![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVbaAJWaotzEtnHPnPT4d--fI7E.roa
File: AVbaAJWaotzEtnHPnPT4d--fI7E.roa (raw, json)
Hash identifier: RRvbdh5qzbdXKHnFjQjLWQTgp133M5wQ67dr2bap2KY=
Subject key identifier: 01:56:DA:00:95:9A:A2:DC:C4:B6:71:CF:9C:F4:F8:77:EF:9F:23:B1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0514
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVbaAJWaotzEtnHPnPT4d--fI7E.roa
Signing time: Thu 27 Jul 2023 16:52:14 +0000
ROA not before: Thu 27 Jul 2023 16:52:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:52:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=0156DA00959AA2DCC4B671CF9CF4F877EF9F23B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:72:82:38:75:89:c8:4c:64:f0:23:02:ca:
4f:4c:04:af:cb:55:01:6b:45:c6:f6:53:03:e9:d7:
1d:5c:9d:3c:a3:6c:ba:96:a0:f3:6d:cd:28:88:3d:
d7:f6:f8:1c:5b:2c:d6:64:ff:59:19:73:cc:f3:92:
bf:f5:26:d9:4c:98:b7:2c:10:08:54:22:eb:02:78:
f2:7a:96:33:5c:65:c2:a7:41:0b:92:9f:18:e1:86:
68:86:24:2f:cc:60:7d:54:78:63:63:1a:ef:45:40:
66:9f:ec:eb:eb:e2:0c:0f:b5:e9:4d:93:da:84:5b:
a3:b2:82:8a:58:c1:29:a6:2b:98:d6:e8:6b:1b:77:
32:55:03:03:03:0e:8c:ab:30:03:f5:42:3d:d7:a0:
6b:3e:99:17:10:8c:06:44:9a:a3:24:b5:69:54:18:
a4:a6:15:3b:78:73:fc:17:b2:dd:e2:6d:75:54:bf:
94:5e:d0:61:d6:d7:da:29:8d:3d:1b:f8:65:3e:9f:
3d:0c:2b:f0:62:f1:a2:28:08:eb:24:4b:40:13:aa:
83:3e:0b:aa:ca:08:e3:85:a5:b1:47:8f:55:e9:e9:
c6:f8:f2:53:0b:0a:40:da:29:60:b6:e2:ff:e5:37:
f8:fc:87:76:7b:6f:81:a4:aa:d4:10:24:70:b8:e4:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:DA:00:95:9A:A2:DC:C4:B6:71:CF:9C:F4:F8:77:EF:9F:23:B1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AVbaAJWaotzEtnHPnPT4d--fI7E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.56.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:88:ae:75:a9:e8:46:9d:ed:aa:6f:c8:33:f3:a9:f3:c4:19:
20:47:47:6c:1f:dd:92:3f:f0:26:7e:66:c0:42:f7:6b:2c:ba:
ae:77:55:7a:eb:48:0b:0f:a7:7c:31:d6:86:2e:bc:92:2c:b3:
69:47:20:8e:f8:0a:ed:bb:61:37:19:11:4b:99:e3:e2:d4:b1:
91:55:d9:3d:df:be:c3:42:26:9d:c8:87:60:63:f8:27:bc:dc:
cf:c7:06:09:3f:70:33:4e:43:d4:8f:32:eb:6e:17:9a:d9:8a:
6c:cb:b8:79:3f:e4:71:58:8c:27:6a:cb:d4:6f:8a:ab:db:e7:
71:5a:cf:30:37:1f:33:1d:84:c8:80:81:0e:9b:47:1b:bb:1e:
f3:07:00:c0:ee:a0:b0:9f:00:c0:ab:f0:54:f7:7e:3b:36:bb:
6e:aa:0a:7a:0a:a4:ed:ef:93:fa:f9:d9:4c:7f:5e:6c:fd:5b:
5b:43:18:41:52:9d:de:43:ff:bc:93:3a:d3:d5:2f:88:96:ec:
d6:cb:1c:c4:6a:bf:85:5a:03:d4:78:7a:c8:a4:fe:72:b1:ce:
66:2b:86:41:ee:24:7e:c4:c3:47:ef:15:a7:22:26:cd:1d:ab:
fa:e3:9a:a2:0f:4f:55:bc:24:6a:c7:92:5c:aa:1e:e3:76:02:
92:da:69:db
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjUyMTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDAxNTZEQTAwOTU5QUEy
RENDNEI2NzFDRjlDRjRGODc3RUY5RjIzQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXOHKCOHWJyExk8CMCyk9MBK/LVQFrRcb2UwPp1x1cnTyjbLqW
oPNtzSiIPdf2+BxbLNZk/1kZc8zzkr/1JtlMmLcsEAhUIusCePJ6ljNcZcKnQQuS
nxjhhmiGJC/MYH1UeGNjGu9FQGaf7Ovr4gwPtelNk9qEW6OygopYwSmmK5jW6Gsb
dzJVAwMDDoyrMAP1Qj3XoGs+mRcQjAZEmqMktWlUGKSmFTt4c/wXst3ibXVUv5Re
0GHW19opjT0b+GU+nz0MK/Bi8aIoCOskS0ATqoM+C6rKCOOFpbFHj1Xp6cb48lML
CkDaKWC24v/lN/j8h3Z7b4GkqtQQJHC45PxRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAVbaAJWaotzEtnHPnPT4d++fI7EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0FWYmFBSldhb3R6RXRuSFBuUFQ0ZC0tZkk3RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHc0jgwDQYJKoZIhvcNAQELBQADggEBAF2IrnWp6Ead7apvyDPzqfPEGSBH
R2wf3ZI/8CZ+ZsBC92ssuq53VXrrSAsPp3wx1oYuvJIss2lHII74Cu27YTcZEUuZ
4+LUsZFV2T3fvsNCJp3Ih2Bj+Ce83M/HBgk/cDNOQ9SPMutuF5rZimzLuHk/5HFY
jCdqy9Rviqvb53FazzA3HzMdhMiAgQ6bRxu7HvMHAMDuoLCfAMCr8FT3fjs2u26q
CnoKpO3vk/r52Ux/Xmz9W1tDGEFSnd5D/7yTOtPVL4iW7NbLHMRqv4VaA9R4esik
/nKxzmYrhkHuJH7Ew0fvFaciJs0dq/rjmqIPT1W8JGrHklyqHuN2ApLaads=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:29 2025 by rpki-client