![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
File: Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa (raw, json)
Hash identifier: n/4W2Z59XkuyrAU6G8O0mwLlbI61cGelNxgWlV5IktQ=
Subject key identifier: 67:2F:46:83:B6:C7:AF:E9:26:79:41:F3:EE:87:B8:3C:3D:BB:F0:E5
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01EA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
Signing time: Mon 20 Feb 2023 07:57:25 +0000
ROA not before: Mon 20 Feb 2023 07:57:25 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.125/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:25 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=672F4683B6C7AFE9267941F3EE87B83C3DBBF0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:f9:bc:e6:c6:38:b5:39:03:3a:57:7c:d0:
5c:7e:91:c6:8c:96:8e:3e:ab:a0:1e:9a:31:91:b4:
58:1a:ac:f2:af:f5:2b:c4:88:f5:2f:b0:37:95:b8:
d6:d1:85:98:47:8a:a7:8a:84:00:0b:90:eb:d7:f4:
57:9e:27:a2:9c:55:66:d3:2e:20:63:a1:23:70:64:
35:a0:d8:21:c1:58:61:ad:20:ce:7e:15:2c:84:28:
f7:9a:12:3a:46:af:cd:dc:44:fd:6c:cb:f6:fa:b4:
63:12:91:47:6e:65:0f:87:26:03:8c:8e:44:fd:a5:
94:dd:c4:cf:99:6d:78:23:46:8a:8b:79:97:5f:f3:
cb:dc:6d:1b:88:61:c2:eb:bf:42:b9:1d:41:1a:2c:
7b:f3:38:5a:0c:97:79:b2:d2:98:71:c8:16:50:b9:
9c:86:bd:52:82:0c:41:24:f1:05:aa:00:aa:60:68:
3d:b5:f1:63:ce:ea:e6:a9:b1:a7:f4:1c:de:ef:f6:
b8:1a:5c:69:26:a3:61:f2:79:ce:33:c7:5a:69:12:
29:bb:a6:2d:3e:16:9a:65:df:8d:b5:8a:b7:14:bf:
9b:e7:8a:c1:b8:dd:af:20:36:e1:3e:cc:19:ab:9f:
cf:87:be:b3:cb:ac:32:bd:42:09:54:0d:97:ae:62:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:46:83:B6:C7:AF:E9:26:79:41:F3:EE:87:B8:3C:3D:BB:F0:E5
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Zy9Gg7bHr-kmeUHz7oe4PD278OU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.125/32
Signature Algorithm: sha256WithRSAEncryption
36:55:d5:f3:75:28:e6:fa:99:0f:75:43:0d:b4:62:ca:1f:72:
63:aa:ae:fd:a2:f8:3e:b0:a7:1f:b3:fc:69:12:ce:2d:72:62:
66:6f:b0:20:aa:a7:cb:fb:8a:4b:ca:d3:b6:b0:f3:09:9b:bc:
44:c5:aa:8a:35:4c:30:71:87:80:76:e0:80:f2:df:6b:83:85:
4b:42:15:01:be:d6:54:79:75:95:44:84:71:e0:53:5b:54:97:
42:8b:78:c2:8b:53:0c:1b:4e:91:53:90:10:fc:5b:92:09:90:
18:e7:2a:f6:e6:8b:93:d8:d2:42:00:c4:ba:61:58:90:2e:0d:
9a:14:8b:4d:74:ce:1a:72:53:1c:18:f9:ef:b5:45:08:f3:95:
43:5b:78:3e:cf:ac:eb:17:c1:93:23:fc:94:15:00:c8:17:0b:
8f:e5:05:84:14:27:c5:a4:05:38:56:d6:cb:ef:cf:99:8c:28:
e0:b9:7b:b5:40:09:1e:5a:87:40:60:a2:3b:eb:59:83:b7:4f:
2c:57:5e:1d:4f:5d:96:53:a6:8f:93:c2:20:45:ea:68:84:a9:
7e:1d:62:93:ca:9f:cb:a3:78:54:4a:5c:28:96:3a:4e:04:f3:
15:b1:b0:46:b5:0f:2b:56:59:99:04:2c:98:58:d6:9f:f4:b7:
c3:e7:ed:d6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU3MjVaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY3MkY0NjgzQjZDN0FG
RTkyNjc5NDFGM0VFODdCODNDM0RCQkYwRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCee/m85sY4tTkDOld80Fx+kcaMlo4+q6AemjGRtFgarPKv9SvE
iPUvsDeVuNbRhZhHiqeKhAALkOvX9FeeJ6KcVWbTLiBjoSNwZDWg2CHBWGGtIM5+
FSyEKPeaEjpGr83cRP1sy/b6tGMSkUduZQ+HJgOMjkT9pZTdxM+ZbXgjRoqLeZdf
88vcbRuIYcLrv0K5HUEaLHvzOFoMl3my0phxyBZQuZyGvVKCDEEk8QWqAKpgaD21
8WPO6uapsaf0HN7v9rgaXGkmo2Hyec4zx1ppEim7pi0+Fppl3421ircUv5vnisG4
3a8gNuE+zBmrn8+HvrPLrDK9QglUDZeuYnpfAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUZy9Gg7bHr+kmeUHz7oe4PD278OUwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9aeTlHZzdiSHIta21lVUh6N29lNFBEMjc4T1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxafTANBgkqhkiG9w0BAQsFAAOCAQEANlXV83Uo5vqZD3VDDbRi
yh9yY6qu/aL4PrCnH7P8aRLOLXJiZm+wIKqny/uKS8rTtrDzCZu8RMWqijVMMHGH
gHbggPLfa4OFS0IVAb7WVHl1lUSEceBTW1SXQot4wotTDBtOkVOQEPxbkgmQGOcq
9uaLk9jSQgDEumFYkC4NmhSLTXTOGnJTHBj577VFCPOVQ1t4Ps+s6xfBkyP8lBUA
yBcLj+UFhBQnxaQFOFbWy+/PmYwo4Ll7tUAJHlqHQGCiO+tZg7dPLFdeHU9dllOm
j5PCIEXqaISpfh1ik8qfy6N4VEpcKJY6TgTzFbGwRrUPK1ZZmQQsmFjWn/S3w+ft
1g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:07 2025 by rpki-client