![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
File: 8FVZOKh3H2QG-RGVnR9h-9WI234.roa (raw, json)
Hash identifier: e2t7B+VFhYpCVvqlp4VM2eJJ0pnNdf0XK8Iv7vQR68I=
Subject key identifier: F0:55:59:38:A8:77:1F:64:06:F9:11:95:9D:1F:61:FB:D5:88:DB:7E
Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial: 3D
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
Signing time: Tue 17 Oct 2023 06:22:46 +0000
ROA not before: Tue 17 Oct 2023 06:22:46 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 38639
IP address blocks: 2402:c800:fff0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Validity
Not Before: Oct 17 06:22:46 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=F0555938A8771F6406F911959D1F61FBD588DB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:57:bd:27:35:ea:4d:a2:ea:3a:52:24:9f:
f4:c0:9a:26:bd:b1:f9:3e:6c:4c:eb:04:4b:d1:61:
26:04:cc:3a:46:1f:ba:8d:92:7b:96:23:af:b1:09:
4f:eb:67:d1:87:2f:8e:d0:6d:03:98:25:0d:61:1f:
62:fe:04:c3:c2:ca:83:73:27:33:8d:24:7a:5e:38:
b2:2e:10:72:92:37:6b:f8:34:ed:98:d5:db:1e:5b:
de:27:69:ca:7f:68:f7:f7:4b:c4:1d:c0:b7:19:eb:
5b:cb:b2:fb:b6:9e:4c:b9:41:18:9b:b3:30:b2:3e:
7f:77:2b:e3:0d:c2:03:e5:e0:62:83:df:95:6b:38:
53:ef:6e:4a:26:1e:52:f0:9d:45:d7:2b:00:a8:27:
4e:82:94:b4:a2:5b:f5:1c:6d:48:a6:44:e3:ef:ef:
79:e7:10:8d:9a:aa:b1:98:ed:96:ed:cb:c0:62:e1:
bf:ee:de:77:f7:0e:c7:77:39:51:c9:88:68:13:75:
e7:82:6e:66:ad:a0:80:fe:85:c1:b5:c3:41:77:f8:
a8:ee:58:9c:7c:01:6d:4a:04:93:0f:1f:43:3b:ab:
d9:b4:4a:4d:27:03:98:8a:e5:92:30:03:91:4f:a6:
02:12:39:d4:ef:86:74:26:39:53:49:02:72:e2:11:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:59:38:A8:77:1F:64:06:F9:11:95:9D:1F:61:FB:D5:88:DB:7E
X509v3 Authority Key Identifier:
keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c800:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
73:33:5e:70:16:20:71:4d:36:b5:de:9e:d4:60:11:60:69:c5:
83:fb:84:f0:28:b3:09:12:94:78:95:fe:68:41:53:fc:60:ca:
0b:0f:7f:e1:5a:17:a1:5a:e1:76:8c:99:26:ef:d5:d2:24:0f:
e0:f1:e1:4a:56:cd:7c:55:47:27:63:93:f3:0e:0c:ca:6b:96:
06:aa:53:c0:da:f3:c0:4f:6f:b8:ea:54:5e:cd:09:3c:8b:ce:
a9:65:dd:07:01:fa:5c:e8:92:2d:9a:35:9f:b5:f0:ed:11:c8:
0b:2e:7b:40:01:ad:0d:e0:c2:50:4a:aa:26:b1:45:ca:6d:be:
22:19:38:6e:98:90:fe:08:47:c2:76:70:ef:ff:1f:d3:78:a7:
87:34:eb:c8:aa:68:eb:ef:c1:9d:65:1f:a5:cd:56:87:2f:8c:
78:1c:86:10:df:1e:b7:53:21:7d:7f:84:b6:d2:9a:56:8a:ab:
21:2b:aa:34:cf:d3:5f:23:2e:1b:9d:c0:13:85:a8:99:0d:fc:
02:ca:64:7e:12:74:37:9b:76:09:c1:91:20:ff:07:aa:b3:12:
f7:74:0a:66:68:75:04:17:78:17:c6:1b:b7:5e:c9:1c:28:01:
e2:0f:c1:de:39:8e:8d:89:50:6d:26:89:43:a3:f6:9e:33:a2:
9b:78:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:28 2025 by rpki-client