![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
File: ylSZuLILZkPIawFOfYhZnz9XgAo.roa (raw, json)
Hash identifier: AX7ZhVxn+LhVGGZGzvqVQZfBNO/TE5rkTgR3ed6mSg8=
Subject key identifier: CA:54:99:B8:B2:0B:66:43:C8:6B:01:4E:7D:88:59:9F:3F:57:80:0A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0175
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
Signing time: Tue 30 May 2023 17:34:20 +0000
ROA not before: Tue 30 May 2023 17:34:20 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4e00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: May 30 17:34:20 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=CA5499B8B20B6643C86B014E7D88599F3F57800A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:ce:c3:5c:f0:0c:11:ee:4c:c3:9f:e1:ba:
d2:66:e9:d5:9e:87:5e:df:d8:5f:0d:2e:66:61:53:
07:2e:50:d5:87:12:b2:1a:be:56:dd:19:1b:6b:ec:
a5:1c:39:4c:91:7f:a2:76:16:63:60:bd:69:2d:3a:
e8:80:bd:2c:fa:8f:1d:35:f4:c6:28:b3:79:82:97:
55:95:90:9d:41:0e:d3:db:26:d6:c0:ba:e8:df:4e:
38:50:88:7e:3c:ad:bb:2c:75:1b:a8:69:a3:5d:d3:
f9:3d:89:8f:ff:d7:67:18:f1:0b:50:77:20:77:8a:
0e:24:58:bc:49:68:1b:31:13:21:58:0c:72:a6:b1:
e5:62:09:11:47:c9:a9:87:d7:1e:97:06:ac:2b:a5:
66:2c:89:0a:bf:d5:2d:27:36:b3:3b:a7:9e:0f:9b:
51:a1:07:54:e1:3d:94:94:21:25:a4:43:c7:ef:4a:
6b:c2:de:b7:ff:01:21:17:89:6d:f1:55:c4:f5:7a:
d8:15:70:33:f3:33:84:e0:0f:cf:5a:a8:b9:b5:86:
0b:29:1d:b5:66:47:1a:79:90:65:d7:b7:b7:d7:e7:
d4:a4:15:9e:6d:7c:f1:7e:e2:b8:b5:2b:54:30:a3:
fc:99:38:b9:58:ca:04:4c:b7:ad:fd:b7:76:5c:3c:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:99:B8:B2:0B:66:43:C8:6B:01:4E:7D:88:59:9F:3F:57:80:0A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4e00::/40
Signature Algorithm: sha256WithRSAEncryption
19:dd:d8:ea:0e:b3:a7:bf:5c:a6:6d:80:ad:4f:35:9f:5c:9b:
c1:75:8b:72:a4:4b:19:af:d9:81:0a:8e:f1:a7:4e:0c:b7:89:
54:e1:c3:14:3d:fa:a3:d9:05:b3:cc:a8:1e:df:b8:4e:b1:3e:
a0:e5:b9:e3:44:c6:bd:70:9d:8c:7b:81:55:66:f8:64:82:3d:
ba:0e:8a:b7:e8:84:c1:24:a4:20:38:5c:ac:c8:77:13:e1:0f:
6e:ad:c5:46:95:de:3b:0b:78:19:0a:ff:88:a6:48:44:00:b4:
36:f6:0e:f8:f0:75:14:8c:97:64:3d:c1:35:35:b9:86:b7:bc:
e2:f1:2a:60:cb:f5:f5:a2:5b:9b:2c:57:d9:8b:59:17:50:98:
ae:b2:cd:d3:3e:2c:76:23:4b:5a:fa:34:2c:8e:27:28:a6:bf:
dc:b6:d8:e9:f7:a8:11:97:c4:3c:e2:26:3d:10:b4:51:36:1e:
20:72:3b:fd:80:e5:7c:ab:c7:ab:e1:3f:1b:e1:ac:af:18:3b:
dc:56:20:63:6d:24:0f:da:41:ac:b2:51:3b:aa:e8:e8:c0:73:
c9:05:cf:96:46:19:65:cb:0b:ae:57:f2:ea:1f:8a:14:3c:22:
50:75:cf:4d:42:80:0a:b1:22:0d:15:55:bc:e3:18:b4:e0:5c:
51:bc:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:41 2025 by rpki-client