![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wyPiFsTnoGnB7prjwMHae-JFcJY.roa
File: wyPiFsTnoGnB7prjwMHae-JFcJY.roa (raw, json)
Hash identifier: RKUJsrDuu9iVKpnRXgyKQmMmcEY7mvdYF7A79Y8gcT0=
Subject key identifier: C3:23:E2:16:C4:E7:A0:69:C1:EE:9A:E3:C0:C1:DA:7B:E2:45:70:96
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0339
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wyPiFsTnoGnB7prjwMHae-JFcJY.roa
Signing time: Thu 01 Jun 2023 16:07:34 +0000
ROA not before: Thu 01 Jun 2023 16:07:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825 (0x339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C323E216C4E7A069C1EE9AE3C0C1DA7BE2457096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:c7:e7:54:34:66:25:21:01:9e:a1:88:72:
f7:6c:bb:cf:24:53:48:36:e3:2c:43:6c:11:69:54:
88:51:c2:5b:fe:5f:93:bf:8a:d3:7e:5c:dc:89:03:
72:47:53:fe:b4:dc:1a:57:87:19:1c:95:d5:13:4c:
84:35:4e:2c:71:fe:07:56:06:4e:4e:e1:e6:4d:f0:
21:25:7a:0a:8d:31:25:1e:63:e1:c7:17:e1:d7:0d:
63:a0:29:d6:fd:22:b9:4d:01:4b:97:ea:05:95:8c:
f6:07:68:40:58:2b:e9:07:5a:30:f9:e2:e8:c9:8f:
9d:2f:8d:50:3f:ca:de:78:35:44:11:c3:b1:65:64:
bc:3a:68:d4:0d:f3:a1:f2:17:f7:b3:1d:f4:ca:73:
f4:4c:74:56:ff:78:1f:e5:b9:38:df:64:88:86:40:
4c:3e:b1:47:ea:6e:5e:4f:18:c4:94:da:bd:0c:a3:
85:ab:96:c0:f8:c8:0f:d7:49:fc:74:b8:9b:44:81:
f7:d7:e3:76:d6:64:0b:c4:ef:97:3b:7d:b1:2e:7a:
95:26:51:1f:91:a1:5b:3b:06:fe:45:fe:1a:f7:77:
c0:87:9b:73:a3:b7:78:d3:8a:88:de:28:8c:05:b2:
f6:98:b8:6b:54:56:ec:13:99:b0:76:dd:ba:56:46:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:E2:16:C4:E7:A0:69:C1:EE:9A:E3:C0:C1:DA:7B:E2:45:70:96
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wyPiFsTnoGnB7prjwMHae-JFcJY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.75.0/24
Signature Algorithm: sha256WithRSAEncryption
74:57:e7:a6:8b:89:b9:ab:ee:1c:1b:4c:4e:5c:27:6e:f9:66:
07:30:e1:51:7b:49:83:53:cd:b5:ea:6a:40:20:bd:c1:ca:ac:
86:b2:81:be:3f:78:52:6b:54:2b:77:f3:2f:1d:3e:5d:69:a7:
94:52:c9:d8:61:c7:00:64:db:ec:18:ca:e4:72:9f:ac:ac:c3:
40:1d:e4:d5:fe:fa:78:a0:82:07:b5:38:f1:27:02:2a:e9:7a:
d5:6e:c3:3d:4b:64:fd:dc:ce:df:66:94:72:07:30:e3:d9:55:
c7:21:f8:bf:72:46:41:3b:52:71:23:15:fe:28:28:8e:f4:da:
60:54:d1:08:9d:30:6f:28:21:37:fe:6d:0b:19:95:11:46:51:
e5:0d:d7:88:9d:fd:06:07:e0:1c:fd:2c:f5:1c:0b:d6:d1:b6:
1c:7a:f9:ab:41:35:55:ac:2f:b2:83:e4:0a:17:22:d6:f6:02:
67:24:49:dc:21:15:84:fc:ba:9d:4a:b1:68:77:d9:43:36:2b:
bd:e8:79:48:e7:4f:0a:ea:1c:72:33:cd:35:3d:d0:a4:ce:04:
13:89:1e:33:1d:ca:2c:11:9a:86:28:30:35:e6:a4:6e:91:9e:
aa:02:65:2c:33:0c:8f:a5:ca:93:64:a4:20:62:f3:41:84:41:
ca:68:13:5e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA3MzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMzMjNFMjE2QzRFN0Ew
NjlDMUVFOUFFM0MwQzFEQTdCRTI0NTcwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb0MfnVDRmJSEBnqGIcvdsu88kU0g24yxDbBFpVIhRwlv+X5O/
itN+XNyJA3JHU/603BpXhxkcldUTTIQ1Tixx/gdWBk5O4eZN8CElegqNMSUeY+HH
F+HXDWOgKdb9IrlNAUuX6gWVjPYHaEBYK+kHWjD54ujJj50vjVA/yt54NUQRw7Fl
ZLw6aNQN86HyF/ezHfTKc/RMdFb/eB/luTjfZIiGQEw+sUfqbl5PGMSU2r0Mo4Wr
lsD4yA/XSfx0uJtEgffX43bWZAvE75c7fbEuepUmUR+RoVs7Bv5F/hr3d8CHm3Oj
t3jTiojeKIwFsvaYuGtUVuwTmbB23bpWRoFRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwyPiFsTnoGnB7prjwMHae+JFcJYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3d5UGlGc1Rub0duQjdwcmp3TUhhZS1KRmNKWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSUswDQYJKoZIhvcNAQELBQADggEBAHRX56aLibmr7hwbTE5cJ275Zgcw
4VF7SYNTzbXqakAgvcHKrIaygb4/eFJrVCt38y8dPl1pp5RSydhhxwBk2+wYyuRy
n6ysw0Ad5NX++niggge1OPEnAirpetVuwz1LZP3czt9mlHIHMOPZVcch+L9yRkE7
UnEjFf4oKI702mBU0QidMG8oITf+bQsZlRFGUeUN14id/QYH4Bz9LPUcC9bRthx6
+atBNVWsL7KD5AoXItb2AmckSdwhFYT8up1KsWh32UM2K73oeUjnTwrqHHIzzTU9
0KTOBBOJHjMdyiwRmoYoMDXmpG6RnqoCZSwzDI+lypNkpCBi80GEQcpoE14=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:56 2025 by rpki-client