![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
File: Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa (raw, json)
Hash identifier: n0JhCdCcpCVs3+VqY4QuyMmQ26LccSUQr0tOAO62m+8=
Subject key identifier: 4E:2E:6E:6F:31:D7:DF:24:DB:E5:32:1F:6A:4A:CF:2D:3F:02:BA:E4
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 2C
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
Signing time: Wed 01 Mar 2023 01:29:52 +0000
ROA not before: Wed 01 Mar 2023 01:29:52 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 23637
IP address blocks: 202.9.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Mar 1 01:29:52 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=4E2E6E6F31D7DF24DBE5321F6A4ACF2D3F02BAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:76:c1:6f:0a:21:70:d4:69:25:47:a6:ec:
1a:8f:8b:b7:3c:26:f7:ed:ea:d9:a2:e5:f5:55:b4:
0a:46:be:c0:ba:78:08:23:3f:16:3c:56:f4:2a:9b:
45:1b:23:7e:c5:68:76:3f:45:7e:0f:6d:58:a7:21:
a0:22:c9:ec:40:af:d5:d1:71:10:1c:25:7b:2a:1b:
1d:03:7b:7c:17:13:ef:98:08:dd:84:8d:86:c4:ed:
56:32:a3:25:39:c1:fa:a3:21:4c:3d:5c:93:ee:66:
42:f3:a1:a6:a8:c4:db:6a:68:96:e9:48:df:53:c7:
fc:2a:2a:5d:92:32:b2:ff:3c:2e:6d:ae:d7:26:e7:
71:e5:2b:2b:55:25:1c:7b:9d:81:74:bc:f8:55:8f:
de:28:d8:c9:35:99:4f:69:1b:98:83:99:dd:3c:cc:
7b:0e:84:e1:76:ad:23:a7:44:21:0d:f3:8b:40:f0:
86:62:73:71:66:c1:e1:c8:94:2c:ef:e6:69:e3:73:
17:14:80:be:ef:2b:d8:bc:b8:f9:e3:62:12:fd:2a:
3f:12:d3:a9:ec:01:6d:1b:95:ad:1f:4a:f7:f0:92:
a5:fc:d9:a2:e8:f9:2e:04:4c:ea:30:1f:ca:24:cf:
2c:d1:89:01:74:9d:25:28:40:79:d2:28:eb:c1:f7:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:6E:6F:31:D7:DF:24:DB:E5:32:1F:6A:4A:CF:2D:3F:02:BA:E4
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e2:cd:e5:fa:75:df:35:61:42:88:6c:cd:e4:28:c9:03:84:
40:42:f3:7a:68:a0:e4:95:79:9b:de:16:6d:8c:60:16:d8:63:
ff:b7:12:6f:9a:b2:61:a4:9e:cd:26:d5:7d:c9:cb:6d:e8:d1:
00:cf:a5:30:e3:1e:7d:b7:23:db:04:25:93:d8:9f:fe:d5:a0:
26:46:61:1c:92:ab:59:47:9d:bb:cb:fa:b8:b4:4c:12:76:c9:
0c:f7:13:cb:c8:77:6b:39:2e:93:53:75:47:2f:f6:64:b5:3f:
14:99:26:a1:5d:1b:4b:ec:97:e1:a8:0f:87:7c:2c:4d:6b:38:
bf:8f:95:bf:29:9e:89:01:20:0d:30:61:4b:e0:f4:d9:e0:f2:
9b:99:34:96:1c:70:87:5f:47:fe:99:2a:d4:38:a4:be:fc:fa:
20:f0:92:c2:5e:94:e4:18:2f:9a:27:16:ad:c2:6d:7f:9a:ce:
f9:8f:b0:8f:5a:d8:9b:2a:8d:e6:8f:2c:2c:38:1d:fe:cf:fb:
fd:07:85:be:d3:e0:88:90:0a:1a:46:cf:d1:d9:cc:df:f0:0a:
9a:ee:79:1d:65:43:7e:71:3c:aa:b2:01:9c:86:83:8f:65:4d:
ce:3f:1c:55:38:5e:65:28:8b:ad:ac:a6:80:40:01:64:d3:f8:
6e:9c:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:18 2025 by rpki-client