![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
File: KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa (raw, json)
Hash identifier: fTBCiaGUgXsdYzjjpq6YqH+ccYaO4F6sErMGr8X6chY=
Subject key identifier: 2A:F4:3F:65:32:5B:FF:31:11:74:6F:A1:FD:6A:E0:88:2E:17:9F:88
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: BE
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
Signing time: Sat 01 Jul 2023 01:31:18 +0000
ROA not before: Sat 01 Jul 2023 01:31:18 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 9370
IP address blocks: 61.211.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Jul 1 01:31:18 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=2AF43F65325BFF3111746FA1FD6AE0882E179F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:45:a3:39:50:0a:5b:7a:25:83:05:76:6a:
00:95:5d:dc:6b:c8:4e:9c:3f:c9:fa:2f:2f:f1:59:
56:03:6c:7a:8d:78:ad:75:69:ad:d2:15:33:06:65:
10:fb:58:04:a9:c5:71:34:09:dd:e8:8e:f3:6e:9e:
f2:8f:d9:60:c8:dd:31:2b:0c:41:65:8a:a5:0e:f8:
ff:a9:ed:90:2c:5b:06:62:ab:df:43:d1:a4:f4:69:
01:18:fa:ba:31:cf:11:39:f7:6d:f9:5a:89:1b:cb:
b8:67:53:0c:b1:2b:b3:f8:d8:76:5c:3d:57:ab:8e:
20:ff:9f:b4:89:83:bd:e1:29:80:69:a5:98:3a:57:
3a:54:be:af:22:65:4b:e3:50:c0:08:35:53:24:fe:
cc:1f:89:9f:da:2d:00:6d:20:87:6d:e8:47:ed:54:
6d:60:cc:9c:33:0a:2d:60:c6:ae:1e:82:8b:7b:e6:
d0:89:93:77:85:97:89:32:0a:56:d7:d9:95:fa:7a:
d8:d5:41:bc:1e:89:f0:25:15:4b:d1:f5:17:b3:d2:
a8:11:d9:d8:d2:c9:a0:0e:22:d6:da:f4:57:e2:b3:
31:fc:25:2e:09:3e:c7:46:a1:d3:09:94:b3:32:d0:
e8:f1:86:21:78:47:f6:3e:01:ae:e0:4e:8c:0f:e3:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:3F:65:32:5B:FF:31:11:74:6F:A1:FD:6A:E0:88:2E:17:9F:88
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.211.224.0/20
Signature Algorithm: sha256WithRSAEncryption
73:43:5e:86:c9:2d:4d:25:d0:45:17:63:f4:ee:82:d9:54:9a:
b8:f3:87:56:77:2f:b9:c2:00:a0:06:0b:3c:42:ae:fc:8d:d0:
1e:d0:ee:1c:2d:9e:4f:c6:92:7f:63:64:15:49:79:e2:4c:17:
70:d9:47:d0:30:f1:78:0f:2d:22:fb:da:8f:4c:c7:79:68:95:
65:bf:16:38:47:4c:f8:67:b7:48:11:f8:95:b1:06:69:b3:3b:
78:7c:00:27:9b:0b:8b:2d:97:94:e7:58:71:bf:54:94:96:0d:
fe:24:58:a8:8d:d3:df:c5:15:7d:20:d0:bc:49:b6:57:15:ec:
b7:a3:48:6b:9c:51:32:6e:15:8d:6c:5a:34:42:54:38:97:8d:
54:3c:c8:ab:fd:91:43:9f:7b:26:26:44:2a:5d:f4:1d:a6:95:
de:d2:99:a1:34:34:2b:54:86:50:fa:c6:72:4a:12:86:29:e9:
ec:85:e1:38:77:7a:e8:56:a9:3b:25:79:c4:c3:19:3e:a7:29:
f3:01:c6:32:ff:87:c2:b7:65:79:1b:4a:d8:94:21:44:75:bb:
a6:e7:40:0c:e8:8e:7a:d4:be:23:bc:14:8b:61:f7:61:be:bb:
77:4b:2a:72:70:80:23:00:97:1f:48:e8:a3:45:39:f1:5e:2f:
6d:1c:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:12 2025 by rpki-client