![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
File: 4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa (raw, json)
Hash identifier: 9GleTcukzE0rgRIyG/PYFag54ZZ9qvRnBqNk6hH+5WY=
Subject key identifier: E1:88:75:6D:93:A8:E2:9D:BE:57:60:D9:C8:36:4F:4A:BD:A7:C2:91
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 07
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
Signing time: Thu 25 Aug 2022 08:28:34 +0000
ROA not before: Thu 25 Aug 2022 08:28:34 +0000
ROA not after: Fri 25 Aug 2023 07:39:18 +0000
asID: 9615
IP address blocks: 202.224.112.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Aug 25 08:28:34 2022 GMT
Not After : Aug 25 07:39:18 2023 GMT
Subject: CN=E188756D93A8E29DBE5760D9C8364F4ABDA7C291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:b7:0e:8a:89:2d:4d:cc:bd:e9:ad:7b:df:
a1:87:04:03:85:86:1b:11:86:d8:9a:aa:dc:2a:90:
97:35:c4:7a:32:d2:52:2e:14:82:85:0e:c9:2b:2f:
b4:9e:a1:11:6e:0c:3d:0d:cb:c6:02:88:84:de:69:
44:fd:5f:8c:ea:5c:db:e9:ba:3c:b7:df:34:f8:36:
fb:14:03:b0:3c:88:8c:0b:dd:c1:63:ac:a3:57:98:
67:f2:48:61:0d:84:d4:7c:2b:e0:a9:cc:d1:56:d9:
8f:c1:fb:6d:da:6a:1a:6c:f1:fc:92:5a:3e:09:77:
3f:6f:10:61:27:b4:c3:aa:02:5c:13:98:ce:a7:2e:
c5:64:29:9b:24:af:70:4b:be:9c:5d:cd:1e:aa:68:
40:a8:64:a4:d9:74:88:1e:85:9c:3c:16:aa:db:79:
0e:b5:d8:df:37:e4:c2:13:2e:c6:cb:cd:d6:9f:5c:
29:8f:b7:68:c6:29:b5:4a:80:80:d6:c5:84:64:83:
25:ea:d9:50:f2:a1:a3:a5:8e:fa:b2:1e:2e:54:19:
1a:1c:ae:5e:01:78:04:41:2c:fb:08:4e:d3:fa:af:
fd:1c:27:5e:18:8a:32:56:ad:c4:2f:75:b0:45:83:
59:e3:88:32:d0:aa:98:d2:2e:1a:51:05:2e:88:82:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:75:6D:93:A8:E2:9D:BE:57:60:D9:C8:36:4F:4A:BD:A7:C2:91
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.224.112.0/20
Signature Algorithm: sha256WithRSAEncryption
26:ef:7e:33:41:ad:49:9c:44:1f:fa:63:c2:74:d6:23:7a:fa:
19:a0:08:74:d5:b7:69:21:f3:d0:b3:12:4b:63:0b:51:27:44:
22:2d:cd:84:b8:5f:f5:31:5c:c8:8a:15:1c:7c:1c:46:db:90:
69:48:3b:e8:f7:8e:e5:04:70:4a:54:39:36:a0:fc:49:38:1e:
0b:64:87:6c:e2:d1:b1:ac:a8:62:dc:ef:f4:52:76:97:86:23:
9a:0c:a1:69:e2:fd:e1:d0:0b:2c:45:27:8a:01:6f:36:f3:75:
08:d7:ab:f4:47:97:cc:f2:3a:38:d7:66:e9:18:db:84:b2:58:
22:fe:6e:0b:0d:ab:c8:f4:60:ca:89:89:7f:9b:dd:f2:c5:ee:
63:da:ac:83:d5:d7:e4:6b:b2:2c:ca:32:16:98:5e:9c:a3:ba:
6b:69:7a:c4:1a:a4:72:27:3d:a6:4d:2b:f2:2b:ff:6c:18:de:
c5:a6:e6:24:46:18:96:4a:f1:e9:cd:69:1c:18:b5:de:72:8e:
bf:d5:ac:85:62:8a:c3:58:b7:93:8f:10:f0:8f:c9:f3:0c:b9:
ee:bb:72:16:dd:c1:63:aa:b2:f7:12:93:15:80:e2:13:0c:a5:
92:d9:c7:dd:91:b9:8e:3f:29:46:78:26:c0:e9:3d:59:73:10:
26:0c:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:36 2025 by rpki-client