![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
File: XV1vITt9KYQ0ty8jwIIX50B8XFc.roa (raw, json)
Hash identifier: sYzbkuB7TdFTxzujAT+RoYkHiJzGcg1HsjaOGzaLKjE=
Subject key identifier: 5D:5D:6F:21:3B:7D:29:84:34:B7:2F:23:C0:82:17:E7:40:7C:5C:57
Certificate issuer: /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial: 07
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
Signing time: Sat 03 Feb 2024 07:15:32 +0000
ROA not before: Sat 03 Feb 2024 07:15:32 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 150362
IP address blocks: 103.149.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Validity
Not Before: Feb 3 07:15:32 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=5D5D6F213B7D298434B72F23C08217E7407C5C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:db:6e:c1:21:b5:9e:c6:90:dc:91:0a:f9:0b:
35:ef:89:60:05:05:70:e5:2e:d9:2b:cf:0b:0d:fc:
6e:e1:76:7f:35:3e:c7:23:a6:b6:a6:a8:34:5b:a3:
e1:fd:97:42:d4:50:f3:30:af:ed:94:36:31:8d:e4:
27:b2:f1:2e:e7:82:b3:be:60:72:3f:b5:0f:1c:31:
96:d6:f0:d8:d2:cf:71:b7:2f:2d:18:3d:5e:83:c7:
e8:9e:57:d4:e6:94:8a:59:9f:16:25:68:07:75:bf:
bd:bf:4a:5c:7c:b6:ab:25:57:82:d3:e9:55:76:5c:
61:e0:2d:7a:86:e7:46:39:8d:63:90:ba:6d:42:33:
7d:fd:39:17:95:61:8b:da:1a:46:e7:cc:85:28:fc:
f7:2b:bb:b9:16:2d:eb:6d:be:33:44:ad:2c:96:3d:
b2:5f:1c:ab:7b:2c:fc:c3:80:be:70:2b:f9:7c:b8:
53:ac:64:32:94:c0:63:78:e1:fa:55:94:84:1a:80:
e1:74:f3:c2:de:73:95:97:89:50:f0:2b:e9:3b:57:
cc:db:80:4f:78:42:52:9e:85:ee:c8:d5:bd:1f:53:
73:a8:9d:16:cf:3e:1e:cd:bd:c3:c3:bd:92:87:2a:
b1:2f:7d:42:05:e4:e6:2b:36:70:26:c4:bf:45:d9:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:6F:21:3B:7D:29:84:34:B7:2F:23:C0:82:17:E7:40:7C:5C:57
X509v3 Authority Key Identifier:
keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/XV1vITt9KYQ0ty8jwIIX50B8XFc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.4.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6f:0f:67:19:7b:f7:30:ab:76:6e:d6:35:b9:bd:47:60:3f:
39:fa:cd:4b:12:3d:90:66:22:ca:bb:98:67:a2:ed:c5:de:37:
f8:ce:b5:76:53:a6:3e:69:df:74:91:87:00:e9:5d:91:a2:b2:
b7:f7:55:b2:af:14:cd:a4:f9:da:72:f7:cc:86:13:58:8b:cb:
9d:b6:54:b3:34:7f:33:67:15:7e:78:95:48:5f:88:e2:34:88:
d6:b0:c5:f3:ea:20:f7:ea:ee:ff:2b:f5:3a:ff:b6:d8:86:eb:
87:57:6a:14:40:9d:e7:c4:bc:ff:d8:94:5e:af:c0:1b:8e:17:
9f:d8:05:36:34:5e:36:57:94:02:a6:9f:22:82:88:a0:c3:1b:
f6:d8:f2:7a:f5:66:b6:18:fb:c6:96:a9:6b:bf:82:5d:3f:ee:
5e:bc:fb:89:a1:25:0e:e9:fd:00:82:6d:70:ca:09:f9:20:47:
a6:6d:30:91:51:55:f9:e6:64:b4:78:a0:7a:27:38:9d:69:1c:
a2:90:db:01:b9:c8:7c:50:cc:40:43:76:6d:19:be:5c:60:1a:
78:64:2c:13:50:4b:bf:f2:39:0f:5a:84:cf:f3:05:e8:4f:31:
6f:92:1e:09:e8:72:45:e5:ac:4b:74:23:a8:7c:84:18:74:1b:
70:21:00:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client