![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
File: DRB-QiI87JDpBi-4kDe3W5WlpqA.roa (raw, json)
Hash identifier: Pj3hcE4B0tap2NyeJP5qRAwxHkzJT3l5WUEbOvvV4yg=
Subject key identifier: 0D:10:7E:42:22:3C:EC:90:E9:06:2F:B8:90:37:B7:5B:95:A5:A6:A0
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 82
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
Signing time: Tue 30 May 2023 16:06:25 +0000
ROA not before: Tue 30 May 2023 16:06:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ef00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:06:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=0D107E42223CEC90E9062FB89037B75B95A5A6A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:33:71:95:00:72:c0:bb:75:51:fd:72:0e:
13:4b:33:81:38:26:bc:15:bb:43:84:5e:cd:e7:5f:
e2:92:0a:c1:4b:ab:6e:6d:87:7c:b4:1c:ae:a3:b7:
86:d4:f6:3a:9b:96:ac:f8:03:77:9b:c8:bc:e8:dd:
35:9e:d3:d7:9f:ed:25:b8:1c:51:2e:29:db:1f:61:
b8:72:82:06:20:4b:4a:fd:fa:70:9f:d0:e3:d7:6c:
14:24:40:40:6f:e0:3d:ad:72:e3:6a:a3:00:05:6c:
27:fe:ab:2c:6b:aa:11:aa:3a:b7:28:77:a4:08:de:
9a:73:6a:da:8e:27:d8:27:52:7f:48:7c:54:bd:c4:
db:94:3e:50:19:5d:31:fd:fa:7b:73:f3:32:37:dc:
40:1a:7c:1a:2e:37:5b:a3:2c:e1:29:f7:67:6b:8f:
39:97:6c:1a:a4:53:c4:49:c0:d8:cc:c0:91:ad:11:
45:72:b9:84:b6:c2:17:e0:3e:22:90:d3:c9:79:fd:
92:51:80:f9:95:69:00:38:a6:40:64:26:b7:f3:e0:
e4:10:57:0f:23:71:67:d4:d3:bd:8d:84:f7:91:a2:
1f:60:6a:ef:8c:f1:1b:de:78:c4:89:3a:e4:f8:a0:
1b:b4:1c:53:74:38:4d:f6:57:ab:9e:59:2e:cc:72:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:10:7E:42:22:3C:EC:90:E9:06:2F:B8:90:37:B7:5B:95:A5:A6:A0
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ef00::/40
Signature Algorithm: sha256WithRSAEncryption
75:e3:13:37:62:68:43:56:f6:e5:a4:7c:65:a3:d5:63:0f:42:
3e:e6:41:f9:d4:51:e1:cd:6f:8a:3d:f2:9c:d0:5e:ee:f0:b4:
49:90:c3:d4:95:ec:12:c4:43:24:94:52:be:d8:1d:8d:43:e0:
c7:b3:a4:9a:ae:8e:be:03:69:10:2a:e6:99:5f:1c:e3:22:b7:
59:8a:07:bd:6c:79:58:b3:05:3d:39:eb:e8:d6:0c:5c:a8:ce:
53:4b:5d:ff:27:7c:35:96:22:27:ff:78:5f:45:93:26:4f:c2:
b5:12:77:4b:d2:06:91:79:e7:8b:38:38:00:23:a7:a6:b9:29:
49:d6:f9:77:b5:00:62:ba:4b:db:e0:53:70:88:70:5c:78:0c:
cf:20:fe:f8:47:38:8b:88:5f:14:ec:49:e1:55:61:58:78:52:
51:96:d6:46:cd:51:b3:09:bf:3f:e1:d4:2d:a8:68:54:f0:d5:
31:3d:ec:4c:d8:a4:29:d1:4c:53:d2:b6:62:f3:df:c9:04:a9:
94:1b:3c:f6:8f:6f:e9:c7:69:36:ad:76:54:a4:d2:9b:9a:1f:
aa:e7:86:89:65:ec:3c:0a:18:ad:e1:57:a0:59:ce:fc:cd:98:
87:20:33:6c:87:74:02:dd:2a:25:fd:31:44:93:1d:98:5e:c2:
e8:6a:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:26 2025 by rpki-client