![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xc0q6wE2pwfHgxefwzn7UTcBmNk.roa
File: Xc0q6wE2pwfHgxefwzn7UTcBmNk.roa (raw, json)
Hash identifier: mQwtLgOlv2xE5PtCb+mckmTl3Hfb0+P2paFgAjEMT6Y=
Subject key identifier: 5D:CD:2A:EB:01:36:A7:07:C7:83:17:9F:C3:39:FB:51:37:01:98:D9
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 22
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xc0q6wE2pwfHgxefwzn7UTcBmNk.roa
Signing time: Tue 30 May 2023 17:18:25 +0000
ROA not before: Tue 30 May 2023 17:18:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 160.249.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: May 30 17:18:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5DCD2AEB0136A707C783179FC339FB51370198D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:8a:51:de:ad:90:76:b4:d1:36:97:bf:3a:
e0:12:3a:b1:25:55:b9:be:e8:3f:e4:3e:6c:24:b2:
e5:a3:d0:33:f2:d4:96:cd:88:9e:9a:48:00:53:87:
62:80:44:56:a0:b0:12:89:2a:1f:4f:d2:14:35:05:
33:c6:9f:ce:aa:1d:9a:14:9b:8d:65:d8:62:d9:5a:
c4:4e:9b:91:6b:cd:75:3b:e1:d5:0d:a8:6f:49:bd:
94:e6:57:78:93:61:99:5e:82:d8:63:e6:95:a3:e9:
7a:f6:54:52:42:83:6a:c5:d7:af:54:3f:2e:c8:44:
51:2d:c7:c5:dd:49:0e:83:ac:89:60:a0:f1:7a:00:
ed:17:80:d3:c7:ae:80:ff:3f:95:42:e8:72:7e:85:
c6:53:bd:28:f7:dd:04:2f:63:ce:4e:41:8b:8f:72:
95:00:e9:95:79:dc:f5:9d:9b:04:68:c8:5d:1a:aa:
6f:c1:a8:45:87:cc:49:75:1a:dd:81:b1:79:1c:ef:
d8:06:52:9b:ee:37:90:68:33:5e:a4:4b:f5:9b:e7:
7d:b7:8f:da:c0:e7:1a:c2:ad:5c:5f:6b:05:e9:7b:
87:5c:aa:bf:18:6f:4a:b5:81:9a:ab:08:9a:a3:c5:
5a:f1:9b:e6:09:03:b3:81:76:69:e0:07:8a:6c:67:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:2A:EB:01:36:A7:07:C7:83:17:9F:C3:39:FB:51:37:01:98:D9
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xc0q6wE2pwfHgxefwzn7UTcBmNk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1b:26:d7:d6:92:64:05:9a:06:13:1f:de:00:16:a0:7e:b0:37:
c1:dd:61:01:3a:cd:04:5d:06:6a:fe:82:a0:35:8b:c3:37:00:
dc:bb:8e:c1:89:22:fc:42:d4:67:d0:4e:42:80:f1:59:d0:88:
a0:0f:cd:85:dd:fd:80:ac:b0:64:4a:29:c1:75:f8:b5:93:e2:
0a:26:66:7c:22:6e:5c:4c:67:94:2d:62:4e:3c:0c:37:1b:35:
94:36:0c:d9:00:e7:94:6d:25:06:d8:d4:51:9b:bb:17:44:50:
fb:66:6e:ac:0a:d7:11:67:a7:17:0d:0a:ce:bf:11:99:c5:d2:
82:c6:db:74:6a:11:7f:09:a9:54:c6:36:20:6b:53:f6:2d:64:
f1:a5:3f:4b:18:8d:09:7e:50:d1:06:91:77:b2:ab:5b:ab:45:
e1:46:13:75:a3:d6:af:fe:b4:9c:3b:36:ad:a3:e7:e5:05:4f:
49:b5:67:31:26:ee:b5:d8:86:09:76:ad:be:d4:c8:50:40:cf:
1a:9f:b9:7f:3d:62:45:5c:42:30:d2:77:2d:5e:e0:95:3a:75:
8b:31:9d:b1:91:3d:90:4e:c5:80:d8:7e:86:34:58:44:4d:9b:
e4:a3:7f:69:51:f6:34:9b:71:f8:23:54:20:4f:c3:7f:13:64:
f1:bd:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:57 2025 by rpki-client