![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
File: Acdx6aWrRbuREnH2krBMuwIY9SE.roa (raw, json)
Hash identifier: /2BnnnQmW6ce4sCURq9eGioEE4y8XuJMbTCVL7Cz3EU=
Subject key identifier: 01:C7:71:E9:A5:AB:45:BB:91:12:71:F6:92:B0:4C:BB:02:18:F5:21
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
Signing time: Tue 30 May 2023 17:18:22 +0000
ROA not before: Tue 30 May 2023 17:18:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:18:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=01C771E9A5AB45BB911271F692B04CBB0218F521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:0b:01:89:82:fc:d1:63:c8:39:43:9e:ad:
27:cf:39:ff:91:9a:99:23:21:f2:37:43:f8:30:87:
70:58:31:ad:b3:aa:29:39:be:7f:31:31:85:f6:af:
12:25:3f:68:8a:d6:72:8a:02:ec:18:47:5b:81:6c:
85:85:cd:9b:9e:9e:35:11:d4:93:a8:3b:c3:e4:81:
42:4c:40:af:ef:86:5b:a6:58:13:b4:13:30:6b:cc:
d5:11:10:27:df:30:f9:cf:f6:b7:81:0d:03:fc:3e:
43:1d:da:f2:a6:f2:99:2c:c4:e6:03:9d:aa:c3:6f:
58:4f:cb:9f:52:64:59:82:b7:53:b8:59:03:25:5b:
4b:60:02:39:0f:20:c0:3c:7c:83:7e:9c:f9:b6:37:
b4:e8:c3:5e:ec:8a:69:97:ef:1d:d1:50:47:bb:b7:
18:b1:21:bb:43:01:12:c7:3f:b2:8c:19:46:5e:d1:
de:81:e6:3c:20:9a:2e:68:72:1f:44:76:cd:82:d2:
f1:47:0e:d2:a8:dc:21:5e:87:a2:36:68:1a:21:fc:
28:0d:dd:98:ee:cc:03:a0:8f:d5:d9:ec:0b:ac:f5:
c5:a9:df:9c:ab:e5:89:4a:fc:f8:80:10:3e:6e:d4:
7f:3d:7f:f4:96:dc:1e:92:8a:40:be:b2:cd:98:29:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:71:E9:A5:AB:45:BB:91:12:71:F6:92:B0:4C:BB:02:18:F5:21
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.158.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ac:26:aa:cd:58:f3:66:17:4c:0b:61:fc:6f:b0:48:c7:88:
43:d2:5b:1a:c5:e4:ee:52:88:0f:c8:73:ce:f6:9f:ae:3e:9c:
a7:c8:65:84:35:3c:07:32:1e:13:5d:da:4a:97:97:5a:a0:06:
df:7f:26:43:02:7f:43:fc:a7:72:3f:a0:3d:80:6c:a5:48:5f:
32:7a:4e:25:e2:b6:91:41:7d:25:7e:83:51:4a:11:c7:b8:81:
66:ef:8d:38:ef:1b:6b:44:45:26:4a:d9:a6:09:3a:c5:ab:cc:
20:a2:57:b5:36:70:d0:17:9d:84:2e:c5:b4:ad:c7:e1:b9:a5:
f1:ab:13:c0:be:c8:38:70:0f:fd:11:e1:e4:39:da:a3:18:08:
80:5d:d0:7e:bd:a2:e1:c4:e8:6e:6b:4f:15:ec:83:84:c0:7b:
7c:3d:54:42:24:38:88:0b:ee:e3:98:40:9e:40:6e:1c:62:a6:
0d:51:ea:9b:8f:c9:68:71:7e:94:87:6c:96:a5:ba:00:8d:d7:
4a:33:dc:8c:52:37:5f:b6:33:35:9e:8b:65:c1:39:4c:bc:5d:
5a:65:94:d7:a6:bc:b3:10:07:c2:39:78:e3:11:43:80:21:d6:
d1:ee:c6:71:ea:e1:e4:19:01:9f:41:ea:25:c1:2d:17:26:2a:
e3:60:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:06 2025 by rpki-client