3c:10:9f:01:d1:
05:4b:bd:6d:83:4f:bd:cd:20:b9:55:21:06:9c:f3:
81:15:08:c3:d8:a6:94:4e:c2:6a:88:ee:fc:bc:6d:
62:00:e2:05:37:13:82:5f:f6:b8:f0:21:ed:4f:8c:
3f:bc:88:49:e0:8a:82:57:87:4f:67:7f:b9:e7:48:
64:45:cd:26:9d:26:4d:02:a7:94:bb:aa:82:c8:18:
59:76:7d:20:f1:48:53:7e:7f:a0:b1:b1:18:86:db:
dc:0e:45:b9:bf:77:c8:f0:a8:d8:99:4a:3c:6b:bc:
a2:f2:4f:14:71:ac:ab:17:36:fc:b7:66:37:08:a5:
52:65:16:df:2f:2c:e1:5d:59:48:c7:00:4b:4a:91:
56:8a:17:e3:e4:5c:6c:a8:a1:b4:99:52:58:57:a4:
3f:6f:6e:e7:2f:c6:04:a6:72:8a:c2:9a:b6:4f:a9:
9f:7e:77:b9:f2:a2:f2:27:25:42:e4:11:e4:90:84:
11:a2:e0:44:57:1a:4f:95:35:14:6c:fe:9c:f9:71:
a5:c2:d4:16:3c:21:b6:8d:6a:e8:a3:42:82:98:ed:
79:d4:3f:54:d1:16:32:cd:83:fe:28:f5:fb:0e:b4:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:97:31:A1:E1:7E:CC:BD:62:5F:15:6B:62:FB:D9:AA:65:52:90:99
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:3a:84:3b:24:ba:9c:a1:52:68:1a:35:73:29:d3:bd:45:c4:
62:48:15:4d:bb:d5:de:3f:52:99:96:fc:c6:2e:6a:4d:cf:f5:
0c:a8:93:7f:64:74:30:6e:76:a3:9e:a3:21:65:89:d6:0b:b7:
fc:d3:fd:e3:26:9c:c0:66:45:c4:f1:d9:90:b4:e5:d0:38:0a:
68:1c:b1:c0:d7:2e:27:41:61:96:25:fe:50:f2:10:a7:d9:f1:
57:34:ec:fd:7d:f4:d6:5f:e5:9d:14:80:db:41:ad:69:ef:a0:
ac:e9:8e:54:3e:20:d3:8a:ba:26:ec:66:80:f6:25:5c:a9:7f:
54:04:0f:21:21:0b:e0:cb:0c:3b:8d:d2:21:28:42:90:4d:55:
8f:92:de:f8:53:d3:c8:c2:e9:1a:77:99:5f:14:72:8b:bc:89:
6d:f3:77:8a:52:4d:d4:e9:c7:88:69:6e:b4:0c:9d:ac:81:80:
b1:6a:41:97:f6:a3:3d:cd:87:f8:37:af:92:0a:47:d3:c9:5b:
0a:41:40:e3:d1:8c:9f:a7:b2:a1:05:5d:c6:f5:73:fc:b1:90:
99:a9:4c:fa:1d:86:da:3b:2f:a0:09:c6:f2:92:d6:29:29:43:
41:1d:fc:b4:d9:b7:26:61:01:5b:23:23:68:0a:83:2a:ed:9f:
a5:61:31:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:16 2025 by rpki-client