![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
File: tDSGD95DoCWo3W2qa6WuwoCL2xA.roa (raw, json)
Hash identifier: FZNjcNk3jEFWIo1tm8/oLEYm7EPSfbeoyPukzm4N8tg=
Subject key identifier: B4:34:86:0F:DE:43:A0:25:A8:DD:6D:AA:6B:A5:AE:C2:80:8B:DB:10
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 05
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
Signing time: Mon 06 Nov 2023 07:22:57 +0000
ROA not before: Mon 06 Nov 2023 07:22:57 +0000
ROA not after: Fri 01 Nov 2024 08:11:41 +0000
asID: 23783
IP address blocks: 61.11.160.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Nov 6 07:22:57 2023 GMT
Not After : Nov 1 08:11:41 2024 GMT
Subject: CN=B434860FDE43A025A8DD6DAA6BA5AEC2808BDB10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:a0:8a:a9:51:43:37:c1:de:b4:f9:94:8f:
32:9f:31:37:33:6f:ac:0d:9a:53:84:64:b9:64:08:
9b:dc:c9:94:1a:54:f6:76:01:1e:3a:32:e8:7b:29:
a7:21:05:60:23:3d:04:6b:e3:79:a2:e9:42:bf:1d:
86:64:5b:67:58:19:39:b4:7e:0f:06:ba:9b:83:69:
8e:a9:e2:50:58:60:54:42:75:16:66:d3:62:1d:2b:
91:b0:14:51:16:18:be:7c:b1:e8:da:31:4a:96:f5:
57:8f:86:e9:ce:70:7b:ec:12:d6:cf:5d:c9:4b:0e:
0d:15:aa:28:f6:f1:0d:f4:0e:d8:e2:54:a8:a4:35:
18:3b:3d:0b:a7:97:40:09:df:9c:49:07:d6:12:ba:
bd:8b:e9:c7:a7:ee:88:39:3e:67:a2:76:8b:76:ed:
19:e6:11:46:20:16:98:4a:ed:b1:89:2c:3e:e9:2c:
ff:a9:6f:5c:83:71:2c:65:08:1b:11:a1:be:eb:47:
77:2d:3e:96:57:88:95:27:94:77:f8:f1:b0:c7:88:
8f:27:08:6d:7c:54:95:b8:9c:a8:6f:64:d3:7a:33:
9e:51:a2:05:6e:26:87:52:43:d5:5c:eb:4e:8a:c2:
81:71:50:47:b2:2c:e4:94:f7:5d:88:31:0d:35:60:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:86:0F:DE:43:A0:25:A8:DD:6D:AA:6B:A5:AE:C2:80:8B:DB:10
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.11.160.0/20
Signature Algorithm: sha256WithRSAEncryption
78:39:cd:43:d7:43:da:48:14:3e:9b:e2:cc:3f:f1:6b:ee:3b:
cf:8c:87:30:0d:2d:d8:26:23:68:c3:d3:04:1e:6f:65:8e:9a:
57:16:c4:f9:98:ed:45:02:85:84:e2:0d:18:5d:f6:6e:07:13:
c3:61:04:04:77:2e:f5:71:3d:ad:03:62:42:7c:1f:ed:09:bb:
dd:bc:59:bc:2e:df:8c:24:25:6f:f2:eb:3b:de:e6:65:f2:84:
f5:2c:81:e1:6c:78:f0:61:f6:e1:63:71:4b:ed:4d:0e:35:6d:
71:47:42:58:ce:94:93:39:d8:03:fc:2a:61:56:4b:25:52:7b:
19:8b:d1:6b:d8:5f:33:dc:6e:a1:6c:5f:f7:0f:50:86:f1:27:
56:24:9e:c2:9b:2e:f2:52:fb:92:55:e9:12:f6:88:37:97:58:
2c:50:19:c5:30:0e:cd:56:a4:10:d3:7c:df:ff:e9:e7:3d:66:
55:5b:28:d5:20:f5:4b:8a:c5:d1:08:3d:47:45:cf:35:ee:4d:
d7:21:ff:e0:1a:4c:c9:15:7d:b3:d8:d3:4a:b5:d2:61:83:84:
40:a5:3c:00:10:c7:66:c7:4b:65:e3:a3:35:72:9c:93:63:21:
ec:8e:64:87:68:c5:0c:d8:0a:40:ed:a1:98:6c:a4:03:e4:8b:
4c:40:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:11 2025 by rpki-client