![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
File: t1wxdz5cRK1sWUgGyul0KLrdPVY.roa (raw, json)
Hash identifier: aSp0NmA4ePRuJX4YNsvUnF4FSUwMbkjhJq5MmdwFfE0=
Subject key identifier: B7:5C:31:77:3E:5C:44:AD:6C:59:48:06:CA:E9:74:28:BA:DD:3D:56
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
Signing time: Tue 06 Jun 2023 16:03:03 +0000
ROA not before: Tue 06 Jun 2023 16:03:03 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974 (0x3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:03 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B75C31773E5C44AD6C594806CAE97428BADD3D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:ee:4c:01:d0:fb:81:d7:c0:cf:c1:be:f7:
a0:6d:53:d6:68:37:2f:56:bf:8b:bc:e2:ec:bf:99:
bf:ce:d5:95:b4:4a:ba:52:3c:55:8a:04:de:9f:f3:
5e:c2:91:11:6f:e7:fd:c8:9c:49:c4:9b:af:40:1e:
86:ef:cf:2a:f8:12:c4:58:94:c4:94:07:d5:89:89:
16:31:78:9d:80:b1:fe:82:6b:54:8d:e3:5d:43:f8:
09:17:a4:c6:57:4a:b5:8b:14:0d:a2:61:72:a8:93:
b4:6c:73:08:6f:5a:f8:11:1a:91:b0:ee:d9:c4:a8:
41:af:12:fe:19:90:47:e5:e7:39:e1:a9:00:fe:fd:
7c:90:e9:41:b4:ac:71:6c:87:56:31:91:c2:b2:99:
a9:3c:63:c3:55:57:9f:d1:d8:9b:67:2b:c8:ef:e9:
4c:2e:91:29:b4:45:1e:c9:9f:36:e0:3f:03:21:51:
46:70:74:b5:34:a0:31:d2:33:e1:a1:49:34:23:ef:
8e:bc:74:3a:e4:86:6a:cd:26:4a:9e:3f:21:ea:5e:
ce:a3:14:98:ac:1c:fe:4a:40:63:2e:08:0c:1f:37:
0e:54:29:a7:f5:ad:4d:fe:76:56:b0:93:69:a8:01:
d1:3e:e8:99:ac:0e:30:d4:35:89:48:22:a5:25:a3:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:31:77:3E:5C:44:AD:6C:59:48:06:CA:E9:74:28:BA:DD:3D:56
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.128.0/19
Signature Algorithm: sha256WithRSAEncryption
31:c3:af:f8:49:3e:2e:f0:5b:be:5e:00:b8:dc:e4:41:2b:5e:
6e:48:f3:ad:0f:4a:7d:b0:7e:f9:24:72:56:85:7d:51:84:bb:
56:33:58:c8:69:f6:49:b0:93:45:62:46:f8:4e:34:0c:2e:6f:
36:3f:0c:19:9c:c1:c2:58:20:15:9c:7a:58:f0:e6:14:e7:49:
db:7c:81:0b:eb:de:8f:3d:f1:5f:4a:ba:f4:45:d0:f3:70:c7:
b5:49:0a:1b:ff:5b:72:5f:f5:d6:96:91:5c:e7:2f:9a:a2:71:
c2:84:5c:21:41:3c:e5:a0:a5:7c:40:88:21:f9:66:ab:7c:af:
19:1b:14:91:96:91:c8:38:1a:3b:d2:78:46:e3:b6:31:2b:fc:
e6:15:ec:a7:4f:d4:fa:40:c9:bf:36:a3:8b:09:4c:97:e4:92:
60:22:96:ba:72:d6:61:bc:80:be:51:03:11:31:68:78:a7:10:
65:09:a7:7f:2e:1c:4e:a8:de:09:15:86:e3:41:00:e9:01:7a:
af:f1:7b:cc:6a:31:30:46:e7:fb:3a:3a:4e:f1:a3:f5:bb:1a:
ca:6e:12:3a:a6:37:de:83:bf:99:55:26:88:1e:81:08:fe:88:
32:dd:c9:ec:02:63:b3:92:e5:18:0c:04:a4:87:61:15:71:29:
85:ba:e4:b7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjAzMDNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI3NUMzMTc3M0U1QzQ0
QUQ2QzU5NDgwNkNBRTk3NDI4QkFERDNENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyOu5MAdD7gdfAz8G+96BtU9ZoNy9Wv4u84uy/mb/O1ZW0SrpS
PFWKBN6f817CkRFv5/3InEnEm69AHobvzyr4EsRYlMSUB9WJiRYxeJ2Asf6Ca1SN
411D+AkXpMZXSrWLFA2iYXKok7RscwhvWvgRGpGw7tnEqEGvEv4ZkEfl5znhqQD+
/XyQ6UG0rHFsh1YxkcKymak8Y8NVV5/R2JtnK8jv6UwukSm0RR7JnzbgPwMhUUZw
dLU0oDHSM+GhSTQj7468dDrkhmrNJkqePyHqXs6jFJisHP5KQGMuCAwfNw5UKaf1
rU3+dlawk2moAdE+6JmsDjDUNYlIIqUlo5u/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUt1wxdz5cRK1sWUgGyul0KLrdPVYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3Qxd3hkejVjUksxc1dVZ0d5dWwwS0xyZFBWWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxaoAwDQYJKoZIhvcNAQELBQADggEBADHDr/hJPi7wW75eALjc5EErXm5I
860PSn2wfvkkclaFfVGEu1YzWMhp9kmwk0ViRvhONAwubzY/DBmcwcJYIBWceljw
5hTnSdt8gQvr3o898V9KuvRF0PNwx7VJChv/W3Jf9daWkVznL5qiccKEXCFBPOWg
pXxAiCH5Zqt8rxkbFJGWkcg4GjvSeEbjtjEr/OYV7KdP1PpAyb82o4sJTJfkkmAi
lrpy1mG8gL5RAxExaHinEGUJp38uHE6o3gkVhuNBAOkBeq/xe8xqMTBG5/s6Ok7x
o/W7GspuEjqmN96Dv5lVJogegQj+iDLdyewCY7OS5RgMBKSHYRVxKYW65Lc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:04 2025 by rpki-client