![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa
File: VXLllo0nHvr9YmXVBP9T7MUOcsU.roa (raw, json)
Hash identifier: ndwRAGsYcjvwxR4G01Knu9zI02M+F35FGEQSBO08AIM=
Subject key identifier: 55:72:E5:96:8D:27:1E:FA:FD:62:65:D5:04:FF:53:EC:C5:0E:72:C5
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 58
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa
Signing time: Tue 25 May 2021 02:42:14 +0000
ROA not before: Tue 25 May 2021 02:42:14 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9607
IP address blocks: 203.216.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 25 02:42:14 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=5572E5968D271EFAFD6265D504FF53ECC50E72C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:fe:e4:05:f0:29:ce:7b:2d:1c:83:9d:7f:
96:a2:b0:c5:b0:71:73:01:9a:03:1c:b8:7b:0a:39:
07:2c:8b:81:61:9e:5e:bc:82:bf:a6:5e:99:9f:9f:
11:ef:83:dd:4f:73:10:f4:90:05:ec:3b:77:da:e0:
b7:00:7d:c2:64:92:f7:2e:b2:4b:e4:4a:0f:16:e7:
51:17:4d:a3:eb:91:56:63:f2:78:37:f7:d0:51:8e:
6a:46:a3:88:c0:2f:94:23:41:c0:1d:33:1a:a4:7a:
d3:92:75:a2:60:23:2d:33:36:82:75:ec:dc:4d:c7:
c7:ba:24:d5:d5:07:c7:47:40:4a:ab:96:d2:f7:7f:
5c:5c:0d:6b:d6:8b:c8:6f:f0:f9:43:fc:9f:5e:eb:
d2:df:ca:cb:ba:56:88:87:c0:31:82:20:a2:fa:1d:
59:e4:6e:45:01:4b:b7:b3:9c:5c:1d:01:e9:81:bd:
9b:d3:43:22:2c:98:e6:ca:c8:5e:ef:3c:d5:04:c8:
f4:e4:18:42:1b:4b:16:65:ad:7a:a9:0a:5e:2c:dd:
32:d5:1e:7b:7b:ad:08:1d:2e:8f:cb:6f:ff:7b:f1:
16:4c:79:fe:6c:89:e5:ae:e0:08:3b:d3:d0:97:90:
48:8a:8d:ca:fa:7e:e1:10:24:47:bc:b2:54:ec:2c:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:E5:96:8D:27:1E:FA:FD:62:65:D5:04:FF:53:EC:C5:0E:72:C5
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa
sbgp-ipAddrBlock: critical
IPv4:
203.216.192.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:0e:37:05:f0:c3:31:df:ac:85:7f:7c:ef:78:ac:7b:43:96:
21:c0:fd:b4:c6:2f:3a:c9:df:e7:f0:b5:f2:70:02:a0:16:60:
1c:89:d8:fe:5b:93:71:60:25:30:fb:a1:52:31:48:fc:ae:35:
9e:9c:2a:62:4d:48:dc:84:bf:3f:a8:30:d1:ac:ed:89:f4:28:
d2:49:84:41:bc:5e:d8:3a:61:fd:8b:cb:ab:8a:e1:7a:11:93:
c0:c3:3c:46:5a:c0:d8:1d:a9:ed:df:f2:2f:d7:24:bf:1d:d7:
09:f7:5f:d8:30:85:f4:28:f3:cc:51:15:46:43:54:dd:78:e8:
88:1d:75:c2:d2:7b:3f:eb:16:eb:eb:43:58:a5:24:01:fd:22:
a7:72:dd:09:1b:10:d1:e7:7d:70:e4:aa:1c:cf:1e:39:c9:c1:
a7:28:54:85:6b:a0:a0:d6:d7:21:dc:b1:7a:96:47:1b:7b:9f:
79:52:42:5b:3d:5b:cd:6d:fa:85:d8:cf:09:14:8d:09:a8:28:
91:60:33:84:3a:2c:58:a7:7a:10:50:8d:af:9c:1b:f6:d2:7f:
05:fb:f1:d8:9a:a8:e0:93:4a:40:c1:41:93:14:9e:02:43:60:
19:14:a2:d9:ea:25:f3:02:ac:97:7b:80:32:b1:f3:24:d1:5e:
29:21:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:02 2025 by rpki-client