![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
File: _xwm6IYVZLwWEJ_MdSmXvmeIjho.roa (raw, json)
Hash identifier: NaeAMfvnOkvCnsSZzwYDva2cVEtTaq+Le0JFvLpd1yM=
Subject key identifier: FF:1C:26:E8:86:15:64:BC:16:10:9F:CC:75:29:97:BE:67:88:8E:1A
Certificate issuer: /CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Certificate serial: 0F
Authority key identifier: 2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
Signing time: Wed 28 Jun 2023 06:27:38 +0000
ROA not before: Wed 28 Jun 2023 06:27:38 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 146981
IP address blocks: 2400:8820::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Validity
Not Before: Jun 28 06:27:38 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=FF1C26E8861564BC16109FCC752997BE67888E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:0c:20:b7:aa:83:d1:30:49:4b:f9:d3:28:
b6:b3:be:de:dc:6d:4e:d8:85:d2:ec:fa:68:86:74:
97:2f:8d:db:d3:d2:25:85:7d:90:ba:83:f7:73:ce:
b1:8c:60:59:a5:dc:53:54:a6:9f:46:70:85:b2:c0:
b1:0c:e2:22:e0:37:63:aa:28:e6:50:16:f9:14:bd:
67:bc:1c:c0:93:5b:9f:05:b8:c3:60:32:f2:bd:b8:
cd:d5:65:9b:9a:86:64:48:06:b4:7f:ff:9b:be:6a:
67:9c:e6:16:2a:7e:81:3c:df:19:55:0f:46:cc:eb:
c9:83:99:c1:c0:7f:fb:44:e3:e6:21:ea:f1:e5:bf:
81:85:c2:9e:51:5c:0e:b2:80:9e:c7:a3:35:ed:e4:
4c:0e:56:90:5b:78:43:5a:43:17:aa:96:8b:8e:d2:
24:a2:4e:ec:d3:35:c8:ad:c5:07:4d:88:bf:dd:f4:
9b:4e:75:f4:5f:b1:c9:64:d5:2e:98:d7:17:be:79:
27:6b:5b:be:9e:b5:03:2e:6b:0f:fd:da:84:35:2f:
b6:51:27:0c:c7:9c:78:f3:0a:05:c9:dd:32:57:92:
2b:64:2b:ac:6f:6f:98:ec:54:af:c3:5f:43:b6:46:
c3:56:0a:ab:76:dc:a4:26:bc:fe:41:4b:33:a3:d7:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:26:E8:86:15:64:BC:16:10:9F:CC:75:29:97:BE:67:88:8E:1A
X509v3 Authority Key Identifier:
keyid:2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8820::/32
Signature Algorithm: sha256WithRSAEncryption
c4:8d:e7:ca:3f:b1:d7:67:c1:85:4f:14:d7:e3:0d:43:ee:bd:
e8:64:e2:e4:b6:b9:77:04:c1:13:cb:1a:2c:a5:2d:47:58:cb:
39:80:01:50:16:48:6a:f9:dc:9e:e7:90:0b:3b:90:51:53:50:
79:22:20:a7:59:c8:b7:34:2c:06:3b:0a:f6:7f:8d:76:cf:7e:
69:f1:dc:6f:7f:c1:c2:11:70:7c:a2:6a:74:28:be:0e:6b:1f:
c5:dd:9e:1d:b4:99:dd:27:95:a9:45:c9:95:4a:5f:99:98:2c:
f4:40:6c:fa:0b:c7:b4:65:d2:bc:09:ce:0f:3e:d8:df:a6:8d:
14:81:a1:69:68:48:0c:29:57:68:e8:4c:e6:93:ec:27:d5:46:
aa:d6:0e:c1:95:3f:42:dd:1f:99:fb:cf:f1:6a:3a:6b:ef:f1:
ec:0a:7d:53:a3:69:89:67:e0:e2:9e:33:39:5d:48:80:7b:c4:
4d:2e:68:67:ca:32:1a:18:70:66:48:a4:75:37:c0:a3:d7:a6:
42:0c:20:b0:6d:17:70:8d:fd:f0:f1:93:24:54:a9:55:47:d5:
3f:19:fb:0e:d1:08:b0:a2:af:43:a1:e1:42:6e:04:d9:83:b5:
1f:a8:c3:d4:5a:15:ee:f8:89:cc:22:bc:b3:9f:c8:bc:6c:b1:
2a:4e:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:41 2025 by rpki-client