![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/aTZJjg8Pi6sKdaXpO9q1-aIJSec.roa
File: aTZJjg8Pi6sKdaXpO9q1-aIJSec.roa (raw, json)
Hash identifier: kcDej0y/EA7ypzpUg9BfM3EJuqW2ksdwFuwcLWU2S6E=
Subject key identifier: 69:36:49:8E:0F:0F:8B:AB:0A:75:A5:E9:3B:DA:B5:F9:A2:09:49:E7
Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial: 2F
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/aTZJjg8Pi6sKdaXpO9q1-aIJSec.roa
Signing time: Wed 20 Dec 2023 03:52:42 +0000
ROA not before: Wed 20 Dec 2023 03:52:42 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 23637
IP address blocks: 203.140.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Validity
Not Before: Dec 20 03:52:42 2023 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=6936498E0F0F8BAB0A75A5E93BDAB5F9A20949E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:ed:08:ba:ff:18:9f:3b:97:35:0e:06:10:
46:d1:54:e4:21:d8:4f:4e:d0:ad:f9:a1:ae:f1:16:
7a:dd:cd:6c:3d:56:10:2a:bc:49:83:30:b9:54:8e:
bc:04:c9:24:b0:90:f4:23:1d:60:f8:e2:f5:69:e4:
d5:51:b2:c1:0b:d1:7e:0e:97:e9:bb:d4:76:7c:d9:
e1:c8:aa:31:de:7f:ff:0e:46:3f:49:df:9b:52:ce:
1f:6c:42:14:d9:c1:b3:8e:a9:50:96:8b:ca:c1:fc:
2d:31:d8:4f:c6:19:6a:e3:76:9d:10:ba:78:2b:85:
b9:ef:dd:ce:d3:ef:1b:9f:b6:9d:a8:0c:64:29:39:
67:85:1a:0b:95:76:00:98:c4:2d:bc:f4:0b:5c:9d:
7c:cb:f1:71:eb:59:99:1b:dd:7b:79:56:ff:2c:ff:
f5:10:8b:79:b0:19:ae:c5:a2:5d:c9:bf:cc:f3:8c:
4e:05:42:f1:07:ad:95:b9:4d:ae:60:bb:55:cf:9c:
c1:0b:27:a6:ab:40:e3:32:ba:bc:ad:96:9b:4e:94:
76:85:01:fc:7e:fc:0c:bf:c3:e4:ee:2b:4a:74:8c:
e0:26:93:d1:7d:dd:f1:db:66:d6:c5:59:5b:fe:04:
c6:6c:cc:81:57:55:5c:89:46:93:30:c0:a7:bb:3d:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:49:8E:0F:0F:8B:AB:0A:75:A5:E9:3B:DA:B5:F9:A2:09:49:E7
X509v3 Authority Key Identifier:
keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/aTZJjg8Pi6sKdaXpO9q1-aIJSec.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.140.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cf:53:00:45:93:27:e6:46:65:b4:f8:53:c9:e3:03:32:e4:
bb:7b:95:3d:08:93:7a:42:97:64:34:04:1b:34:f3:2e:7c:91:
52:8e:8f:0a:af:31:06:02:cd:6f:33:a8:45:ca:57:ac:2d:c0:
b9:0b:ed:1a:0d:b7:58:6e:83:0f:31:f3:50:6d:75:f4:d5:d7:
57:6d:07:8a:b4:fe:f5:d8:cb:47:2c:a9:25:c1:a1:31:7a:b5:
dc:ad:1e:52:27:42:a1:1b:7e:e9:d8:66:c2:bb:2d:da:0b:74:
10:4c:74:b6:b7:bd:c2:d7:d2:1a:ef:3f:06:fc:33:8c:cc:44:
14:45:38:5b:57:32:a2:ee:58:29:b2:b4:60:25:df:7e:06:f5:
14:3f:cf:d1:7a:40:7d:4b:b9:a3:f4:92:83:cb:62:16:d4:63:
a3:02:ab:e2:c0:0c:9a:45:a5:1d:65:0f:4a:4f:13:4a:1a:67:
de:fa:00:ea:49:1c:9d:99:c4:89:60:de:5f:5f:a7:db:f8:f9:
ad:8e:0e:58:c1:12:1a:c2:d2:25:52:f7:61:84:6d:94:17:2d:
19:ea:d5:e8:04:a6:b1:03:7f:56:ce:b6:b9:58:72:70:15:4f:
8b:43:b6:39:da:ec:48:28:2b:9d:89:9d:79:cf:1f:68:07:1c:
ba:a5:00:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:41 2025 by rpki-client