![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
File: KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa (raw, json)
Hash identifier: Ann6oePLKEu6+xd4/JK5jhMtOqz6CFs1QZiRHxBcozE=
Subject key identifier: 2A:F3:25:0F:75:35:91:A1:63:61:BB:72:8D:77:62:31:91:61:2B:43
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 2E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
Signing time: Fri 10 Feb 2023 07:39:08 +0000
ROA not before: Fri 10 Feb 2023 07:39:08 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.5/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:39:08 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=2AF3250F753591A16361BB728D77623191612B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:5d:bf:3c:a7:47:f2:f9:2c:d3:aa:7b:5a:
bf:47:45:eb:98:d9:5b:aa:a4:3e:02:7f:5c:5d:c7:
16:aa:78:9c:22:3a:c2:3b:f2:30:e5:90:59:47:13:
2e:24:c6:cb:89:cd:48:74:34:03:91:45:d7:b0:71:
30:1c:6c:79:4b:1e:c4:62:63:fc:ed:80:22:50:78:
a0:bf:61:e7:a8:4b:5e:35:87:b8:41:78:77:7d:cb:
ef:59:08:d4:8f:c2:d4:02:f0:81:d2:77:0e:b5:b1:
9a:f8:95:92:5f:fa:85:a7:30:09:a5:35:57:f0:ff:
9e:59:72:e6:0a:de:b9:54:3b:09:87:be:ab:82:2d:
9e:08:af:86:05:95:e8:3a:6d:2d:c8:99:db:a9:1d:
8a:c9:d9:c4:67:78:03:1c:bd:99:24:69:e0:ae:ea:
24:88:47:ae:25:d9:0a:fe:89:00:9b:7d:e5:83:cc:
3f:03:2c:27:f0:46:1b:ba:75:3e:e3:e7:1b:47:c3:
cd:8f:48:db:9b:d0:10:6f:97:34:08:fc:55:e0:22:
5a:50:dd:c6:f8:ab:2e:ef:e0:1f:20:72:ce:d0:47:
8a:ad:22:cd:88:7b:9d:34:b3:0e:cf:55:15:90:5f:
aa:c1:e9:88:a8:3b:a7:b9:33:f5:c7:28:38:55:fe:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:25:0F:75:35:91:A1:63:61:BB:72:8D:77:62:31:91:61:2B:43
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KvMlD3U1kaFjYbtyjXdiMZFhK0M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.5/32
Signature Algorithm: sha256WithRSAEncryption
03:06:19:31:d8:60:2b:20:99:0d:82:65:dc:77:c9:ec:4f:e2:
da:1e:b8:e2:29:5e:17:0c:ba:c2:10:0c:f3:dc:25:27:c7:07:
26:40:98:56:99:60:48:04:3f:bc:82:ed:b1:ba:b8:b7:e4:88:
6c:a0:27:87:47:02:37:ce:7c:7e:bd:17:8f:17:99:6b:4a:54:
c2:2d:fc:12:5a:1c:1d:e2:2f:07:18:17:cf:7b:18:1f:5f:82:
3d:a6:0c:5f:a6:32:8d:de:52:f4:5a:c0:3e:85:17:8d:35:53:
60:20:1a:ba:b6:66:45:da:b4:de:af:94:ce:c6:56:d4:0c:33:
73:af:a7:d5:f0:a4:25:77:9b:92:0e:08:f4:a4:5b:2d:b8:20:
d7:05:d3:e3:c1:37:f7:a0:6b:a3:32:e7:02:88:64:7c:1e:16:
97:ff:55:ae:b5:57:76:bd:f6:5b:f0:98:9a:eb:49:8a:df:96:
21:28:ec:db:c6:0b:15:85:8d:e7:4d:77:81:ff:6c:5a:9c:83:
1e:ca:68:9e:af:52:bc:52:43:59:5c:28:e1:2b:fa:23:7e:2a:
98:ae:ec:c7:1f:23:c6:2e:85:a9:db:5f:14:b7:7a:be:cf:97:
e0:52:e1:e8:87:3d:fb:36:63:c4:8c:74:a2:2a:1d:65:af:8b:
3f:77:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:07 2025 by rpki-client