![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_WA9lIxX-wlbN42bLKy4nMfG2t4.roa
File: _WA9lIxX-wlbN42bLKy4nMfG2t4.roa (raw, json)
Hash identifier: VstptTPdPA/CGl2HC+J+vjLq9bGL2IiPUYMQGUfRaQQ=
Subject key identifier: FD:60:3D:94:8C:57:FB:09:5B:37:8D:9B:2C:AC:B8:9C:C7:C6:DA:DE
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01E8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_WA9lIxX-wlbN42bLKy4nMfG2t4.roa
Signing time: Mon 20 Feb 2023 07:57:24 +0000
ROA not before: Mon 20 Feb 2023 07:57:24 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.247/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:24 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=FD603D948C57FB095B378D9B2CACB89CC7C6DADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:dd:b6:1d:e3:fe:3a:b1:43:08:81:28:0b:
1e:d5:66:80:c1:a8:61:20:41:32:56:f9:4b:17:a7:
f4:04:5b:ab:5c:6c:87:de:41:97:c3:92:98:06:85:
43:53:21:29:c5:80:6d:f4:84:e4:1b:5b:18:c1:c8:
95:39:ae:43:03:9d:59:0f:4c:0f:b7:ab:bb:a4:fa:
cf:e7:11:1c:98:ff:ff:eb:d2:b5:b9:c7:8d:68:e1:
a6:96:c8:a1:5f:d3:5d:71:a8:e2:f8:3a:da:4c:e6:
f1:a0:f3:95:a8:66:be:ab:65:d5:c9:88:5f:6e:76:
c4:4f:bd:2d:fd:9f:cf:a5:1e:72:d8:fb:37:e0:e5:
48:11:2d:56:41:8d:5d:cb:42:aa:d9:9a:e0:38:b5:
58:9b:72:cb:4c:cb:fa:4d:7c:e0:09:ca:2e:e1:c9:
ac:c3:f9:f1:d6:1e:31:60:66:9e:3f:d5:b1:e3:85:
ed:50:75:b1:b9:a7:26:c7:4e:f2:9b:55:73:0c:30:
7c:35:32:e8:ff:bf:67:fd:d9:24:3a:77:d4:db:f4:
46:ee:bf:25:cb:55:d1:e5:75:c8:ae:bb:7e:b7:ff:
78:c1:a7:91:fe:63:68:21:5d:ce:0d:5d:1c:ad:ad:
4b:84:a3:20:1e:b6:c6:87:a7:19:d2:1e:1f:48:1e:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:3D:94:8C:57:FB:09:5B:37:8D:9B:2C:AC:B8:9C:C7:C6:DA:DE
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_WA9lIxX-wlbN42bLKy4nMfG2t4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.247/32
Signature Algorithm: sha256WithRSAEncryption
a4:b4:fd:06:c6:be:40:99:d4:cf:19:4e:5b:28:f7:3a:97:3e:
12:55:91:d8:1f:10:fc:f2:56:8f:cd:c3:32:b5:1c:1c:52:d6:
ca:0f:ec:c8:18:bb:fd:46:3e:69:4c:d1:31:69:08:e4:4a:65:
2e:30:23:17:b9:ed:3a:8a:ef:e8:3d:fa:38:20:9b:7c:78:3c:
f3:1b:69:4d:eb:c1:d5:87:4c:2b:2f:f9:f5:e7:9e:7b:73:d9:
fc:ba:9c:c8:a1:7a:1d:26:10:8b:d5:35:80:0f:b5:90:b0:38:
ff:32:e3:fa:cf:41:b4:47:83:83:ad:f1:9a:44:c0:88:20:54:
b1:c2:e2:c9:d0:42:10:13:05:22:8a:8c:eb:21:17:9c:09:57:
83:e7:47:28:73:2c:9c:72:ab:e5:bf:64:7b:82:f1:98:11:40:
d5:8a:7a:5a:f6:2f:28:8a:e7:88:f6:a9:88:7c:02:bf:eb:83:
d3:bb:c8:5a:ef:5c:8b:9b:8c:27:8e:e7:11:8d:6a:c1:af:a0:
3f:3c:f5:65:00:33:d6:7e:a3:c4:5d:ca:00:c7:45:32:47:14:
89:3d:b7:37:fd:19:7e:cf:26:a0:d3:2e:a2:62:aa:c7:c5:df:
c1:74:c5:d9:c6:94:d6:62:60:a6:cd:eb:9a:40:f6:e6:40:77:
ee:ca:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:53 2025 by rpki-client