![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/hDeLU9-U3Dw7Zmun7TonZpEJ4hQ.roa
File: hDeLU9-U3Dw7Zmun7TonZpEJ4hQ.roa (raw, json)
Hash identifier: wBF9OsCU//NsCfPA78ANF0fC3tsf0BRsEF7L1AKHDYc=
Subject key identifier: 84:37:8B:53:DF:94:DC:3C:3B:66:6B:A7:ED:3A:27:66:91:09:E2:14
Certificate issuer: /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial: 10
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/hDeLU9-U3Dw7Zmun7TonZpEJ4hQ.roa
Signing time: Mon 26 Sep 2022 01:11:52 +0000
ROA not before: Mon 26 Sep 2022 01:11:52 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 9617
IP address blocks: 2400:3800::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Validity
Not Before: Sep 26 01:11:52 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=84378B53DF94DC3C3B666BA7ED3A27669109E214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7e:e1:3c:6c:84:1f:8e:d9:80:28:42:37:28:
93:9e:ef:14:6e:8c:9f:86:6e:dd:13:35:8e:78:d5:
ea:22:5e:51:4f:46:35:b3:9c:61:da:ad:3f:c8:e9:
f2:ca:38:cc:a6:54:89:d6:68:a5:06:65:eb:2e:57:
3b:b0:ba:74:ef:1f:e2:16:9d:fb:25:0e:c4:c4:32:
35:6f:a9:e1:ff:df:ac:f3:65:d7:f1:da:12:b8:13:
79:a5:23:96:fe:34:e6:78:29:8e:d8:3c:f3:33:0e:
13:33:7c:1c:f5:3d:5d:25:1c:b3:34:04:6d:d6:78:
a4:7c:7f:e3:c7:53:b8:55:da:1f:2e:cb:8e:3d:e3:
44:73:e1:57:45:83:00:fc:b3:96:9e:97:d2:d9:41:
4a:a6:0a:10:c6:b6:07:0f:72:3d:cd:23:e2:de:88:
56:15:b1:e5:8c:8b:16:68:7f:f7:5e:a9:0c:2f:26:
90:b8:6a:7f:74:82:7d:be:15:bf:1d:a5:0a:ce:dd:
f4:fd:78:95:15:81:dd:07:d5:c6:2d:d0:7e:f3:e4:
62:06:2f:a4:28:d2:3a:0f:00:5b:70:ee:8d:93:c4:
8d:ed:b0:63:22:bc:a6:b8:b6:cb:8c:f9:c0:98:c6:
d3:8e:93:32:0a:c7:04:5a:fb:df:c7:9b:da:e9:94:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:37:8B:53:DF:94:DC:3C:3B:66:6B:A7:ED:3A:27:66:91:09:E2:14
X509v3 Authority Key Identifier:
keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/hDeLU9-U3Dw7Zmun7TonZpEJ4hQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:3800::/32
Signature Algorithm: sha256WithRSAEncryption
7f:39:0f:bc:9e:0b:d8:89:3d:24:9b:8c:12:d1:e5:58:21:cb:
56:c7:16:4c:35:3d:5c:be:26:1a:81:08:5e:89:96:ab:7a:8a:
58:f1:40:46:21:71:30:68:d6:73:3b:71:87:97:62:0a:45:a2:
21:ae:8c:df:b8:6c:1c:70:d8:47:9e:ea:44:bd:f4:d6:2f:21:
91:73:45:6f:0d:00:e0:4c:02:11:e9:2d:5f:06:f8:8b:29:3a:
43:91:51:94:31:0a:4d:85:fc:0d:38:00:77:1e:00:e0:5b:7b:
9a:7c:04:7a:92:7a:75:10:08:7e:85:74:13:e6:8c:a0:a8:f5:
be:8a:18:ee:b8:f1:bf:ee:53:60:c2:bd:3a:3c:ad:a4:ab:e6:
4a:cb:9c:d8:ad:63:74:57:fb:e0:5c:cc:c9:0b:e0:c7:7a:af:
89:e5:7b:fb:4d:0e:49:75:fe:c4:30:48:14:3d:5e:23:a3:e1:
6f:b1:ee:07:59:f1:d9:2a:35:39:2b:26:99:c9:07:c7:30:13:
7d:bc:ec:e8:3b:e7:d5:7c:5b:1d:05:14:a8:b9:2a:3d:b3:6b:
eb:e1:2f:05:25:24:ef:a8:c0:e7:8a:61:61:93:9e:a7:4d:8c:
13:a2:52:29:dc:6b:63:6b:9b:ac:68:10:b2:2a:35:83:38:3b:
50:57:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:03 2025 by rpki-client