![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
File: Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa (raw, json)
Hash identifier: zTZmiBhCWYVo5FCidgZohc9ySPDjRAxjl24GrYRw14M=
Subject key identifier: 46:8F:FC:1C:5F:3F:D0:5F:29:FA:87:B4:CA:53:17:F2:91:1D:57:F8
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: C0
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
Signing time: Sat 01 Jul 2023 01:30:24 +0000
ROA not before: Sat 01 Jul 2023 01:30:24 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 9607
IP address blocks: 124.147.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jul 1 01:30:24 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=468FFC1C5F3FD05F29FA87B4CA5317F2911D57F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:09:c5:6e:17:c1:aa:a0:8e:78:25:ff:a6:
81:b4:a2:6b:91:6d:c8:f3:be:bb:2c:a9:7a:43:52:
f8:1a:c7:9c:01:08:58:ae:8c:bc:fd:00:db:bf:e1:
f6:d0:74:58:3e:d1:13:1c:39:69:a9:b8:1a:2d:3b:
5e:61:f8:51:1e:1e:5d:ce:f2:aa:78:bf:4e:78:88:
39:5e:54:9d:6c:93:e9:25:fc:31:a1:6f:8d:1b:17:
b5:b5:f1:d6:74:bb:80:9d:ea:ce:be:15:4f:28:b8:
ad:ac:13:48:1d:53:d3:ad:5f:53:74:9f:42:ba:28:
64:20:f1:32:f0:8d:69:95:96:71:1c:c0:7d:33:04:
7b:53:54:58:b2:b5:f4:14:b2:c5:97:ff:02:9d:e6:
7e:aa:34:c2:33:a7:c5:e3:91:97:8e:fe:a9:54:b6:
46:ff:47:3c:a9:fb:94:d4:55:7f:e7:e3:41:64:40:
0b:ca:79:65:21:54:e7:a6:4c:a5:66:26:0c:00:d3:
b6:6f:a3:e0:84:87:d3:b4:47:33:da:e7:61:d0:9a:
a0:61:7f:d5:ed:e5:6a:5f:28:eb:fc:8b:7e:2c:3e:
4f:02:19:ba:5e:89:4f:8b:4f:23:11:20:41:d8:a6:
70:e1:00:2e:e1:bc:d9:b8:55:0f:c8:f3:13:0b:1a:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:FC:1C:5F:3F:D0:5F:29:FA:87:B4:CA:53:17:F2:91:1D:57:F8
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Ro_8HF8_0F8p-oe0ylMX8pEdV_g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.147.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:fb:6d:2b:d8:61:db:25:07:c2:a2:4e:aa:2c:13:43:f7:f9:
8f:06:ec:4c:f1:b6:76:5f:23:5d:b2:ba:95:bf:1b:5c:e8:98:
ec:08:fc:60:f9:ac:66:a6:a1:4a:78:6e:b2:5c:fa:79:f2:cd:
a6:c6:22:61:a1:a8:c9:8c:ae:f8:ff:6a:da:74:33:17:12:cc:
88:85:9f:5b:ed:c2:bb:29:60:3a:f3:f4:f5:01:a7:e3:9c:23:
f2:aa:ad:b4:28:68:d8:35:f5:c3:34:23:79:f3:47:46:16:22:
52:da:b6:10:0a:f3:52:6f:1d:6b:53:ac:62:5e:db:ce:ee:e5:
d8:fe:ef:c6:1d:9f:60:70:8d:4e:6a:62:89:c9:0e:ae:81:18:
89:f4:93:22:bb:ae:e8:52:c7:cd:58:ef:43:5f:7b:21:62:62:
b3:75:aa:37:7a:14:5a:6b:3f:1e:af:04:13:4e:7a:20:78:fb:
a8:32:c6:45:cf:2a:34:a0:d3:fa:f9:8e:c5:21:61:47:19:e3:
f9:a9:4e:d1:67:5d:4c:5a:72:31:ab:b2:67:bd:53:82:8f:33:
ea:84:7b:bb:a0:1f:ea:27:33:4d:8b:30:ca:a2:57:d2:50:82:
dc:e9:79:9d:01:73:d7:35:b3:fe:76:fd:06:57:8f:02:44:89:
cc:00:d0:33
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA3MDEw
MTMwMjRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2OEZGQzFDNUYzRkQw
NUYyOUZBODdCNENBNTMxN0YyOTExRDU3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMownFbhfBqqCOeCX/poG0omuRbcjzvrssqXpDUvgax5wBCFiu
jLz9ANu/4fbQdFg+0RMcOWmpuBotO15h+FEeHl3O8qp4v054iDleVJ1sk+kl/DGh
b40bF7W18dZ0u4Cd6s6+FU8ouK2sE0gdU9OtX1N0n0K6KGQg8TLwjWmVlnEcwH0z
BHtTVFiytfQUssWX/wKd5n6qNMIzp8XjkZeO/qlUtkb/Rzyp+5TUVX/n40FkQAvK
eWUhVOemTKVmJgwA07Zvo+CEh9O0RzPa52HQmqBhf9Xt5WpfKOv8i34sPk8CGbpe
iU+LTyMRIEHYpnDhAC7hvNm4VQ/I8xMLGp9jAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURo/8HF8/0F8p+oe0ylMX8pEdV/gwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1JvXzhIRjhfMEY4cC1vZTB5bE1YOHBFZFZfZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJ8kxgwDQYJKoZIhvcNAQELBQADggEBAB/7bSvYYdslB8KiTqosE0P3+Y8G
7EzxtnZfI12yupW/G1zomOwI/GD5rGamoUp4brJc+nnyzabGImGhqMmMrvj/atp0
MxcSzIiFn1vtwrspYDrz9PUBp+OcI/KqrbQoaNg19cM0I3nzR0YWIlLathAK81Jv
HWtTrGJe287u5dj+78Ydn2BwjU5qYonJDq6BGIn0kyK7ruhSx81Y70NfeyFiYrN1
qjd6FFprPx6vBBNOeiB4+6gyxkXPKjSg0/r5jsUhYUcZ4/mpTtFnXUxacjGrsme9
U4KPM+qEe7ugH+onM02LMMqiV9JQgtzpeZ0Bc9c1s/52/QZXjwJEicwA0DM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:24 2025 by rpki-client