![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
File: 25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa (raw, json)
Hash identifier: CkaDdpEeNTyXSjYHBblhMeaUWKqcnMfZ77FW4ckoaB8=
Subject key identifier: DB:96:44:8F:19:E6:5B:E5:E9:03:F3:30:62:5A:00:88:38:BE:F1:78
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 6B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
Signing time: Tue 30 May 2023 16:06:17 +0000
ROA not before: Tue 30 May 2023 16:06:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:8900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:06:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DB96448F19E65BE5E903F330625A008838BEF178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:36:09:f9:e6:14:7b:1c:0e:0f:0c:39:9e:
33:9d:1b:45:69:96:77:dd:d9:ce:73:a9:1e:96:9a:
6e:6e:0c:fc:af:a2:86:a1:dd:8b:7b:fd:9f:da:94:
6b:35:fe:da:d2:e3:bb:48:61:46:49:5e:99:b4:62:
15:d9:26:22:73:e6:86:31:04:38:68:97:fe:6f:2f:
04:97:e7:37:31:7c:b0:11:67:f4:cc:25:48:c1:5e:
f3:46:18:b0:f7:64:e9:8c:31:62:0c:cc:54:14:2d:
c5:3f:8d:f7:96:bc:66:5d:41:a9:65:b9:91:d9:fd:
9b:54:54:1d:11:7f:f4:12:ce:7f:88:f0:0e:b8:d0:
88:18:a3:af:75:14:d8:d1:57:81:67:a0:57:6f:39:
e6:c5:ba:5b:df:c1:cd:e6:3b:e1:d8:e2:4c:f4:ed:
5e:0f:12:47:69:42:b0:c6:b4:b6:08:ff:82:a4:89:
56:68:df:54:f8:fb:20:33:bb:45:42:c6:3d:c5:17:
5a:7f:da:b3:ed:a8:fe:8a:cd:67:59:08:74:45:cb:
de:be:12:e3:b8:0f:1f:80:56:2a:f5:4a:5b:ca:1c:
3b:50:8d:62:29:8e:a5:82:40:e0:8f:ee:0f:21:3d:
c6:a5:4a:78:27:47:d6:53:17:b8:f9:bf:bb:27:1f:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:44:8F:19:E6:5B:E5:E9:03:F3:30:62:5A:00:88:38:BE:F1:78
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8900::/40
Signature Algorithm: sha256WithRSAEncryption
91:0f:fd:d6:c5:7e:99:91:ef:3e:cd:1c:ff:ef:a4:b2:01:03:
14:b4:22:55:0d:0f:98:30:02:89:96:d6:f4:b1:76:1c:2b:29:
c7:d8:f3:eb:e0:15:46:30:0c:c1:94:e1:8c:db:c2:df:9a:4e:
0a:47:60:ad:5c:5a:f9:8a:e7:eb:c7:14:2b:fe:ff:3a:60:07:
21:01:15:75:91:d5:0c:3c:7e:b4:fd:9f:a9:fd:38:8a:7a:4c:
fb:22:89:ea:9e:7d:2a:97:4e:97:bd:37:d4:68:3e:32:44:4b:
93:33:37:70:f9:dc:cd:df:30:3f:a7:71:80:e6:4f:9c:ec:95:
c2:c7:03:11:e5:24:1d:11:b2:38:57:15:bc:f3:dc:04:5f:82:
84:9a:ca:bf:44:f4:39:71:e0:d5:19:f7:f1:cb:6c:63:45:31:
8d:1f:05:e6:3c:f0:3e:e7:f2:76:ec:95:90:42:14:e3:8d:fb:
8f:1d:46:ea:a3:5a:c0:7b:5a:1e:85:3e:9b:7e:06:85:cf:3a:
0b:b0:e3:d4:8c:f7:05:c9:79:98:88:27:c4:6d:55:b4:49:79:
89:b9:46:9f:92:34:c7:e4:73:05:95:ba:eb:b3:ce:ae:c7:4a:
36:ea:40:9c:28:65:16:41:5a:c6:33:60:a6:35:4b:07:db:4c:
dc:df:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:53 2025 by rpki-client