![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/vfmfJqBQkQ9e_q3lcq2XPBg0T1M.roa
File: vfmfJqBQkQ9e_q3lcq2XPBg0T1M.roa (raw, json)
Hash identifier: 86AoCrY41vSQJSbXW5f/9hirunL0UpHg5S1txFatPdw=
Subject key identifier: BD:F9:9F:26:A0:50:91:0F:5E:FE:AD:E5:72:AD:97:3C:18:34:4F:53
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 02
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/vfmfJqBQkQ9e_q3lcq2XPBg0T1M.roa
Signing time: Tue 16 Mar 2021 04:45:36 +0000
ROA not before: Tue 16 Mar 2021 04:45:36 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 124.40.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:36 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=BDF99F26A050910F5EFEADE572AD973C18344F53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:d3:da:24:48:13:cc:5e:ae:9c:52:5d:64:
f0:ba:69:0a:32:6c:8a:ef:c0:22:2c:c2:9c:5d:8f:
e5:f1:a6:4e:6e:53:1d:99:c4:d8:4c:02:87:7b:08:
99:68:10:36:71:b5:25:c6:9e:52:dd:0a:52:77:8a:
14:13:42:e8:a6:1d:42:8e:c2:aa:6f:0d:a1:5c:ed:
7c:8d:96:a0:c9:bd:9b:52:1c:3a:38:89:3f:90:c6:
98:fa:ad:33:58:c1:16:cd:54:64:52:1a:06:52:b2:
cb:02:9a:1c:ea:66:d1:4b:e6:b1:f8:e4:df:32:57:
74:07:b5:41:11:2f:7b:be:4f:84:43:d2:c4:95:f5:
0b:0d:eb:54:f9:44:9d:f4:f1:28:7d:40:f2:a4:c1:
b8:4b:3c:22:cd:2c:7b:08:00:0c:f7:e5:e8:d4:90:
3d:3e:49:24:93:72:0f:31:bd:aa:93:95:d6:86:6b:
14:9d:10:80:67:ef:ee:2f:33:10:c9:73:ab:04:7c:
6f:0f:59:d6:fa:54:0b:80:e8:a2:83:bf:ba:fc:e6:
df:8a:8e:fc:ef:7b:eb:b3:df:db:8e:0e:dd:31:d5:
62:2a:c2:63:eb:f8:eb:8a:7e:6b:2b:cb:5f:d1:fd:
24:74:e4:c8:34:82:86:42:b8:51:af:f5:76:70:63:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:9F:26:A0:50:91:0F:5E:FE:AD:E5:72:AD:97:3C:18:34:4F:53
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/vfmfJqBQkQ9e_q3lcq2XPBg0T1M.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:89:78:8e:45:50:50:d1:dc:cd:72:a5:b7:a7:a4:13:e5:33:
d6:95:45:a1:a5:98:94:6d:1a:af:e6:41:98:27:81:95:d2:48:
f7:5f:31:d1:ca:6c:a4:ae:ef:67:29:77:9d:90:93:cf:ce:bd:
84:7a:ee:11:c1:a7:a6:96:68:1c:5d:7e:ec:71:7c:09:e6:d8:
80:43:a7:4c:b4:6b:f3:55:ac:80:ba:02:28:9c:cf:63:05:bb:
45:25:dd:eb:ad:17:62:cd:93:42:76:02:54:42:76:2d:d2:61:
f7:67:ab:4d:97:ce:50:d0:34:09:b1:3d:30:58:25:1c:31:a5:
f3:20:26:56:97:4d:ee:49:92:71:72:cd:98:db:e2:80:c7:81:
66:46:65:30:2e:f0:9d:47:7b:17:e3:8d:39:3f:fd:90:a1:7d:
96:13:cd:b6:6b:7d:65:2a:7e:45:58:00:1a:e2:44:35:6c:16:
16:e0:b4:8a:7d:7f:ec:d7:24:19:02:a4:ca:e7:9a:bd:e1:5b:
24:ef:90:a6:75:d2:27:dc:06:24:cf:c9:b6:ca:95:43:4f:16:
c5:b8:9c:05:62:42:a0:bd:e9:5b:ee:fd:fa:56:ce:9d:3c:ba:
c1:19:48:01:25:fc:69:7e:ac:13:d0:65:84:b6:37:14:01:cf:
35:b4:30:eb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MDBF
RjM1OEJDQkUxNEEzNThDQTRFRUU0MUI0RTkwREM5MjNFOUQyMB4XDTIxMDMxNjA0
NDUzNloXDTIyMDMxNTA4MzQzNVowMzExMC8GA1UEAxMoQkRGOTlGMjZBMDUwOTEw
RjVFRkVBREU1NzJBRDk3M0MxODM0NEY1MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMtu09okSBPMXq6cUl1k8LppCjJsiu/AIizCnF2P5fGmTm5THZnE
2EwCh3sImWgQNnG1JcaeUt0KUneKFBNC6KYdQo7Cqm8NoVztfI2WoMm9m1IcOjiJ
P5DGmPqtM1jBFs1UZFIaBlKyywKaHOpm0Uvmsfjk3zJXdAe1QREve75PhEPSxJX1
Cw3rVPlEnfTxKH1A8qTBuEs8Is0sewgADPfl6NSQPT5JJJNyDzG9qpOV1oZrFJ0Q
gGfv7i8zEMlzqwR8bw9Z1vpUC4DoooO/uvzm34qO/O9767Pf244O3THVYirCY+v4
64p+ayvLX9H9JHTkyDSChkK4Ua/1dnBjacsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS9+Z8moFCRD17+reVyrZc8GDRPUzAfBgNVHSMEGDAWgBRQDvNYvL4Uo1jKTu5B
tOkNySPp0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L1VBN3pXTHktRktOWXlrN3VRYlRwRGNrajZkSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VBN3pXTHktRktOWXlrN3VRYlRwRGNr
ajZkSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzQvdmZtZkpxQlFrUTllX3EzbGNxMlhQQmcwVDFNLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXwoQDANBgkqhkiG9w0BAQsFAAOCAQEA
LYl4jkVQUNHczXKlt6ekE+Uz1pVFoaWYlG0ar+ZBmCeBldJI918x0cpspK7vZyl3
nZCTz869hHruEcGnppZoHF1+7HF8CebYgEOnTLRr81WsgLoCKJzPYwW7RSXd660X
Ys2TQnYCVEJ2LdJh92erTZfOUNA0CbE9MFglHDGl8yAmVpdN7kmScXLNmNvigMeB
ZkZlMC7wnUd7F+ONOT/9kKF9lhPNtmt9ZSp+RVgAGuJENWwWFuC0in1/7NckGQKk
yueaveFbJO+QpnXSJ9wGJM/JtsqVQ08WxbicBWJCoL3pW+79+lbOnTy6wRlIASX8
aX6sE9BlhLY3FAHPNbQw6w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:59 2025 by rpki-client