![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa
File: MdEWTIGG2UzRleVseXCrIDFxE8I.roa (raw, json)
Hash identifier: 662KacWTH0ZMm0sf1+iW5LXigWS3GtVeHP4DdhGml1w=
Subject key identifier: 31:D1:16:4C:81:86:D9:4C:D1:95:E5:6C:79:70:AB:20:31:71:13:C2
Certificate issuer: /CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Certificate serial: 0F
Authority key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa
Signing time: Thu 21 Oct 2021 07:29:21 +0000
ROA not before: Thu 21 Oct 2021 07:29:21 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 38651
IP address blocks: 2401:f100::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Validity
Not Before: Oct 21 07:29:21 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=31D1164C8186D94CD195E56C7970AB20317113C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:74:b8:e3:10:e7:79:bf:05:3e:96:13:74:
fe:ae:e0:68:57:12:3d:84:ed:20:9f:3c:29:4a:8e:
71:48:c0:e1:b8:80:43:a1:7a:0c:26:b5:f1:c5:b2:
0d:28:0a:f9:6c:4d:a8:27:c5:3a:4d:24:15:60:1b:
59:bd:f8:a0:a3:e7:50:81:a6:d0:c2:21:d3:0d:d3:
d1:3e:31:1e:92:00:09:9b:4e:33:9e:ce:21:53:53:
be:16:b5:b3:d6:a2:b1:45:59:58:96:1e:90:10:b5:
6e:e1:11:5d:65:9a:da:c3:0b:68:62:2d:1f:64:3b:
fb:f7:af:97:14:6d:37:91:8a:c2:fb:1c:1f:ab:14:
b5:a6:af:cc:69:92:18:3c:3f:57:61:d0:75:b7:b3:
34:1e:f6:4e:16:1a:e8:51:72:f6:9c:a8:b0:a2:49:
1a:23:ef:23:ef:c3:77:5d:46:e3:ec:3a:c4:12:65:
78:2a:65:a8:ab:21:22:14:51:64:90:32:96:4e:f6:
6f:a7:28:4c:92:5f:0c:20:07:f7:d8:b3:4e:30:8d:
b5:91:7d:42:b7:0f:9c:86:24:32:15:5a:95:85:a9:
48:52:e7:0b:2f:e8:0a:2c:52:37:ba:eb:14:ee:bc:
b8:a9:81:5a:26:8b:99:b4:d8:b1:f0:86:0f:74:46:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:16:4C:81:86:D9:4C:D1:95:E5:6C:79:70:AB:20:31:71:13:C2
X509v3 Authority Key Identifier:
keyid:DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:f100::/32
Signature Algorithm: sha256WithRSAEncryption
1b:2b:a8:8a:60:85:e8:bc:bd:a6:2e:0d:f0:d4:c1:c4:93:06:
ca:af:cf:d4:3a:56:f1:a9:11:58:bd:cf:08:88:3a:1b:2b:7c:
a6:55:33:21:52:58:4b:67:df:0b:a4:99:10:98:95:c7:9f:7d:
9a:45:5f:41:e8:2a:2e:1c:04:1b:31:14:e0:64:01:ae:8f:a2:
fa:93:42:bb:08:a3:b0:13:63:79:f2:40:4b:bc:ec:97:c5:d5:
64:5c:09:56:24:82:90:bb:c0:cc:2c:4d:f9:3d:e7:e9:30:78:
6f:b1:e0:00:8e:7f:03:60:30:bb:df:21:0c:46:b2:4d:a5:ea:
90:8b:f0:34:05:dd:76:1c:6b:55:67:11:58:8f:c3:7e:92:aa:
06:6e:6b:3c:58:7b:e7:88:a6:de:06:06:a3:17:a5:bd:36:9a:
4b:03:de:59:47:88:52:76:77:3e:e0:fc:07:c1:38:6f:ec:10:
f4:c6:3b:58:1c:d8:8a:78:62:63:f6:8c:96:53:ef:6f:fe:bf:
33:82:c6:e2:e8:8b:2a:45:e8:e4:33:40:6a:39:0d:f0:1b:c9:
26:ac:a1:d2:e8:d2:6a:0d:b3:2b:4f:3b:5d:eb:96:fb:32:24:
f8:8b:6c:0c:92:e2:12:36:6c:81:79:2e:fd:57:be:f4:c5:11:
f4:95:20:b1
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkYx
MjI5NzRDMUE3RDg5RDE2OEJCQjUzNDVCRkYxQkJGMzQxNjI2MB4XDTIxMTAyMTA3
MjkyMVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzFEMTE2NEM4MTg2RDk0
Q0QxOTVFNTZDNzk3MEFCMjAzMTcxMTNDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPOpdLjjEOd5vwU+lhN0/q7gaFcSPYTtIJ88KUqOcUjA4biAQ6F6
DCa18cWyDSgK+WxNqCfFOk0kFWAbWb34oKPnUIGm0MIh0w3T0T4xHpIACZtOM57O
IVNTvha1s9aisUVZWJYekBC1buERXWWa2sMLaGItH2Q7+/evlxRtN5GKwvscH6sU
taavzGmSGDw/V2HQdbezNB72ThYa6FFy9pyosKJJGiPvI+/Dd11G4+w6xBJleCpl
qKshIhRRZJAylk72b6coTJJfDCAH99izTjCNtZF9QrcPnIYkMhValYWpSFLnCy/o
CixSN7rrFO68uKmBWiaLmbTYsfCGD3RG3tkCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQx0RZMgYbZTNGV5Wx5cKsgMXETwjAfBgNVHSMEGDAWgBTf8SKXTBp9idFou7U0
W/8bvzQWJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMDgvM19FaWwwd2FmWW5SYUx1MU5Gdl9HNzgwRmlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvM19FaWwwd2FmWW5SYUx1MU5Gdl9H
NzgwRmlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjA4L01kRVdUSUdHMlV6UmxlVnNlWENySURGeEU4SS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAfEAMA0GCSqGSIb3DQEBCwUA
A4IBAQAbK6iKYIXovL2mLg3w1MHEkwbKr8/UOlbxqRFYvc8IiDobK3ymVTMhUlhL
Z98LpJkQmJXHn32aRV9B6CouHAQbMRTgZAGuj6L6k0K7CKOwE2N58kBLvOyXxdVk
XAlWJIKQu8DMLE35PefpMHhvseAAjn8DYDC73yEMRrJNpeqQi/A0Bd12HGtVZxFY
j8N+kqoGbms8WHvniKbeBgajF6W9NppLA95ZR4hSdnc+4PwHwThv7BD0xjtYHNiK
eGJj9oyWU+9v/r8zgsbi6IsqRejkM0BqOQ3wG8kmrKHS6NJqDbMrTztd65b7MiT4
i2wMkuISNmyBeS79V770xRH0lSCx
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client