![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
File: 2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa (raw, json)
Hash identifier: LJ8Ko4GHpGbYzkdpQuogQaGUE57m/E9s4bQFQYAuNHI=
Subject key identifier: DA:0C:16:18:EF:47:B5:68:0F:13:48:D5:D4:B2:AD:F8:E3:D8:21:7A
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: AB
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
Signing time: Sun 01 Jan 2023 01:28:40 +0000
ROA not before: Sun 01 Jan 2023 01:28:40 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 59099
IP address blocks: 210.231.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jan 1 01:28:40 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=DA0C1618EF47B5680F1348D5D4B2ADF8E3D8217A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:2c:71:ae:93:9b:9a:cf:7d:e2:72:d9:12:
94:6a:2b:cd:9f:81:64:1d:04:2a:51:34:92:b3:3b:
f1:ff:58:a2:b9:9a:ac:d2:83:d2:df:b8:31:9c:48:
e5:c0:d0:bf:03:e6:0c:35:aa:e0:9d:71:fd:27:9a:
b5:b0:92:d7:5d:cc:a8:8e:61:22:ac:5d:fa:8d:56:
46:cc:ee:97:9d:20:98:a3:a0:91:6a:6c:b3:19:d6:
46:7e:87:49:22:f7:24:6d:86:07:18:e1:0d:91:1f:
31:fb:bf:02:6c:9e:67:be:f5:ad:74:de:d7:cb:44:
68:a6:84:c2:4c:67:dd:f9:6d:b2:aa:36:9b:5b:33:
79:39:37:ef:07:cb:d8:b4:5f:d2:58:17:14:d0:9b:
e9:9c:f0:44:43:81:e7:32:25:62:d3:d5:81:74:92:
31:84:75:92:a4:ce:c6:f9:f7:f0:86:d8:67:f7:76:
ac:ed:b8:20:03:4d:94:bf:3f:44:c8:87:dd:83:15:
be:ef:31:86:4f:33:7f:d9:37:a9:40:bb:fe:d1:eb:
83:94:e8:76:bd:d7:fb:1d:b2:8e:74:c8:b4:41:53:
63:94:65:f7:e1:b2:84:c1:f6:ad:91:d3:11:fe:ed:
99:99:97:14:b3:92:d3:40:a0:98:0d:75:f6:99:15:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:16:18:EF:47:B5:68:0F:13:48:D5:D4:B2:AD:F8:E3:D8:21:7A
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.231.216.0/22
Signature Algorithm: sha256WithRSAEncryption
51:03:0b:03:f0:c8:d3:8f:2d:92:3a:ca:38:83:64:b8:c5:db:
57:e0:07:12:e3:de:63:53:ab:55:33:3a:96:8c:99:54:71:7a:
bb:99:1a:80:e6:fd:0c:21:46:b8:80:15:a8:7f:92:41:72:c2:
fa:8f:fe:f9:8b:5c:db:af:1f:8c:3e:58:27:98:03:ee:2c:b7:
8e:d6:27:a5:4f:a4:0c:82:8d:65:07:7e:62:1c:41:97:ce:8c:
9f:0d:45:68:9f:2d:31:34:01:7e:4f:29:ab:3b:87:b7:7d:e5:
3d:8d:c4:2d:5d:39:0e:a6:ad:b2:eb:5c:e0:66:31:72:30:32:
fd:46:b3:3b:c2:8b:e6:b8:9d:29:7f:48:f3:5f:ab:29:43:b5:
1d:5c:bf:f2:e8:bd:82:64:b3:80:6a:0d:e4:8b:e8:c7:8e:1e:
b1:b2:8a:f4:00:c7:5e:de:30:6b:01:85:d4:e8:41:8a:2f:93:
2a:35:7d:8b:d9:28:f2:57:03:67:9b:d5:1a:e7:98:4f:31:35:
17:98:e2:c0:c5:62:8f:44:e9:e5:f1:28:6c:40:fb:3e:76:b3:
1f:04:4c:b1:20:45:70:ab:64:53:29:54:7a:66:39:36:54:9c:
51:07:44:d2:31:61:f3:cb:2c:61:6f:c7:2c:77:dd:71:8e:f1:
bb:a5:72:32
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzAxMDEw
MTI4NDBaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBMEMxNjE4RUY0N0I1
NjgwRjEzNDhENUQ0QjJBREY4RTNEODIxN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF5SxxrpObms994nLZEpRqK82fgWQdBCpRNJKzO/H/WKK5mqzS
g9LfuDGcSOXA0L8D5gw1quCdcf0nmrWwktddzKiOYSKsXfqNVkbM7pedIJijoJFq
bLMZ1kZ+h0ki9yRthgcY4Q2RHzH7vwJsnme+9a103tfLRGimhMJMZ935bbKqNptb
M3k5N+8Hy9i0X9JYFxTQm+mc8ERDgecyJWLT1YF0kjGEdZKkzsb59/CG2Gf3dqzt
uCADTZS/P0TIh92DFb7vMYZPM3/ZN6lAu/7R64OU6Ha91/sdso50yLRBU2OUZffh
soTB9q2R0xH+7ZmZlxSzktNAoJgNdfaZFeOLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2gwWGO9HtWgPE0jV1LKt+OPYIXowHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0LzJnd1dHTzlIdFdnUEUwalYxTEt0LU9QWUlYby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALS59gwDQYJKoZIhvcNAQELBQADggEBAFEDCwPwyNOPLZI6yjiDZLjF21fg
BxLj3mNTq1UzOpaMmVRxeruZGoDm/QwhRriAFah/kkFywvqP/vmLXNuvH4w+WCeY
A+4st47WJ6VPpAyCjWUHfmIcQZfOjJ8NRWifLTE0AX5PKas7h7d95T2NxC1dOQ6m
rbLrXOBmMXIwMv1GszvCi+a4nSl/SPNfqylDtR1cv/LovYJks4BqDeSL6MeOHrGy
ivQAx17eMGsBhdToQYovkyo1fYvZKPJXA2eb1RrnmE8xNReY4sDFYo9E6eXxKGxA
+z52sx8ETLEgRXCrZFMpVHpmOTZUnFEHRNIxYfPLLGFvxyx33XGO8bulcjI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:03 2025 by rpki-client