![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
File: voBgT4crPLJZj5YFt37PfOZYtdw.roa (raw, json)
Hash identifier: szYN23kF4vpVih2snf5BaMJ3u/Qog6TwKwDRrMcp6E0=
Subject key identifier: BE:80:60:4F:87:2B:3C:B2:59:8F:96:05:B7:7E:CF:7C:E6:58:B5:DC
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 96
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
Signing time: Thu 01 Sep 2022 01:28:11 +0000
ROA not before: Thu 01 Sep 2022 01:28:11 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 7530
IP address blocks: 210.231.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 1 01:28:11 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=BE80604F872B3CB2598F9605B77ECF7CE658B5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:3d:53:8f:37:ef:0e:f3:fc:a6:df:39:3e:
0d:b4:e6:d1:3f:00:2e:85:d9:c6:20:59:69:9e:7e:
de:c3:4d:d7:3c:d4:a8:fb:ac:b7:b5:fd:24:dd:21:
82:a4:0a:81:df:e3:d8:6f:06:05:15:ec:6e:8f:8b:
3f:83:57:01:c2:b0:43:ae:9b:d0:2b:cb:8e:50:82:
2f:0b:ed:0c:03:53:f0:c7:42:3e:73:20:ec:20:56:
10:15:e2:e6:fa:ca:21:7d:d2:1b:06:d0:35:f2:8a:
12:63:9a:6e:b2:19:ff:21:5f:cd:4e:0b:af:8b:eb:
11:b4:8a:c3:22:45:62:43:4f:70:df:34:59:f9:3e:
11:73:58:ec:d5:8d:32:2b:d3:00:b9:54:a2:6d:ad:
77:3a:29:74:28:5a:ed:7c:4e:96:9c:16:87:f3:5f:
e5:4e:5b:52:24:ff:51:f8:b8:18:92:49:54:63:f4:
24:ea:af:3e:14:5f:13:b0:8b:c9:ea:2e:8d:b8:42:
31:ca:26:f4:0d:1f:c7:84:92:5f:24:20:59:da:f1:
c2:0c:29:c9:d4:95:c3:84:d8:c5:ad:bc:d8:a0:13:
2e:b4:22:7a:0f:ee:3d:e1:6c:7a:70:df:c9:52:29:
89:72:0b:be:13:1a:a1:4f:9e:32:af:16:37:53:70:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:60:4F:87:2B:3C:B2:59:8F:96:05:B7:7E:CF:7C:E6:58:B5:DC
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/voBgT4crPLJZj5YFt37PfOZYtdw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.231.212.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b8:07:fc:8d:23:af:b6:8d:51:53:4b:2d:e4:e5:de:2a:25:
7c:25:73:cf:95:9c:36:33:73:70:97:8c:58:e1:a8:12:41:16:
92:63:01:94:07:d0:61:f0:46:f2:73:cc:73:74:d1:22:5c:5b:
87:8f:a9:28:c0:0a:24:bf:62:8a:86:4d:fa:50:36:69:88:c9:
a2:3d:63:a0:cb:25:99:e3:80:11:fd:27:dd:e6:10:64:b2:aa:
35:ec:ee:13:2a:54:96:3c:b2:45:e7:d8:67:6c:93:2d:70:e2:
3b:97:69:f7:7d:85:76:40:9e:36:66:a0:18:0f:88:9e:66:59:
ec:56:4f:b8:b3:a5:a5:48:fa:bb:1a:4a:f9:a3:61:ab:0c:f2:
b7:19:4b:03:92:9c:df:15:72:a0:df:15:80:c7:93:4f:dd:de:
c1:52:aa:0a:aa:09:9d:21:43:86:8a:08:a9:a4:07:85:6f:06:
56:98:5e:37:03:fc:e1:7d:62:89:a8:c1:5b:32:99:a1:37:af:
c5:81:b8:93:c6:27:81:26:42:ba:8f:56:fd:3d:72:ca:8e:27:
27:6a:47:c8:cc:d4:7e:9e:fe:52:8a:da:d2:96:9c:28:cd:5d:
02:df:b7:f0:f2:8b:b7:35:5f:cf:e3:73:82:55:50:cf:52:b5:
b4:bc:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:57 2025 by rpki-client