![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
File: -VBJncu0FxfPkVyGuE5YUukRoqM.roa (raw, json)
Hash identifier: /AcYWKOXhwhjvg6wgy1gnTmOtiUFYgc4zgPF/hAYeTs=
Subject key identifier: F9:50:49:9D:CB:B4:17:17:CF:91:5C:86:B8:4E:58:52:E9:11:A2:A3
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 87
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
Signing time: Sun 01 May 2022 01:30:18 +0000
ROA not before: Sun 01 May 2022 01:30:18 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 9607
IP address blocks: 211.14.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 1 01:30:18 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=F950499DCBB41717CF915C86B84E5852E911A2A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:a0:cd:b5:c7:f2:01:77:a0:68:e4:20:34:
44:4f:ac:df:a9:bc:c2:c7:07:be:aa:fa:48:5e:cf:
a9:b4:65:61:80:91:fc:4b:20:af:92:f6:08:d9:dc:
60:a5:47:c3:55:21:10:54:4a:48:0e:b4:94:96:cc:
ba:3e:9c:75:4f:6f:d8:06:74:78:71:ff:82:8f:69:
05:e8:45:84:5e:0c:dd:cf:d3:cc:4f:47:ab:1f:bb:
ed:62:ff:85:66:28:6b:2e:8c:fe:0a:cb:f8:7b:0d:
43:34:8c:f4:00:40:91:2a:36:f3:41:d9:53:88:4b:
64:83:95:e0:e2:a6:44:41:00:9c:4c:32:2d:7c:04:
73:fe:d3:31:35:e4:00:b9:6e:3b:0f:da:c3:88:74:
03:9b:92:b1:cb:63:6d:e8:bb:11:7b:23:1d:a7:37:
96:0c:ad:4b:76:e0:0d:89:b1:05:59:cf:1e:86:e8:
82:01:0c:43:d7:e7:d2:06:6c:52:1e:b7:38:95:38:
31:1a:88:e1:d2:f0:f4:8f:36:b3:7c:a7:1e:c4:e8:
c0:b2:ad:db:8f:56:ee:e3:8b:be:2a:62:9d:17:38:
d3:55:63:56:fa:1b:be:bf:4a:f8:56:5a:18:cb:40:
c9:85:52:ab:9f:cb:fc:69:58:b9:ad:a5:46:e8:47:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:49:9D:CB:B4:17:17:CF:91:5C:86:B8:4E:58:52:E9:11:A2:A3
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-VBJncu0FxfPkVyGuE5YUukRoqM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:f9:04:e8:5c:5d:9e:f1:0f:e4:d9:eb:57:a7:7d:8c:aa:fa:
8a:2d:af:e3:c0:ca:db:e2:1b:aa:81:8a:67:5e:3c:5a:81:e5:
28:19:39:1f:c2:ed:aa:fb:7a:d9:48:85:f7:c4:0a:69:f7:fa:
af:be:3c:65:a0:22:14:fd:2a:dd:0e:1d:aa:ed:b6:0c:a7:c6:
6f:d6:f1:a6:39:1a:27:8d:fe:50:01:52:a2:f6:34:91:85:8b:
3f:e3:dc:60:4b:ca:08:9b:8e:30:26:ca:c2:dc:32:55:87:1d:
bb:12:3c:5c:d4:d7:86:c5:fd:87:ec:a7:ae:ad:76:f4:2b:0f:
a3:1b:a9:09:71:a7:13:ab:83:67:8d:97:25:c7:44:66:83:f5:
90:3d:cd:30:8f:c7:5c:b3:17:75:88:6e:64:29:95:36:16:bb:
7b:17:eb:59:dd:71:93:00:56:f2:86:3c:a8:13:db:e6:7b:b6:
2b:13:6a:ef:27:d6:ce:2b:d6:f0:d5:6e:c6:df:21:a4:cf:7e:
14:16:31:34:f5:0e:8a:4f:26:b6:6a:6d:63:57:93:5d:89:1a:
c4:8f:ac:84:4b:03:3e:af:a7:85:ee:8e:7d:cb:75:66:cd:99:
26:8e:ef:25:93:4b:39:86:5c:c0:40:2f:ac:96:e1:16:18:5a:
46:50:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:19 2025 by rpki-client