![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
File: WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa (raw, json)
Hash identifier: z7p0VvxSka2hM/Ozdcw7v+pMyPnfbKhJ6cq84HfPvqo=
Subject key identifier: 59:B2:0A:48:18:9A:2C:E2:74:D0:ED:C8:CB:FC:87:2A:B0:51:A9:18
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 21
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
Signing time: Wed 10 Jan 2024 00:59:01 +0000
ROA not before: Wed 10 Jan 2024 00:59:01 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 133.232.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Jan 10 00:59:01 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=59B20A48189A2CE274D0EDC8CBFC872AB051A918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:b7:6b:a4:e9:f0:96:d0:eb:b2:6d:2f:fd:
d3:90:e0:1a:a5:8c:ab:be:de:a7:22:49:bc:af:81:
05:d4:0b:9b:5e:d7:b5:a9:f4:07:b3:ec:ae:20:c3:
f7:b5:84:8e:de:0c:39:81:dc:2a:7c:7a:d0:68:a2:
5a:2d:20:4c:15:2e:31:23:9a:f4:a1:37:08:66:56:
6b:00:6c:66:a4:c0:4f:6f:88:3e:0f:0c:8d:3d:38:
ee:c9:27:06:38:bd:85:fc:23:55:c9:55:2a:0d:78:
9b:f7:a7:94:66:ad:7e:0d:04:64:59:49:29:39:e2:
85:92:4d:fb:9c:31:30:a4:3d:9a:56:fd:63:d9:36:
d2:1b:00:86:90:b3:fc:40:89:82:f0:94:b7:d9:35:
69:2e:a4:f8:a1:00:8b:70:1e:7e:5d:8b:3e:42:ab:
8c:e8:9d:9c:4c:e3:b6:6b:5b:f0:38:6a:ec:7a:33:
29:02:13:58:d3:90:25:2f:11:55:a9:dc:67:2d:b4:
ad:5a:33:01:b9:a9:e4:1e:30:63:8d:17:fe:db:28:
8f:ed:df:6f:39:36:e4:97:ee:74:56:4d:20:06:2a:
15:92:58:0b:01:9c:b3:16:51:3b:75:82:57:52:69:
de:9c:b5:1e:2f:49:53:31:d6:18:a8:23:b4:68:62:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:0A:48:18:9A:2C:E2:74:D0:ED:C8:CB:FC:87:2A:B0:51:A9:18
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.232.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:32:7c:b9:a4:64:76:c5:ad:74:09:39:6a:42:0a:c0:32:a6:
be:a8:da:56:30:7b:aa:d9:52:71:45:00:94:55:b8:aa:88:1f:
1a:3b:16:b5:83:ed:2d:7d:66:ad:5d:c3:0e:01:56:4f:90:dd:
fe:4c:2b:e0:5f:0b:87:21:e0:b9:79:13:a6:08:40:de:6a:6b:
c3:17:d8:00:f4:c9:eb:d0:36:6a:c9:f7:70:0e:c9:56:cb:ea:
b1:1c:e3:83:31:da:04:8b:b9:0a:74:25:77:c9:c6:3e:39:50:
91:c1:2f:e1:44:4b:4a:5a:f4:c2:cc:86:da:16:56:f6:85:e3:
ae:c3:4b:ca:fe:13:a8:9c:e8:9e:a2:d8:25:b1:6c:01:9c:57:
fe:26:31:97:e5:7f:0c:b4:f7:ac:71:ee:96:16:e5:77:0b:7a:
4f:61:93:0c:08:ae:87:a8:60:3d:56:79:f1:c2:45:eb:f8:89:
1c:0f:35:3f:90:61:2d:bd:cc:9c:03:79:16:2c:6a:a0:7e:fb:
6c:1b:6d:ba:7a:97:ef:b6:bd:97:73:ae:ee:2c:99:e2:d9:5e:
d0:7a:43:88:eb:4b:56:71:84:8b:43:49:7b:11:5d:e5:29:da:
4c:ad:91:97:26:91:12:31:39:ad:c9:b6:ed:1c:77:b5:bb:ff:
74:02:6e:b4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MDExMDAw
NTkwMVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNTlCMjBBNDgxODlBMkNF
Mjc0RDBFREM4Q0JGQzg3MkFCMDUxQTkxODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALr4t2uk6fCW0OuybS/905DgGqWMq77epyJJvK+BBdQLm17Xtan0
B7PsriDD97WEjt4MOYHcKnx60GiiWi0gTBUuMSOa9KE3CGZWawBsZqTAT2+IPg8M
jT047sknBji9hfwjVclVKg14m/enlGatfg0EZFlJKTnihZJN+5wxMKQ9mlb9Y9k2
0hsAhpCz/ECJgvCUt9k1aS6k+KEAi3Aefl2LPkKrjOidnEzjtmtb8Dhq7HozKQIT
WNOQJS8RVancZy20rVozAbmp5B4wY40X/tsoj+3fbzk25JfudFZNIAYqFZJYCwGc
sxZRO3WCV1Jp3py1Hi9JUzHWGKgjtGhiy48CAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRZsgpIGJos4nTQ7cjL/IcqsFGpGDAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L1diSUtTQmlhTE9KMDBPM0l5X3lIS3JCUnFSZy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAeF6IAwDQYJKoZIhvcNAQELBQADggEBAB0yfLmkZHbFrXQJOWpCCsAypr6o2lYw
e6rZUnFFAJRVuKqIHxo7FrWD7S19Zq1dww4BVk+Q3f5MK+BfC4ch4Ll5E6YIQN5q
a8MX2AD0yevQNmrJ93AOyVbL6rEc44Mx2gSLuQp0JXfJxj45UJHBL+FES0pa9MLM
htoWVvaF467DS8r+E6ic6J6i2CWxbAGcV/4mMZflfwy096xx7pYW5XcLek9hkwwI
roeoYD1WefHCRev4iRwPNT+QYS29zJwDeRYsaqB++2wbbbp6l++2vZdzru4smeLZ
XtB6Q4jrS1ZxhItDSXsRXeUp2kytkZcmkRIxOa3Jtu0cd7W7/3QCbrQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:10 2025 by rpki-client