![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
File: xOzMSasWfkrBDEvbj9jIXaWJfS8.roa (raw, json)
Hash identifier: CUBosU8NI7RbrRoTqKc0tS4C4F+BoVd6Munvt5haQ5Y=
Subject key identifier: C4:EC:CC:49:AB:16:7E:4A:C1:0C:4B:DB:8F:D8:C8:5D:A5:89:7D:2F
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 3F
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
Signing time: Thu 22 Jun 2023 00:34:06 +0000
ROA not before: Thu 22 Jun 2023 00:34:06 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 24277
IP address blocks: 115.166.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: Jun 22 00:34:06 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=C4ECCC49AB167E4AC10C4BDB8FD8C85DA5897D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:30:18:9b:ee:82:88:ea:c6:dc:5b:d7:0d:
4a:77:33:b6:0f:61:48:a7:1e:d1:a0:65:bd:9c:24:
42:5a:5e:cd:01:ab:89:b9:b3:b6:41:d0:46:52:c9:
82:87:a8:b6:a9:cc:62:bd:b3:43:ee:12:8c:a1:40:
e2:41:1e:f6:9c:c6:49:05:e2:cc:49:b0:d7:6e:ef:
fd:00:10:2b:ed:af:ee:21:d8:b2:8b:31:c5:46:f9:
a3:9d:e2:2d:19:0a:d2:bb:aa:d7:9e:99:2d:f0:6f:
6d:8c:20:a8:9e:13:ff:8c:e8:a1:5e:aa:6e:c5:42:
27:7d:73:be:53:e5:95:9e:f0:a4:2e:db:be:dc:f1:
30:1c:2e:5e:d6:95:14:9f:b4:b8:53:e6:a5:8f:97:
69:4e:b8:c2:07:1f:0b:ec:3b:2d:32:b0:b3:15:49:
0e:50:81:94:f1:05:dd:d9:c0:4b:a0:5a:b4:59:a8:
62:fb:20:85:25:09:00:79:c5:13:0f:c2:ff:67:67:
54:a9:00:b6:3c:b3:eb:1f:4d:89:6c:45:eb:4f:6c:
55:99:e4:0a:6d:39:8c:1c:63:9a:f6:79:e4:01:d2:
2c:be:9e:35:9e:3e:13:5c:65:ea:04:2e:b4:2a:80:
41:1a:82:65:07:39:57:c4:c2:1e:86:26:87:6a:62:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:CC:49:AB:16:7E:4A:C1:0C:4B:DB:8F:D8:C8:5D:A5:89:7D:2F
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.166.168.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2e:fa:96:66:3c:b4:96:5d:3a:ed:40:bc:8b:df:55:88:96:
2d:ef:5e:22:58:39:a9:48:42:54:49:2b:dd:f7:4d:69:34:43:
86:f5:96:32:47:5e:25:dd:30:eb:81:42:bd:31:af:14:70:a1:
1c:52:d8:83:36:75:6f:5c:f3:ff:12:70:3e:da:5f:4f:1c:c3:
2e:66:f0:ee:e8:6b:58:56:30:9e:7d:b1:b8:22:f9:7c:e6:69:
c3:c7:52:46:fa:5d:e0:e8:f0:59:3f:23:e5:6e:13:13:38:79:
f7:8f:b8:7a:18:05:ca:8e:0f:28:14:ab:e6:30:9b:6f:7d:11:
6b:9a:cc:b2:cb:23:33:ff:84:d4:6c:3c:e1:c1:be:42:e7:98:
57:f9:6c:a9:c0:38:3f:86:4c:78:93:d8:2f:26:67:25:5e:dc:
76:56:f1:0c:46:2d:e9:19:b1:d3:ca:3a:d3:01:8d:0a:e8:66:
31:e5:f4:c6:c5:94:66:ac:ca:ed:9d:9f:b0:cc:91:11:1b:bf:
bf:34:15:44:a3:5e:1d:f2:2b:80:83:41:3a:04:9d:af:e8:98:
81:ee:5b:10:71:b0:25:4f:6b:7f:60:03:bc:b4:e9:c3:65:a2:
5a:39:73:fd:4e:46:21:66:af:93:83:fc:07:6a:d2:48:9a:13:
c9:f1:31:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:25 2025 by rpki-client