![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
File: 1ctN4PnDFbacaroCGnNWQWeOLdw.roa (raw, json)
Hash identifier: ByDuQbRL1E78x1CWvgGOzYEOdltho6diLpoj5yx4BfU=
Subject key identifier: D5:CB:4D:E0:F9:C3:15:B6:9C:6A:BA:02:1A:73:56:41:67:8E:2D:DC
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: CD
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
Signing time: Tue 01 Aug 2023 01:30:39 +0000
ROA not before: Tue 01 Aug 2023 01:30:39 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 7530
IP address blocks: 210.231.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Aug 1 01:30:39 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=D5CB4DE0F9C315B69C6ABA021A735641678E2DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:44:aa:e1:23:9c:19:49:e8:53:0f:9b:4a:
51:10:e7:30:97:d3:eb:55:59:51:3f:97:76:b4:7d:
65:3f:d2:27:fd:cc:9e:e8:73:0f:33:53:d2:81:38:
ea:4e:80:db:17:3d:c4:e4:f0:c1:8a:98:c2:11:4a:
24:91:5d:f0:d3:3c:00:af:65:1c:85:5d:a8:f8:26:
92:84:53:6b:05:2b:96:85:98:1d:40:61:80:f4:09:
55:83:fe:5a:1c:64:00:8f:e4:e7:0d:21:58:30:df:
cb:33:c7:95:5a:c1:4a:6c:f8:ef:aa:7a:7d:b7:87:
07:8c:a4:41:8b:2d:c4:06:c4:70:f3:c9:6c:3c:73:
eb:55:e4:c4:68:7e:f1:8e:79:f6:b3:55:47:54:91:
e9:62:c2:d3:74:51:2e:be:8e:b0:48:4a:02:84:b4:
5a:87:e2:e3:cb:16:2a:4e:cb:8d:15:21:a1:3d:8a:
c8:00:c5:5b:64:ca:a7:69:ce:59:56:4b:12:a4:53:
05:c9:39:85:ab:1c:72:96:29:e3:0d:43:7f:72:17:
57:8e:60:d9:ba:60:0f:07:49:71:8f:0b:da:41:8b:
a9:57:57:20:52:ec:22:63:ee:56:bf:f6:d7:f4:bb:
91:25:2b:f9:54:27:3a:66:c4:a5:47:9f:1f:df:a5:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:4D:E0:F9:C3:15:B6:9C:6A:BA:02:1A:73:56:41:67:8E:2D:DC
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a3:d2:58:f2:13:4b:45:61:66:f5:6d:18:f2:d5:96:62:0d:
a2:fc:52:13:60:9c:67:24:20:43:d1:3f:fc:bf:14:53:8c:dc:
ac:32:20:62:89:8c:52:bc:6e:c0:90:e5:c9:dc:ea:62:9e:a4:
76:1c:51:8f:8d:62:5f:5a:2b:33:a9:1e:64:7f:af:e4:6c:3d:
aa:da:4f:d4:90:37:36:26:a4:c2:21:a8:7d:35:00:9b:e9:95:
38:53:94:71:80:c8:4d:a5:df:5b:0b:b7:1b:69:c6:a4:cb:e0:
c0:01:bf:4b:4a:ac:85:8b:b2:af:cb:10:0e:39:6d:01:fb:04:
38:37:ea:69:ba:87:c4:95:c4:d3:2f:53:88:80:60:18:e6:9c:
90:82:0c:17:a0:97:14:17:04:71:c0:64:40:67:32:d9:a9:1f:
f5:f6:80:78:ab:f5:b8:95:05:e4:8e:d5:af:29:c8:d8:17:7c:
b8:99:93:c9:8b:9d:59:35:ad:f8:61:bd:35:7f:08:45:ec:18:
3d:8b:07:28:d7:b4:00:f1:b5:9b:a8:c9:6e:93:7b:a2:88:3d:
dc:e2:d2:30:65:bc:35:84:aa:bd:55:86:97:20:0c:a8:9e:e5:
ed:dd:1d:b1:b5:c7:0b:f2:79:4e:c6:01:2d:c5:00:00:15:bc:
dc:17:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:38 2025 by rpki-client