![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
File: qr1YSdWCyDF29Yhv4YtavqaqqBs.roa (raw, json)
Hash identifier: XwERS8UdWaLMP+T0VDP/LlbeKjTufzTPjuJ+hFGJNRQ=
Subject key identifier: AA:BD:58:49:D5:82:C8:31:76:F5:88:6F:E1:8B:5A:BE:A6:AA:A8:1B
Certificate issuer: /CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
Certificate serial: 02
Authority key identifier: FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
Signing time: Fri 17 Nov 2023 07:13:22 +0000
ROA not before: Fri 17 Nov 2023 07:13:22 +0000
ROA not after: Sat 16 Nov 2024 07:01:55 +0000
asID: 18278
IP address blocks: 2400:a300::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
Validity
Not Before: Nov 17 07:13:22 2023 GMT
Not After : Nov 16 07:01:55 2024 GMT
Subject: CN=AABD5849D582C83176F5886FE18B5ABEA6AAA81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:20:17:b8:04:0f:75:62:63:8f:a5:6c:21:
b1:b7:a5:f1:30:72:e3:08:f9:e4:1e:d8:ca:6f:87:
ac:21:1a:f6:70:a9:14:fc:d2:0e:45:c8:20:3e:de:
74:70:93:c5:c8:78:97:19:da:30:02:2d:bc:61:5c:
9f:92:7f:64:cb:65:88:4a:25:d8:b7:0f:54:9a:87:
ff:cd:85:41:ca:d7:0e:84:06:73:a9:43:0a:69:5a:
8f:b3:ef:a5:60:64:90:18:03:46:4c:3d:c1:c0:3d:
6b:36:55:ff:01:7b:7f:e4:50:c6:9c:0f:5c:a7:ac:
bf:d3:69:3f:45:62:94:92:7d:55:ca:79:5a:10:7f:
47:3b:43:77:47:4e:6b:8d:12:fc:b8:fa:40:64:8f:
44:31:73:ff:09:4a:d4:45:de:fd:d3:d1:8c:d9:0d:
28:72:08:d9:e7:89:05:c8:7b:39:7f:a0:43:8f:69:
f1:e0:9e:c3:dd:a8:53:db:6d:e6:8e:6d:4a:4f:ec:
b4:c0:61:1d:7f:76:26:ef:79:82:30:9c:1d:7f:35:
4f:10:f4:9c:ea:88:a9:ca:cf:70:eb:ba:e3:85:7b:
ee:d3:f6:df:b0:45:63:5e:43:15:55:ce:26:2f:c9:
83:19:78:1d:d4:ff:c6:9e:eb:f8:62:6d:b4:c4:ce:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:58:49:D5:82:C8:31:76:F5:88:6F:E1:8B:5A:BE:A6:AA:A8:1B
X509v3 Authority Key Identifier:
keyid:FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:a300::/32
Signature Algorithm: sha256WithRSAEncryption
b7:be:e6:d3:8a:48:1f:b1:bd:c5:88:15:b2:4e:27:62:66:42:
24:04:cc:d3:97:46:4d:a4:e5:39:40:84:5c:d4:2d:af:88:5e:
d7:bf:95:21:16:89:0b:a7:9a:e4:da:29:80:a0:a6:57:4c:64:
09:ad:d4:01:bb:a4:d6:44:b5:4a:60:f7:84:ec:7c:74:e4:0c:
8a:22:e6:d6:ab:4e:46:38:2e:d8:a9:73:8b:ab:70:81:94:cc:
e0:16:25:2f:6e:b0:d8:f1:0b:88:ce:ca:4c:fc:3c:a4:ec:36:
77:49:e9:48:88:4a:36:5d:ff:9a:b3:92:d1:03:06:f9:62:01:
11:38:ad:b8:c9:40:6c:80:26:ff:3a:cd:55:4a:d3:b4:7d:5e:
6c:43:03:67:b0:71:ac:45:c5:a3:4f:60:39:8c:c3:0b:a1:22:
d3:39:81:ee:13:87:da:21:4b:a8:a7:76:9f:ca:19:39:6f:16:
ef:be:8a:9f:79:cf:55:f0:8b:b4:6f:34:a2:4e:8e:3b:bb:35:
c0:3d:c4:a8:af:96:3c:aa:3f:87:b3:55:fd:c6:43:8a:d5:f6:
10:a9:a3:42:24:c2:48:ae:37:cb:cc:ba:50:a1:4e:00:9f:56:
d4:04:01:4d:cf:db:94:18:aa:d8:f2:b7:63:e3:bb:c1:33:cd:
2c:17:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:16 2025 by rpki-client