![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
File: G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa (raw, json)
Hash identifier: 0Nn9wt3VBwVu2pPxmNMl/84RAcSNzMPlFJPpaoTeAEw=
Subject key identifier: 1B:E6:46:83:CB:77:78:5C:91:CD:16:E8:B7:83:5E:43:D2:FB:5B:5A
Certificate issuer: /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial: 04
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
Signing time: Mon 07 Aug 2023 10:51:40 +0000
ROA not before: Mon 07 Aug 2023 10:51:40 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 7682
IP address blocks: 202.89.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Validity
Not Before: Aug 7 10:51:40 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=1BE64683CB77785C91CD16E8B7835E43D2FB5B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:39:04:93:00:89:d8:58:e2:a1:82:83:ea:
33:46:1a:d6:4f:40:90:95:67:f3:7f:42:c0:82:23:
ce:81:e0:fe:ed:4e:33:ed:bd:05:d6:ea:3a:eb:5f:
4a:94:38:05:15:8c:b3:14:5a:49:57:88:17:62:dd:
56:8c:6f:b3:00:21:03:d2:67:ea:f8:ef:15:d3:c6:
47:2a:72:9a:9d:c5:d8:3e:1f:39:90:3b:ae:09:a2:
f3:0e:40:60:e5:e8:66:c8:08:2b:0e:e4:d7:42:a6:
82:30:8f:27:ac:02:7d:13:fe:0e:5f:ff:18:5f:3f:
09:67:0c:89:07:5e:fa:75:1e:4b:14:09:17:a4:54:
d9:dd:55:f2:24:b8:73:ad:5b:a6:93:68:eb:23:32:
fa:f8:84:8e:8b:00:92:e7:22:c3:72:53:4f:47:88:
04:61:09:6e:f1:59:10:56:ee:a5:89:12:c4:c2:f8:
28:5a:04:af:a2:90:7e:7e:55:52:d5:a1:75:87:4c:
0b:f7:8e:2a:d9:0c:b9:f0:f8:46:ca:64:34:cf:75:
4b:40:ee:be:45:4f:cd:71:98:1b:72:1d:01:c6:96:
8c:0a:a1:3e:73:5a:b5:04:6b:a6:0d:73:68:6e:55:
7d:0e:17:70:75:82:ef:8f:f4:2c:42:cc:36:ef:b3:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:46:83:CB:77:78:5C:91:CD:16:E8:B7:83:5E:43:D2:FB:5B:5A
X509v3 Authority Key Identifier:
keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:bb:97:23:c9:a5:08:56:d8:c4:a7:40:a1:82:05:37:36:f6:
ee:63:33:6f:d5:e3:ac:2f:91:8b:2a:9f:e0:1b:fb:a5:90:e8:
08:82:73:47:2e:df:70:24:60:ae:c2:da:22:c1:5c:38:71:9a:
b8:ba:e6:4a:62:70:fb:80:95:71:42:01:cc:03:cb:d4:12:61:
a1:79:64:23:cd:91:8e:4a:a0:58:cf:4d:23:e1:9a:fd:cb:09:
6a:12:82:2d:10:44:77:16:9f:0e:a5:2c:49:29:76:ab:fa:57:
27:76:af:0d:7f:93:37:33:bc:7b:63:98:86:7a:db:7e:5c:ee:
6d:e1:35:df:e2:dc:53:e0:3a:f6:7d:5d:39:e5:52:4c:1d:f7:
64:c4:66:b3:60:95:96:61:f1:86:6f:b6:07:4e:df:ec:d9:9d:
46:c2:5d:0e:68:2c:ac:c2:5e:eb:7b:50:3f:15:1e:ba:f5:fe:
6f:c2:28:04:f0:ef:a4:02:c7:22:e4:66:f4:05:44:05:ee:f4:
97:29:c7:38:2d:3b:cc:99:21:2f:2a:0d:54:60:47:44:77:24:
de:f5:08:6a:90:c7:10:1d:cd:40:c6:8a:0e:db:16:99:5c:66:
b2:36:f2:95:87:46:64:8b:26:15:5b:5a:da:0f:cc:0f:be:80:
67:7f:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:51 2025 by rpki-client