![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
File: ZCdLFNgNjyDOozintGd-4QDZv9s.roa (raw, json)
Hash identifier: mAnIsxQwFPaeIJfM0tNjs+wMwf/dX4nKL6RmiUUsDIU=
Subject key identifier: 64:27:4B:14:D8:0D:8F:20:CE:A3:38:A7:B4:67:7E:E1:00:D9:BF:DB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 33
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
Signing time: Mon 27 Mar 2023 16:02:06 +0000
ROA not before: Mon 27 Mar 2023 16:02:06 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:06 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=64274B14D80D8F20CEA338A7B4677EE100D9BFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:26:3b:c4:f4:91:d2:4c:0c:ba:0d:da:3f:
ed:40:68:ec:72:cc:84:17:5b:21:eb:64:25:38:81:
81:d6:eb:71:98:18:46:06:9a:a5:da:6d:bf:c3:db:
53:d6:6e:29:69:54:bb:81:a9:17:4c:95:13:a3:8a:
e6:c6:57:75:21:1f:0b:19:fc:4f:80:82:dc:c9:b9:
f0:e2:32:b0:3a:30:37:ba:e5:4e:80:97:a8:7f:71:
81:19:66:f5:7f:99:db:26:58:7e:42:7b:1a:d3:1a:
5b:9f:91:1a:c3:05:85:3b:95:e9:49:d3:9b:a6:24:
bd:9d:ec:0d:8b:f5:76:c7:dc:6b:d3:d8:ac:40:9d:
21:c2:75:ae:26:34:2b:7a:bd:8f:33:94:14:a2:a0:
38:69:12:00:a9:0f:6e:f9:51:f3:f3:14:9a:4d:ca:
b1:6b:8a:04:5a:74:13:15:b2:ed:ef:72:ad:d0:bf:
46:8b:70:9f:b4:26:c3:73:7b:a3:56:01:5e:8e:98:
5a:6d:4e:e3:0e:87:40:81:52:c3:32:65:a5:7a:eb:
c5:c9:37:7f:df:83:72:f2:7e:dd:d7:24:c1:1c:5f:
a8:cd:b8:35:d5:2a:dd:41:38:93:84:a0:88:3d:98:
39:91:35:d5:a4:ce:6a:f7:d2:b2:2d:73:86:b6:4e:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:4B:14:D8:0D:8F:20:CE:A3:38:A7:B4:67:7E:E1:00:D9:BF:DB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZCdLFNgNjyDOozintGd-4QDZv9s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b6:f4:69:a2:61:4c:4b:d7:d7:44:cf:3a:d5:a4:0b:8c:b7:
e5:fe:78:98:3c:67:63:8f:e8:ff:73:71:3f:d2:5e:10:2d:c1:
62:41:cc:2d:c6:29:14:8e:61:ae:57:00:83:2d:e5:72:6a:01:
ba:8b:3b:18:6f:c1:22:e7:dd:28:40:95:71:17:51:6f:24:32:
2e:2c:01:c9:18:5e:47:0e:af:3c:06:44:e8:68:04:ce:0a:52:
90:d8:bb:1a:9b:88:e8:79:11:5e:ed:a5:3d:98:42:d3:64:50:
d2:83:dc:14:29:ec:84:00:99:98:4b:7d:72:c2:00:fe:c7:2f:
02:90:83:82:69:9a:24:1a:45:46:df:42:70:35:38:dd:73:f3:
31:ca:9f:29:a9:41:c9:a0:83:dd:2b:f8:8e:59:3f:8a:fe:15:
b5:c2:75:e2:f8:7e:76:cf:c9:c5:03:48:e7:d3:c8:4f:6e:9c:
90:3b:a3:51:71:75:98:d2:5e:ce:bd:b5:88:73:42:72:3d:48:
36:1d:a7:70:c7:f2:80:ca:4d:0c:6c:3c:b5:bd:b8:2b:80:af:
19:f1:0c:8f:5b:83:cc:3a:71:bc:2e:c9:7b:78:59:55:61:b8:
1c:43:30:7b:fc:cd:03:be:0f:72:dc:5b:81:42:ca:b5:30:f1:
28:a4:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:29 2025 by rpki-client