![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
File: AXtipS4rVuV7qs0dyxkA1LVK3XA.roa (raw, json)
Hash identifier: dPx4N8YrUA1x99AMlkKS/w1G5DfbyOvWrdn36dAbpa8=
Subject key identifier: 01:7B:62:A5:2E:2B:56:E5:7B:AA:CD:1D:CB:19:00:D4:B5:4A:DD:70
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0501
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
Signing time: Thu 27 Jul 2023 16:52:07 +0000
ROA not before: Thu 27 Jul 2023 16:52:07 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 110.158.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:52:07 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=017B62A52E2B56E57BAACD1DCB1900D4B54ADD70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:6a:97:34:88:c7:dc:46:95:6f:02:d4:ab:
2d:20:3d:81:56:6c:f9:67:84:ab:95:50:03:a8:5a:
bf:1f:c9:1c:9a:6e:f8:34:47:5d:4a:11:fc:09:0e:
12:d5:dd:4b:17:6a:61:5c:d1:db:3e:30:5e:a8:76:
08:6f:aa:01:40:24:76:ed:e8:3f:49:71:09:3f:cd:
fa:8c:a4:9a:75:dd:bd:35:c5:ac:4a:cb:f9:2c:a2:
7a:5c:39:de:c5:5d:ee:af:25:25:82:a6:18:22:9c:
e9:5a:fd:5b:6b:05:49:fd:43:0f:c1:e4:fd:d9:a8:
0c:31:18:36:67:48:8a:4f:33:70:e2:fd:aa:a6:e3:
f6:04:e3:9e:30:17:64:4e:bc:13:70:22:bb:37:15:
31:63:79:e1:ae:2b:c1:68:93:72:67:21:e9:1c:93:
4a:e3:af:d7:b7:3b:d0:49:fc:09:4a:41:5f:0d:55:
4b:35:d6:ae:59:ca:39:e2:65:7e:8c:a9:c6:11:5e:
1f:f9:06:a0:b0:d2:f2:35:21:9b:c3:be:0a:0a:5d:
0e:ab:67:54:52:b7:ce:2c:67:26:e7:69:57:c3:7f:
d0:2e:62:46:71:ec:8d:55:30:3d:a4:59:ae:7b:89:
1e:7a:0f:bc:ff:c3:ba:3b:9b:7b:55:50:2a:e2:0d:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7B:62:A5:2E:2B:56:E5:7B:AA:CD:1D:CB:19:00:D4:B5:4A:DD:70
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AXtipS4rVuV7qs0dyxkA1LVK3XA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.190.0/23
Signature Algorithm: sha256WithRSAEncryption
74:45:ab:2a:c1:b9:ed:8c:e5:af:19:ce:12:2e:7b:e1:a2:b4:
d4:7d:be:d6:4d:64:84:89:ca:ee:48:1a:9e:92:48:53:78:39:
79:a3:14:85:21:25:85:e3:bd:8e:3a:36:39:3e:23:cc:62:c6:
c4:0f:e1:bd:81:3f:4e:3a:33:f8:f2:86:ed:5c:7f:26:8a:2a:
7d:62:7b:9a:75:35:fd:9e:d4:e8:55:25:aa:fc:58:52:df:65:
86:29:03:ff:00:d6:a2:38:f4:04:9c:1e:e3:98:0e:2b:21:8d:
26:0a:a0:a6:87:6d:07:e4:cc:96:c4:e1:b1:b8:d2:09:01:64:
17:88:1b:e1:1a:c8:c0:44:8f:93:f3:16:2a:55:70:11:31:b5:
47:71:ac:ae:c8:13:36:97:69:43:68:98:28:56:b9:7a:3c:36:
4b:ca:2a:a4:b8:ce:63:23:5d:54:28:a0:c2:59:bf:2d:e3:83:
a7:d5:70:a0:45:4c:34:b1:5c:c9:1c:49:d1:70:89:49:2e:4f:
37:61:9b:76:d5:4e:4d:3e:72:ac:87:ba:e6:a5:58:ac:b0:0c:
1a:c5:08:30:93:ea:7e:0e:cb:51:5b:8a:95:30:87:41:54:71:
a2:d5:ab:15:ce:20:9f:bd:67:fc:52:7c:2c:39:8f:81:22:cf:
d1:11:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:24 2025 by rpki-client