![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
File: FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa (raw, json)
Hash identifier: BNaQK0c8yf00FRfxXDxLlOd0/ZwfslWYrRurqNJ+bCw=
Subject key identifier: 17:25:DA:B0:D7:38:B9:DD:95:C1:DA:BE:2F:5B:1D:68:4B:6A:47:78
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 02CF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
Signing time: Mon 20 Feb 2023 08:07:29 +0000
ROA not before: Mon 20 Feb 2023 08:07:29 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.219/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:07:29 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=1725DAB0D738B9DD95C1DABE2F5B1D684B6A4778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:e7:fe:a1:af:9e:df:f3:7a:9c:86:3d:12:
78:c8:ff:e4:0b:1f:d7:45:7d:20:84:4b:2b:79:82:
bb:51:d0:58:77:8b:56:ac:6b:42:a8:94:12:ab:66:
0e:90:0a:cd:a5:69:eb:99:11:60:19:7c:6b:04:59:
69:47:c5:6e:1d:3f:17:08:87:5a:ed:6b:73:9d:3e:
2d:f2:66:74:5a:7d:6b:75:7e:03:d7:8e:2a:c0:ac:
0f:b2:b1:39:33:77:5c:64:81:35:a9:1f:ae:f4:1d:
3b:b4:2c:0a:78:51:35:8e:a4:ba:ab:cf:91:96:13:
26:b4:6b:0a:fe:e8:35:0a:80:d0:48:6c:1c:0b:36:
a1:7a:99:72:9d:55:8a:39:ee:8e:57:f7:c1:f9:57:
a3:e4:c0:b9:52:96:cb:73:2e:c2:ab:06:ea:65:13:
93:14:38:17:7a:df:87:44:0d:00:d8:fa:5d:9b:80:
92:18:e2:62:c3:10:89:23:f2:7c:f3:a8:51:87:6f:
dc:ee:16:3c:b6:3c:83:92:09:8f:7b:b3:fc:41:ba:
f7:8d:15:9c:57:88:3c:ba:f9:26:0d:15:9d:48:a5:
f1:d9:f2:81:8c:a5:5b:d1:88:bb:b0:f3:7c:d5:c8:
34:7f:de:53:ea:02:66:d4:5a:68:92:bb:f6:d3:52:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:DA:B0:D7:38:B9:DD:95:C1:DA:BE:2F:5B:1D:68:4B:6A:47:78
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FyXasNc4ud2Vwdq-L1sdaEtqR3g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.219/32
Signature Algorithm: sha256WithRSAEncryption
0e:a3:64:27:46:1b:f1:f1:26:58:12:5e:e3:0e:9d:75:eb:01:
76:00:8c:a8:c0:78:28:da:d0:96:61:c0:27:97:4f:65:a4:11:
9d:7f:a1:c5:e1:f4:17:25:30:00:4e:bd:12:41:aa:8b:cc:b9:
3c:24:f1:50:4d:7a:1e:4f:53:80:a8:75:cc:c0:00:ec:5e:8b:
8d:20:09:3c:b5:37:41:9f:49:e3:b5:7d:5d:41:1d:62:50:c9:
06:59:fb:a3:fc:82:d8:e2:90:fc:ed:0e:ef:76:4a:19:12:58:
47:c1:33:a0:8b:d1:fa:97:68:82:9d:2b:fd:14:68:56:1b:25:
39:03:db:c7:e2:0e:a1:81:ae:bd:7e:cd:20:d2:34:51:29:35:
3d:dc:eb:1a:d3:5c:59:ae:1d:d0:76:6e:c7:06:34:24:b8:c1:
78:e8:c8:79:49:54:80:99:f5:5f:c7:75:7d:27:8e:74:56:52:
20:e2:ab:ce:22:08:47:e1:65:5d:58:dc:65:14:6f:9d:ae:44:
3e:88:d4:6c:35:af:29:de:78:a7:72:9d:7d:82:e5:ee:90:c7:
d4:a5:a6:88:64:99:61:18:c8:2f:45:2a:e4:90:a8:4a:7f:5c:
ca:97:69:a5:c7:0a:09:70:61:7e:f1:81:55:f0:e7:36:f3:ec:
f7:2b:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:53 2025 by rpki-client