![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
File: 4-xZbrcx1vAAmYa9EckQufgkNIo.roa (raw, json)
Hash identifier: /4/eVTmOegEND8WLKygmYhVKBJd0f95lr6keI5SGdmw=
Subject key identifier: E3:EC:59:6E:B7:31:D6:F0:00:99:86:BD:11:C9:10:B9:F8:24:34:8A
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0207
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
Signing time: Mon 20 Feb 2023 07:57:35 +0000
ROA not before: Mon 20 Feb 2023 07:57:35 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.34/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:35 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=E3EC596EB731D6F0009986BD11C910B9F824348A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dd:2e:08:72:c2:7e:e4:12:69:11:e8:52:a4:
a7:bd:56:bb:b8:40:8e:da:40:da:a8:5a:68:62:1c:
a2:e1:d5:a0:8a:1f:f8:66:f3:c7:e2:f0:de:40:df:
26:70:fb:d1:b3:ee:60:70:a8:ba:45:cd:ca:8d:cf:
e7:11:ee:3a:1c:92:93:e9:6d:07:74:38:99:32:fd:
e2:b4:61:b9:7e:73:f7:c4:b0:1f:ae:8f:2d:f4:39:
55:08:3f:b9:0f:05:08:26:0e:8c:b0:a5:46:cb:e3:
dd:18:96:91:9b:03:ba:bc:1b:2a:dd:c8:24:e4:d7:
a7:3b:75:01:2b:27:3e:51:4d:7d:bc:1f:85:2c:e5:
78:a6:59:cf:e3:08:ff:f9:94:1e:1d:8c:dc:66:e7:
28:e4:5f:2a:cc:1c:93:7e:29:43:19:1a:9f:6b:49:
e2:f1:61:6a:e3:f8:45:1f:53:92:a0:7d:6f:e6:e5:
9d:43:ff:f2:e0:c0:77:07:ca:eb:dc:fc:dc:df:01:
9a:c1:3f:ac:8b:f9:42:ec:bb:12:c1:66:3b:58:5b:
58:2f:14:20:4a:3b:9a:2f:e5:3a:fb:a3:f0:75:73:
ca:11:02:53:4f:36:9c:e5:f1:96:51:a5:55:e6:93:
cf:b7:1a:7a:45:cc:4e:ce:44:d4:db:3a:67:cf:a9:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:59:6E:B7:31:D6:F0:00:99:86:BD:11:C9:10:B9:F8:24:34:8A
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.34/32
Signature Algorithm: sha256WithRSAEncryption
96:91:0d:5e:be:72:1e:cb:67:f0:d3:9b:4d:a6:7c:37:2e:cf:
fe:a2:26:97:d8:0e:c3:0c:a0:6d:17:c5:85:a5:a4:01:ca:0e:
e4:fc:a6:39:e0:e0:a7:c6:d7:c4:70:f4:09:80:68:09:c8:e2:
71:39:5d:35:2c:d1:da:e3:e8:47:bb:e9:fa:89:8e:7f:9c:88:
8b:14:8d:b5:af:a0:af:7d:3a:2f:55:dd:0d:e3:a6:f9:b7:f0:
0a:78:a9:69:1d:e1:ae:4a:00:69:ca:bd:68:d0:b6:19:32:f5:
99:a7:bb:fa:00:87:95:47:5c:a5:3c:4e:96:79:b4:49:1d:21:
3c:3b:bf:80:20:95:30:c6:46:67:71:6b:c2:7d:bd:db:a1:7b:
8a:3b:b1:c5:41:68:c3:17:0c:60:65:37:4b:9d:8f:84:7b:b3:
6c:e3:91:72:6b:32:8c:0e:38:11:73:ec:64:6a:83:81:a4:2b:
68:64:c4:24:ce:27:0f:4c:f4:36:fe:eb:6b:e8:c9:e9:5d:11:
ef:45:47:7a:a8:bc:0a:50:32:5e:5a:ba:e5:9f:71:ad:cc:62:
3c:53:b5:45:74:21:01:94:7b:38:b6:ee:c9:9d:10:ac:a1:7d:
68:e0:b9:0e:8c:49:bf:03:05:98:05:81:a4:ed:7e:9a:8f:de:
73:0a:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:10 2025 by rpki-client