![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
File: S7EiXVW5woNk5QxLU7T9GfkZUoM.roa (raw, json)
Hash identifier: fIH4WB+I6xYqdUbpNOUyZIW83WzLzMOc5eZ+xR6gqZc=
Subject key identifier: 4B:B1:22:5D:55:B9:C2:83:64:E5:0C:4B:53:B4:FD:19:F9:19:52:83
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 35
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
Signing time: Sun 01 May 2022 01:31:21 +0000
ROA not before: Sun 01 May 2022 01:31:21 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 9370
IP address blocks: 2406:ce00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: May 1 01:31:21 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=4BB1225D55B9C28364E50C4B53B4FD19F9195283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:46:8b:e3:e5:a1:2b:58:22:6a:27:10:24:
fa:e5:b3:b0:7a:4e:0c:5e:5d:e7:4e:d8:8d:35:9d:
97:6f:43:b3:93:91:48:1d:55:9d:76:da:7d:8c:a0:
dd:a3:1a:f1:7f:02:a8:a0:bc:a2:d2:be:66:80:e0:
c5:51:90:6b:26:5f:12:a2:3c:23:95:5c:0d:d5:ff:
88:5b:14:6e:56:44:85:d8:69:57:96:ba:31:b7:2b:
31:1c:c7:a7:5b:93:4a:c0:be:a1:32:47:5c:f1:6b:
7f:74:7f:ff:33:6d:15:f7:b7:f7:10:ba:09:4e:ca:
32:f0:99:4b:f1:11:e7:39:c8:e7:5f:66:bc:d0:3d:
b6:ec:bc:0f:d2:d2:35:0d:41:f4:e5:ee:f8:22:4d:
55:22:50:02:7b:95:8e:40:2e:bc:38:91:e2:ee:1d:
9e:c9:3d:4b:2e:92:36:05:52:57:2a:4c:80:c5:4b:
cb:31:17:01:4c:dd:9e:10:3d:65:2a:24:1b:61:af:
2f:dd:ff:88:ed:fa:ce:7f:ab:cf:38:ab:fd:63:60:
48:b9:c9:c2:34:d3:20:8f:09:66:16:37:3e:8f:11:
2d:d0:15:e9:0e:19:14:a2:4a:de:24:94:b0:73:cb:
50:60:6e:25:15:4b:2c:ac:9a:74:bd:78:09:31:2a:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:22:5D:55:B9:C2:83:64:E5:0C:4B:53:B4:FD:19:F9:19:52:83
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
44:f9:0f:9c:bb:38:c9:15:24:43:98:61:f8:e8:c8:cc:9a:13:
d2:da:5b:dd:61:cf:9e:c1:bb:77:0f:27:63:7d:7b:b7:37:1a:
c1:af:ce:8a:3d:41:ca:15:08:39:44:79:fb:0f:41:60:47:fd:
49:5e:f3:3a:1c:af:9e:e1:16:c3:13:47:1f:98:f0:ad:ea:c4:
ba:0b:d4:68:6c:01:2f:f7:f1:a3:72:fb:26:5a:f2:e7:32:9a:
cb:e3:5d:0e:96:bc:b6:40:cf:75:19:6a:53:3d:bb:4a:94:7f:
96:d6:2a:46:27:86:8f:f4:0f:5d:df:44:be:2e:1c:46:71:a7:
b9:6e:a5:c9:7b:99:c9:ed:b7:7e:6c:09:cc:34:6a:f6:3d:b4:
71:9d:0d:e9:f2:af:d3:3a:9f:43:3b:b2:0e:db:42:4a:ed:6f:
fe:5d:1e:d3:d2:f8:3e:92:fa:5f:3f:28:1d:3a:14:f2:d6:ff:
93:e3:84:ed:3f:da:0f:4c:e6:c6:0a:ef:60:2b:b3:87:1d:fb:
73:bd:81:eb:a3:d5:91:86:e6:d8:9a:63:6e:02:0c:fd:87:e0:
98:cd:03:0e:69:5d:06:83:9e:b7:01:19:7c:30:0f:d8:8f:8d:
f4:3e:ab:cc:1c:fe:c4:19:02:f5:af:3c:5c:70:85:29:82:c7:
17:76:e7:51
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTIyMDUwMTAx
MzEyMVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNEJCMTIyNUQ1NUI5QzI4
MzY0RTUwQzRCNTNCNEZEMTlGOTE5NTI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9uRovj5aErWCJqJxAk+uWzsHpODF5d507YjTWdl29Ds5ORSB1V
nXbafYyg3aMa8X8CqKC8otK+ZoDgxVGQayZfEqI8I5VcDdX/iFsUblZEhdhpV5a6
MbcrMRzHp1uTSsC+oTJHXPFrf3R//zNtFfe39xC6CU7KMvCZS/ER5znI519mvNA9
tuy8D9LSNQ1B9OXu+CJNVSJQAnuVjkAuvDiR4u4dnsk9Sy6SNgVSVypMgMVLyzEX
AUzdnhA9ZSokG2GvL93/iO36zn+rzzir/WNgSLnJwjTTII8JZhY3Po8RLdAV6Q4Z
FKJK3iSUsHPLUGBuJRVLLKyadL14CTEqrdkCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRLsSJdVbnCg2TlDEtTtP0Z+RlSgzAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4L1M3RWlYVlc1d29OazVReExVN1Q5R2ZrWlVvTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQMkBs4AMA0GCSqGSIb3DQEBCwUAA4IBAQBE+Q+cuzjJFSRDmGH46MjM
mhPS2lvdYc+ewbt3DydjfXu3NxrBr86KPUHKFQg5RHn7D0FgR/1JXvM6HK+e4RbD
E0cfmPCt6sS6C9RobAEv9/GjcvsmWvLnMprL410Olry2QM91GWpTPbtKlH+W1ipG
J4aP9A9d30S+LhxGcae5bqXJe5nJ7bd+bAnMNGr2PbRxnQ3p8q/TOp9DO7IO20JK
7W/+XR7T0vg+kvpfPygdOhTy1v+T44TtP9oPTObGCu9gK7OHHftzvYHro9WRhubY
mmNuAgz9h+CYzQMOaV0Gg563ARl8MA/Yj430PqvMHP7EGQL1rzxccIUpgscXdudR
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:04 2025 by rpki-client