![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSm-0QL5ZMzDXb2a1qmDkYhw6yg.roa
File: uSm-0QL5ZMzDXb2a1qmDkYhw6yg.roa (raw, json)
Hash identifier: rmG3VTMQ5dgqhDv9cd5IcfB8RrPxQy7sngFHwYMOHqE=
Subject key identifier: B9:29:BE:D1:02:F9:64:CC:C3:5D:BD:9A:D6:A9:83:91:88:70:EB:28
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 023B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSm-0QL5ZMzDXb2a1qmDkYhw6yg.roa
Signing time: Mon 20 Feb 2023 07:59:33 +0000
ROA not before: Mon 20 Feb 2023 07:59:33 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.159/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:59:33 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=B929BED102F964CCC35DBD9AD6A983918870EB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:30:19:45:ba:63:33:9f:0f:d6:eb:28:e9:7f:
78:57:be:43:29:1a:00:f6:31:42:b3:f3:6f:34:ee:
16:32:58:68:e0:1e:57:9f:76:ae:8e:dd:f0:b0:e4:
3c:3d:88:c6:81:30:8c:8f:94:a3:3e:89:d8:5b:df:
03:4f:65:bb:39:99:c4:6c:3e:f9:09:5a:f9:d0:67:
ce:e4:cb:0e:4d:b3:10:91:6c:92:39:88:cd:39:8e:
ac:44:23:3f:b3:1a:1f:51:92:14:50:74:12:f9:11:
d5:b9:6f:33:c7:01:30:01:1d:bb:ff:70:35:5f:69:
68:f5:93:e9:20:28:e6:fc:94:43:ba:4f:12:d3:20:
26:59:5c:dc:ed:6b:93:4f:00:3c:05:6f:6d:ad:92:
93:f5:a1:d5:59:2c:8e:f3:4d:18:b0:f3:19:a4:02:
15:4b:20:7a:d3:a8:b3:39:72:ed:86:fb:53:63:24:
8a:8c:ab:cb:2f:68:db:8f:22:35:3a:a0:c1:68:c6:
7e:05:9e:34:0d:92:fc:45:4e:a7:3b:3d:8a:5c:14:
6a:ea:5d:ed:9a:58:4f:56:28:db:d1:24:38:ad:ef:
1f:38:6a:9f:47:67:ad:8c:65:99:f3:28:1c:1e:d8:
ce:b8:9c:8c:ef:c3:65:7e:3e:85:a5:87:a8:2b:3b:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:BE:D1:02:F9:64:CC:C3:5D:BD:9A:D6:A9:83:91:88:70:EB:28
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uSm-0QL5ZMzDXb2a1qmDkYhw6yg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.159/32
Signature Algorithm: sha256WithRSAEncryption
5b:96:f8:fc:e6:de:28:1e:0f:ab:be:ec:6b:2c:4e:60:13:fa:
e1:55:ec:28:a0:f5:ab:e4:5a:37:c8:8e:68:7d:04:76:49:98:
24:b9:84:6f:57:1a:2e:b7:ee:79:62:43:d4:4a:fa:c8:26:fe:
1a:40:2e:79:5b:ba:82:20:80:cf:3a:98:f1:fc:ec:c6:47:7c:
77:ca:c3:9e:c2:30:c8:02:55:64:b8:6e:c4:cb:3d:29:f4:fe:
a2:95:a1:7b:da:9d:44:19:66:52:8e:c7:8b:98:81:f2:c5:c3:
d1:c6:4b:73:b8:b7:fa:80:f4:25:53:c4:de:da:bb:a5:ba:b6:
5a:48:0a:e6:d8:c8:ae:17:dc:df:23:5e:91:c0:0c:93:54:b7:
cd:70:ed:d0:46:4e:d3:23:39:df:42:ce:6c:a5:26:90:8a:36:
0b:9d:73:b8:5c:af:2a:8f:86:05:e3:25:69:27:34:79:af:09:
25:8d:7c:ca:9e:3c:ea:b2:ce:5a:fe:c1:8c:96:35:e7:73:a3:
22:c6:cd:a0:e4:5f:ca:8b:9e:0d:42:fa:88:53:b6:bb:fb:e4:
44:bd:c0:e5:14:a1:dc:ce:66:57:e2:04:e7:66:8e:b0:5b:32:
a5:21:61:dd:d2:18:96:63:21:1c:1a:a0:16:14:dd:82:95:1d:
50:1a:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:22 2025 by rpki-client