![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/L7Xrew7_s8k9KE98_hTAk2jW3WY.roa
File: L7Xrew7_s8k9KE98_hTAk2jW3WY.roa (raw, json)
Hash identifier: 3w1t5GGOPu2kLNWj79aDazOGeGajxP1p/GVGVkbrsMA=
Subject key identifier: 2F:B5:EB:7B:0E:FF:B3:C9:3D:28:4F:7C:FE:14:C0:93:68:D6:DD:66
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 012A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/L7Xrew7_s8k9KE98_hTAk2jW3WY.roa
Signing time: Fri 07 Jul 2023 04:06:04 +0000
ROA not before: Fri 07 Jul 2023 04:06:04 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 122.145.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:06:04 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=2FB5EB7B0EFFB3C93D284F7CFE14C09368D6DD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:cb:d9:0e:ee:ee:a5:5a:9d:ee:ed:5e:98:
23:64:b0:82:9d:16:2e:3f:c2:b6:51:26:be:3e:c9:
e4:ce:34:b5:3d:d7:4f:2f:71:e7:d5:7c:c0:d8:42:
98:84:95:84:6c:8f:5a:a7:35:93:60:c8:d9:ba:c1:
d0:8c:53:8b:df:34:b4:61:72:cf:23:19:23:a6:e1:
9f:dc:72:cc:74:c8:ec:de:1d:b5:29:f7:82:0b:b3:
4e:3e:a9:83:92:1c:50:fe:09:47:6b:97:6a:5f:bd:
75:a1:5a:29:91:e1:c5:27:da:59:be:0d:41:71:f6:
73:1b:bc:07:1d:9a:21:a3:35:5a:07:58:47:12:5b:
af:d5:0e:b9:d1:66:2e:45:05:78:b5:6c:d3:13:62:
05:d2:9b:56:ae:22:1a:a7:6f:72:28:a9:9e:3c:3e:
53:50:0a:ef:5d:08:bb:e5:5a:18:f5:90:07:a6:6a:
9d:91:39:66:6d:7e:04:f9:cf:40:d3:02:58:30:b2:
94:0c:32:59:11:8a:98:6c:b1:48:6a:a4:61:b3:ac:
23:3e:54:78:99:eb:a4:b9:89:f5:f6:70:46:9f:c9:
32:55:24:28:b1:48:97:e6:f6:36:27:69:9b:b3:af:
c8:bc:6f:00:fa:c6:3a:01:66:05:cb:71:35:d7:9b:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:EB:7B:0E:FF:B3:C9:3D:28:4F:7C:FE:14:C0:93:68:D6:DD:66
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/L7Xrew7_s8k9KE98_hTAk2jW3WY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.145.144.0/20
Signature Algorithm: sha256WithRSAEncryption
21:31:0b:37:37:78:60:e8:45:a1:7c:5b:d8:67:af:8e:17:19:
8d:c7:65:db:71:b8:42:ef:4a:04:15:ec:2b:12:09:0a:ce:6b:
02:64:5f:9b:e6:f4:07:15:71:0c:53:32:68:1a:13:af:da:08:
cc:bc:a0:7d:92:3a:38:e0:d2:f5:6d:63:e3:dc:44:bf:8d:f1:
3b:21:cf:21:da:3f:fb:9c:5b:2f:06:0e:ba:db:98:59:0f:db:
87:16:de:75:2c:d5:48:92:6b:f2:5c:d5:2d:36:0f:d1:52:76:
23:f1:9e:ca:dd:08:fe:6a:de:ce:fd:37:cc:e3:76:00:f3:ee:
1d:2a:67:83:de:ad:01:b2:2a:fe:19:00:cc:9c:dd:7e:c8:26:
cb:8b:17:23:5a:8e:38:7f:5b:82:f3:f3:1e:ce:6e:ca:e4:11:
6e:92:81:ca:8c:c1:82:4c:36:e4:7a:61:38:a1:86:a0:74:30:
9b:b0:56:1e:c6:ee:b2:91:29:80:8a:54:83:b1:ae:41:cd:f0:
6f:14:3f:85:b5:fc:ca:be:30:50:97:73:7e:c2:36:43:f8:54:
84:40:20:89:7d:b0:78:6d:80:47:1e:96:ea:b4:68:3e:be:01:
0a:1b:e9:0d:99:ad:13:b0:9c:fa:18:a3:13:28:c8:45:36:65:
1b:b8:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:32 2025 by rpki-client