![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4rvT5DLsqO8WkMKWNh8Xf40ldgw.roa
File: 4rvT5DLsqO8WkMKWNh8Xf40ldgw.roa (raw, json)
Hash identifier: YCt5XOUeHWd1tfhvOUPvr6oCLz60WedWyWK/15j03O4=
Subject key identifier: E2:BB:D3:E4:32:EC:A8:EF:16:90:C2:96:36:1F:17:7F:8D:25:76:0C
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01D4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4rvT5DLsqO8WkMKWNh8Xf40ldgw.roa
Signing time: Fri 07 Jul 2023 04:16:44 +0000
ROA not before: Fri 07 Jul 2023 04:16:44 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 218.225.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:16:44 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=E2BBD3E432ECA8EF1690C296361F177F8D25760C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:cf:70:cd:d5:90:03:77:c4:15:6d:a6:1b:
3a:cf:84:ad:fb:f2:4c:36:66:30:4b:44:0b:eb:91:
c5:ce:9f:85:13:fa:3d:9b:14:bf:8c:20:7e:f8:48:
56:95:fe:7f:0f:98:5d:06:9e:a8:e0:a7:ee:55:60:
67:22:61:f4:91:f0:88:6e:75:2b:bb:fe:18:f3:f8:
c1:48:10:e7:c5:90:c9:0b:1e:c1:51:08:84:43:8b:
be:8d:dd:7a:88:19:50:29:1f:ea:89:77:a9:79:98:
36:1d:3a:e5:fd:ce:54:5d:fe:38:08:a0:3b:56:d3:
d7:b1:a9:d7:8b:cd:c8:47:44:28:81:6a:4d:2e:59:
d0:f5:57:3a:2b:dd:c2:02:3e:b9:11:e8:c0:9d:b0:
9f:1d:3f:e9:f8:7e:20:4b:a6:2d:9f:05:b7:06:37:
9b:34:8e:8c:f4:f0:bb:e9:6d:e3:22:2e:7e:e0:32:
ba:5c:1e:a7:62:98:53:9c:c9:51:04:e7:df:4d:8a:
4a:26:c4:4a:c6:d8:c6:d3:8c:92:68:06:d0:53:ff:
c8:84:1f:2f:0a:dd:cc:20:6c:bc:25:2b:17:9a:08:
77:75:8d:03:cc:22:fa:24:11:12:1a:d8:ed:75:9a:
c7:22:ad:5e:de:90:7b:11:04:7e:5f:8e:b4:ac:c1:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:D3:E4:32:EC:A8:EF:16:90:C2:96:36:1F:17:7F:8D:25:76:0C
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4rvT5DLsqO8WkMKWNh8Xf40ldgw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.225.248.0/21
Signature Algorithm: sha256WithRSAEncryption
58:ac:50:f8:b5:d1:42:e0:8c:5e:ad:73:b1:27:3b:c1:65:46:
fd:ea:77:54:a0:06:dd:91:e2:b2:7f:4b:ed:61:d5:7a:a8:0e:
21:23:ab:07:b1:a0:81:31:20:51:d3:bd:f9:fd:21:62:89:f0:
8d:63:69:cf:44:fd:8f:ae:2a:99:d9:de:5e:de:1f:1b:24:23:
a1:d4:95:5a:d0:3c:dd:3c:3f:4d:d5:38:5c:69:e8:8a:fa:0e:
87:e1:07:fb:72:80:2c:b3:94:eb:e2:2b:58:28:4a:45:97:e7:
37:97:96:7c:9d:9b:3b:ce:6c:5a:6a:63:67:30:63:f0:e5:33:
b8:80:63:a6:b6:55:1c:83:fa:78:5f:88:62:63:1a:19:72:71:
0b:ee:88:fd:f6:78:dc:1e:93:05:ee:fa:0d:6e:81:34:38:74:
06:ca:2a:6a:07:d2:5b:b3:39:fc:09:24:04:fc:18:ae:f3:35:
7a:bb:34:57:f2:19:e6:71:22:83:b8:72:d0:92:89:f4:e0:c6:
fa:03:60:4a:87:62:ac:01:22:7e:05:86:f3:40:28:45:ef:b2:
74:98:06:17:e7:c2:cc:94:73:d6:36:c8:7e:31:ba:08:db:d8:
53:85:80:b8:82:95:af:6f:63:a5:cc:aa:f9:07:e9:4e:a1:38:
2a:da:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:04 2025 by rpki-client