![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
File: UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa (raw, json)
Hash identifier: f2kQBYjg8KLFibFXHWv0f2F++/UcIhwWBwko2E50ras=
Subject key identifier: 52:A6:67:4C:2C:32:B8:78:88:68:CF:D6:5F:4B:B4:1C:6F:C5:F4:FD
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0138
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
Signing time: Tue 30 May 2023 17:30:03 +0000
ROA not before: Tue 30 May 2023 17:30:03 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5a00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:30:03 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=52A6674C2C32B8788868CFD65F4BB41C6FC5F4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:ac:d1:99:e2:33:a1:50:99:8c:b5:de:cb:
c9:29:89:74:6a:54:de:ed:8c:58:b0:c0:ab:d8:31:
bc:c3:2b:f4:9b:3b:de:e1:ab:56:ab:d5:06:f1:76:
2f:c4:f8:fe:10:ea:fc:8f:74:fa:36:3d:6c:56:c2:
f0:a1:96:df:e1:37:b0:6f:1d:3d:3f:87:5b:51:fe:
71:18:44:9b:e5:6f:05:f9:94:17:6a:1d:ab:56:bb:
f5:6f:a2:3f:54:45:5f:14:72:8f:f2:40:a3:08:10:
66:b0:1b:1c:12:59:d8:8b:30:d0:2f:63:e7:98:2a:
ce:05:ea:91:51:da:2e:40:58:b5:81:74:aa:1f:44:
1c:0e:9d:91:aa:4c:97:d1:3c:ba:63:e9:a4:fc:9a:
e0:58:ea:e9:29:eb:10:9b:a6:cc:64:55:4a:57:d0:
b8:3e:c5:c3:38:68:dc:4e:1a:50:ea:0c:05:be:39:
61:da:be:b7:06:dc:e2:7b:2d:e1:c4:15:ef:e9:f2:
d4:fd:b8:14:b9:01:9d:27:41:4d:e6:28:a3:c1:c3:
83:a6:8b:36:8c:ba:3a:13:3d:0e:01:c3:79:45:68:
bf:43:0c:ae:b3:1a:f7:a5:9f:c9:99:fd:64:ef:2f:
ac:2a:42:a2:2a:f8:45:8b:be:3f:96:6e:98:0a:e2:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:67:4C:2C:32:B8:78:88:68:CF:D6:5F:4B:B4:1C:6F:C5:F4:FD
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5a00::/40
Signature Algorithm: sha256WithRSAEncryption
45:08:c2:1c:51:17:9e:7a:5e:66:fb:70:ba:c4:d5:f5:9b:ad:
2b:9a:ca:6b:83:9b:48:fc:e1:0c:8a:aa:2a:1d:26:24:6a:26:
da:bb:8d:d1:22:56:a7:2c:b3:cc:26:6d:72:b2:dc:d3:15:35:
0b:2c:8b:f0:08:00:02:5f:2a:e7:38:49:83:b9:45:32:43:46:
9b:5a:2a:6b:52:66:16:13:a3:db:ea:de:67:76:47:cb:3b:b8:
9a:63:e0:4f:ce:ac:f9:13:ba:17:85:2b:da:ff:59:e3:75:fd:
7c:b0:20:11:f7:14:62:3a:34:33:a4:13:86:57:07:8d:10:65:
1a:99:e8:08:73:ff:f6:ac:27:cf:e6:be:b8:89:52:0a:89:73:
6f:c8:f6:01:04:8d:88:5e:ef:78:69:8d:b5:37:0b:c6:bd:a2:
cb:b3:16:3c:fd:e1:d7:c1:0b:f3:72:1a:75:e6:92:4c:69:f3:
77:42:b7:65:73:a4:a5:80:4c:45:3b:20:15:0e:0b:7d:02:0f:
ce:75:e3:67:f3:2a:2d:3b:21:86:09:b4:de:37:47:1d:f0:e5:
88:ee:94:89:fc:d3:5f:bd:4c:bf:d4:7d:6c:c8:af:9d:0b:7f:
40:13:2a:a0:84:9c:dd:1c:70:95:dd:92:53:48:e0:9a:a9:36:
24:a9:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:12 2025 by rpki-client