![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Piy1vVDcLcJPM2VEbt1VKVc_GGI.roa
File: Piy1vVDcLcJPM2VEbt1VKVc_GGI.roa (raw, json)
Hash identifier: zTx1n2ZHahaDjlEtRhXlHj2GUNib19HwsWgn0iMEjy8=
Subject key identifier: 3E:2C:B5:BD:50:DC:2D:C2:4F:33:65:44:6E:DD:55:29:57:3F:18:62
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01E1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Piy1vVDcLcJPM2VEbt1VKVc_GGI.roa
Signing time: Mon 20 Feb 2023 07:55:31 +0000
ROA not before: Mon 20 Feb 2023 07:55:31 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.92.102/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:55:31 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=3E2CB5BD50DC2DC24F3365446EDD5529573F1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:71:41:ed:d8:cc:19:95:1d:76:d1:f3:0a:
05:71:22:91:44:6e:a6:a9:a6:6a:af:2d:6d:c0:6d:
81:77:9a:48:53:9c:0f:41:60:52:fb:27:eb:e4:da:
73:1d:f2:e3:1c:15:48:9d:88:33:43:cd:45:0f:d0:
c9:5d:dd:dd:cc:08:fd:e3:24:47:b0:2a:4f:6f:c6:
f8:55:04:45:7d:f8:8d:55:74:f7:0c:b7:e9:55:28:
b7:6d:f7:e3:ca:98:86:69:9d:e9:24:e7:16:bc:3c:
5f:9f:87:bc:2f:6c:13:c3:48:41:4c:23:90:7e:70:
7c:24:5f:6d:76:e3:22:5f:fb:5e:a1:6b:e1:c1:97:
f6:27:bb:e3:a1:69:f1:89:47:6d:f6:0c:69:9d:43:
8f:1e:28:5d:cf:ff:f7:38:35:b2:80:d7:c4:e3:da:
c5:df:b9:2d:e6:2f:cd:7a:f1:c2:16:ae:66:03:03:
b4:d9:05:74:0a:23:11:48:02:d1:1f:a1:b8:4c:9a:
be:74:ed:d2:73:c6:51:6f:ff:80:b0:9d:5e:aa:34:
30:be:c5:fc:48:e4:53:f1:e9:72:fa:4c:24:12:52:
41:0a:d2:f5:ed:25:cd:ba:f5:10:b5:3b:db:a8:61:
cb:3d:1b:67:6a:c4:13:d4:81:e8:aa:ff:1f:1c:18:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:B5:BD:50:DC:2D:C2:4F:33:65:44:6E:DD:55:29:57:3F:18:62
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Piy1vVDcLcJPM2VEbt1VKVc_GGI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.92.102/32
Signature Algorithm: sha256WithRSAEncryption
7f:19:d3:ec:7c:59:3d:4e:f6:dc:22:67:44:9d:38:0a:2e:c7:
9c:2a:2f:01:ea:17:af:32:ee:c9:fe:fb:b0:47:ac:41:1d:c0:
01:bf:01:24:09:4d:de:c8:85:74:89:e5:31:bf:cd:83:56:1c:
01:c0:67:61:1f:ae:21:ab:6d:3d:a6:7b:bc:08:1e:30:f8:7a:
c9:a8:6c:6e:e4:5f:81:39:92:26:46:6f:0c:7a:9b:a4:cd:9f:
32:b1:ac:3c:30:62:b3:c7:0d:f7:a3:33:d0:b4:19:ac:46:4b:
32:cf:0b:07:e5:12:ad:96:40:8d:6c:d2:51:36:c6:2c:a0:e9:
28:08:35:fa:67:a0:26:91:fc:9b:85:fb:87:45:a9:1b:85:b6:
83:45:49:6c:41:0b:87:99:d5:6f:7b:a3:7c:5a:33:c8:fe:e1:
b4:cf:aa:b5:2c:83:61:6a:1c:09:af:3d:dd:d4:29:1d:af:69:
8f:b4:ee:53:66:2f:4c:3a:6d:41:5d:6b:dc:e1:fb:a1:c5:f1:
60:98:14:89:10:39:ba:e2:69:cc:86:dd:75:07:cd:82:9d:d4:
f8:a7:f7:7a:fc:b6:38:9a:ad:0f:1f:89:8f:39:b9:44:6f:d6:
bb:89:00:c6:96:45:74:c3:f4:ea:28:fd:b7:7c:a1:4d:50:cb:
26:f0:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:26 2025 by rpki-client