![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
File: trnQa_rytK5QGU5TX6kn4UuQQGk.roa (raw, json)
Hash identifier: 04N3xljv/8KBdfZbZ1yD64RNqbs5jCtyPArgGyO//a0=
Subject key identifier: B6:B9:D0:6B:FA:F2:B4:AE:50:19:4E:53:5F:A9:27:E1:4B:90:40:69
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
Signing time: Tue 30 May 2023 16:12:30 +0000
ROA not before: Tue 30 May 2023 16:12:30 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2d00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 16:12:30 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B6B9D06BFAF2B4AE50194E535FA927E14B904069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:e9:79:af:99:72:03:c3:fb:f0:5c:24:c2:
0e:9c:04:b0:39:5a:a7:d7:3d:7c:51:9a:ab:1f:9c:
2f:24:71:2a:0b:1c:80:72:0a:6c:7f:3f:b2:a9:b9:
1c:70:07:24:46:d4:66:ea:62:c2:40:54:79:07:d1:
6e:ac:fb:09:b5:16:ad:9c:d6:45:83:74:da:af:0c:
3e:12:15:0c:75:a5:09:ae:47:e8:52:06:f4:82:13:
7d:03:0b:d0:c3:ff:33:4c:4b:2d:98:a2:69:cc:61:
f3:0c:8c:d0:af:1d:c4:13:b9:0d:ae:9e:34:e9:e7:
e8:9e:1d:f2:07:f7:4b:15:34:84:8c:d1:fb:75:69:
3e:1a:77:8f:58:ff:7b:dc:e8:de:d8:a3:1d:9a:e2:
c0:e2:65:e9:19:fa:c7:91:c1:87:83:ec:f8:9b:1c:
45:72:cf:dc:f0:c3:f4:a9:c8:e0:db:be:bd:93:d6:
47:e7:c8:52:74:f8:a5:92:12:c1:8a:80:34:e9:b9:
e3:a1:43:36:f2:2a:0e:93:ad:4e:d3:e5:a7:8f:5d:
0d:33:fb:bb:c3:d5:0f:a7:0e:f4:23:76:24:01:45:
ed:2c:59:5b:ad:b3:db:27:86:03:ee:86:07:ba:3b:
12:71:bd:c2:7b:25:34:ec:ed:1d:98:fa:1a:14:4f:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:D0:6B:FA:F2:B4:AE:50:19:4E:53:5F:A9:27:E1:4B:90:40:69
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2d00::/40
Signature Algorithm: sha256WithRSAEncryption
6b:a4:35:c0:2b:df:6c:ce:0c:b1:8e:f4:a4:b1:73:3f:ac:de:
2b:be:ca:dc:dc:91:1a:fc:38:4e:9f:5f:bd:ae:ff:75:7a:3c:
f8:5e:89:34:2b:19:19:ce:94:c6:36:69:21:9e:04:0d:de:4b:
1b:65:34:6c:0c:b2:23:01:4d:fa:6a:a5:ff:46:e0:51:45:14:
71:c2:b0:b6:d0:c4:77:35:5f:8b:e9:25:64:77:f1:c8:df:ae:
d8:a4:99:6e:44:1a:88:5e:f5:a3:59:1c:4c:45:78:4f:21:61:
1b:29:57:d3:db:98:d5:85:09:c7:6a:fd:19:04:b2:d5:5e:1d:
3e:af:7a:1e:fa:36:c6:37:f3:d4:92:8f:55:c0:24:1c:ac:5c:
07:ff:9c:51:95:a7:52:39:bb:e1:71:52:c9:a3:26:8e:1b:d6:
6b:06:d1:3b:cb:bf:3d:ba:2e:e2:d2:22:0c:96:8a:2b:b9:1c:
c7:c3:83:a6:f1:40:2c:41:7c:86:38:d4:22:43:18:bd:39:9c:
14:73:0c:c3:ad:4b:a4:bb:d3:fb:16:8c:f6:32:1b:88:73:92:
20:07:e4:ef:7b:93:f7:0e:04:74:61:72:f5:76:36:54:6e:ba:
ab:6f:27:5f:0e:ab:d1:9a:34:20:89:1b:ab:c2:30:aa:35:32:
32:d2:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:45 2025 by rpki-client