![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hu1H5Ok9NB-gPehDZNZd7Z0GnEY.roa
File: Hu1H5Ok9NB-gPehDZNZd7Z0GnEY.roa (raw, json)
Hash identifier: biUKbtrXi6QZA9NAEfNxn1sDreorQ2FDYqt5mdRP7ag=
Subject key identifier: 1E:ED:47:E4:E9:3D:34:1F:A0:3D:E8:43:64:D6:5D:ED:9D:06:9C:46
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 86
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hu1H5Ok9NB-gPehDZNZd7Z0GnEY.roa
Signing time: Wed 29 Mar 2023 16:04:55 +0000
ROA not before: Wed 29 Mar 2023 16:04:55 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:04:55 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=1EED47E4E93D341FA03DE84364D65DED9D069C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:53:f5:c7:8a:0d:bb:ce:fe:98:34:5f:fe:
d4:8c:b8:75:13:65:9e:8f:72:c5:0e:6f:0f:e5:4a:
85:95:77:41:b7:30:77:92:35:01:83:59:93:80:2d:
bf:63:94:14:17:61:c4:45:fa:53:87:26:44:c8:b9:
41:f5:f6:7d:03:9d:85:7c:e0:4e:3e:37:12:77:9c:
19:95:d1:c8:9b:3d:47:65:fd:21:10:50:d8:92:61:
c1:b7:ea:0d:76:58:88:c6:6c:c5:cc:b4:05:2c:1a:
4b:ba:2b:c9:a5:ee:dc:b4:a4:60:ee:e5:79:c5:1b:
dd:cd:c2:e8:59:a8:7c:b7:38:b9:ca:9c:59:d6:cf:
a9:8b:87:ee:f7:29:4a:22:0a:a6:2e:9b:96:c3:2a:
1a:52:73:aa:2f:27:96:6e:c5:e7:31:db:d7:75:26:
3e:45:99:6d:d1:06:0d:e9:de:2d:50:f1:d2:7c:28:
6f:ff:46:91:87:6e:61:e4:b6:e1:ad:21:71:d7:03:
b1:b2:fd:c3:a1:e0:cd:e1:75:2b:e2:19:f9:69:6c:
e1:fb:33:54:7d:a3:f6:f8:08:fc:11:c7:4d:08:58:
54:3a:bd:92:fb:b6:a8:de:b8:af:93:e4:0c:77:37:
8f:b5:ab:db:8d:12:0d:06:71:2a:95:9c:2c:b8:9b:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:ED:47:E4:E9:3D:34:1F:A0:3D:E8:43:64:D6:5D:ED:9D:06:9C:46
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hu1H5Ok9NB-gPehDZNZd7Z0GnEY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.140.0/23
Signature Algorithm: sha256WithRSAEncryption
22:72:06:78:78:82:ad:3d:22:cc:d4:a8:3c:e9:31:4f:90:e0:
fe:99:19:f5:98:ed:72:2f:64:d0:ec:8e:f1:04:b8:66:11:ca:
bc:ed:e8:11:ee:f1:d8:99:dc:cb:56:e5:5f:1a:09:51:00:4d:
b3:99:f5:20:60:f2:7e:23:06:71:f5:63:18:9d:04:41:cd:5c:
6b:6c:fc:5e:e7:38:8d:41:6e:74:a0:ca:5b:8f:47:0e:bb:37:
e4:82:78:fe:fa:9e:e0:4c:21:ef:80:d5:00:ea:f3:fc:57:cc:
c4:d4:63:2b:93:2d:af:87:27:0c:44:9f:69:d8:1f:b8:39:3f:
cb:b9:59:c0:95:ea:41:45:ad:0e:21:b8:9c:55:3a:3e:ef:27:
60:ac:d7:04:13:40:be:14:9a:72:54:9a:6a:04:19:93:1a:2c:
f1:7c:ce:27:37:ed:73:1d:2f:57:c9:f0:63:0f:fb:16:5f:96:
46:2a:d4:4c:5e:56:bf:42:88:2b:f7:fb:a2:d5:51:d2:3f:6e:
32:57:c2:a3:17:6f:cf:9a:c2:1f:3d:93:ef:fc:8e:98:5c:ec:
16:a9:6a:97:ab:b0:12:82:f5:6a:91:95:05:d8:b6:d2:91:0d:
cd:8a:8b:4f:a5:28:32:6b:4f:e6:ce:99:30:78:94:17:4e:f6:
50:59:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:19 2025 by rpki-client