![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
File: sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa (raw, json)
Hash identifier: CALJR8pVSdb38Zr4D63bjZfthrBl2LVVEQmpb2AGaJk=
Subject key identifier: B0:43:D2:9D:9F:3B:C4:BA:6D:FD:41:70:F0:4E:63:AD:6F:56:63:C8
Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial: 16
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
Signing time: Sun 01 Oct 2023 01:31:09 +0000
ROA not before: Sun 01 Oct 2023 01:31:09 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 63782
IP address blocks: 133.186.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Validity
Not Before: Oct 1 01:31:09 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=B043D29D9F3BC4BA6DFD4170F04E63AD6F5663C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:58:63:b0:c1:8a:25:c1:45:e3:3b:08:23:
f5:ed:e7:07:44:ce:3e:34:80:5b:de:12:7b:eb:d8:
11:ab:58:50:38:0c:80:1f:dd:7d:97:ae:e1:16:9e:
87:8c:b6:ea:ba:d4:25:ea:1c:2a:6a:32:11:b8:b7:
2f:40:5e:5c:19:61:e0:f3:24:75:ed:84:f7:2d:33:
e5:57:58:e2:14:19:6a:fa:89:c0:e2:48:b3:02:8c:
cd:7c:50:19:58:99:be:51:57:26:44:f9:6f:b8:69:
27:bc:4d:cf:63:e5:25:44:c7:db:fc:8f:bc:01:fa:
a5:9c:c0:d0:e4:c4:f2:9d:50:6a:9d:f8:5d:15:29:
88:67:dc:a0:ee:92:97:67:cf:26:93:61:c3:83:da:
2d:fd:48:9b:75:96:50:32:99:38:29:73:19:a8:20:
f1:5e:9c:00:a2:a8:dd:38:33:21:87:5d:4e:b1:bd:
30:43:86:5a:38:80:23:1c:0a:ad:9e:cb:49:0c:de:
db:7d:66:75:36:7c:19:7b:e0:d6:96:7b:e0:f0:16:
39:36:52:1b:f4:89:c1:e1:e1:ec:74:00:a4:43:04:
86:80:10:01:ce:56:45:3f:a6:58:45:24:bf:9a:42:
c2:df:4b:12:1d:be:68:01:ef:be:6a:e1:01:7d:ee:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:D2:9D:9F:3B:C4:BA:6D:FD:41:70:F0:4E:63:AD:6F:56:63:C8
X509v3 Authority Key Identifier:
keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.186.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d6:3a:af:28:d4:6b:ef:29:26:05:fe:41:90:32:1f:03:d8:
1d:22:c6:e7:3c:bf:6b:63:49:54:9d:98:6a:9f:ad:b4:f6:98:
ca:b4:72:06:ee:0f:85:47:99:d9:dd:19:4d:12:17:75:c7:95:
62:f7:27:7f:e7:83:20:19:19:79:d9:5c:a1:28:de:10:13:33:
2c:31:30:2d:c4:45:14:a9:16:4e:71:b1:63:4d:aa:b1:a4:66:
46:34:53:4f:01:60:e5:d0:83:60:d9:51:fe:f6:70:e9:03:05:
a0:21:f5:5d:df:31:5e:d5:1d:2a:dd:74:73:92:4c:ed:b9:71:
bc:e7:1c:9e:f9:b2:a0:c4:10:12:4c:81:1c:23:34:82:ea:07:
13:04:ef:e0:7f:d6:73:fb:b5:43:86:d7:d0:38:da:a3:36:07:
fc:9d:83:53:26:f4:d5:1d:15:f6:7a:ea:fb:3a:7e:a7:16:6b:
ce:88:6b:8d:5a:5f:6d:cd:d7:73:23:4d:c3:48:44:7a:99:9b:
45:d9:6d:64:8f:98:0e:31:e0:b4:bc:99:80:36:a4:e8:a4:d1:
45:69:48:33:71:7b:4c:c9:16:4e:96:27:34:87:39:28:24:08:
91:6d:00:8b:df:a0:a3:c3:32:d7:93:e7:2e:70:a5:24:71:5a:
53:66:19:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:26 2025 by rpki-client