![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
File: OU1bhdPKgyZQV22OUFEOCUeCp58.roa (raw, json)
Hash identifier: q8eJtCwMwrAvoeeMqSJKBuE/TRtK71CHaccnv0n5Agk=
Subject key identifier: 39:4D:5B:85:D3:CA:83:26:50:57:6D:8E:50:51:0E:09:47:82:A7:9F
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 99
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
Signing time: Fri 22 Jul 2022 06:33:40 +0000
ROA not before: Fri 22 Jul 2022 06:33:40 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 111.234.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 22 06:33:40 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=394D5B85D3CA832650576D8E50510E094782A79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:c2:3b:f4:7e:be:73:c4:70:47:3a:ed:a3:
90:9a:85:32:6c:c4:f8:da:18:fa:ff:20:aa:f3:33:
79:28:51:b0:0d:cd:5c:b1:2d:e6:8e:0a:65:7f:f5:
9f:bb:b3:e3:ea:93:78:70:cb:f0:fc:bb:03:19:cc:
56:44:8c:0c:71:c4:a0:47:47:8b:e7:e4:0b:3d:2e:
b3:75:1c:62:c2:b9:47:9c:a4:b4:40:2e:a5:31:11:
a6:a3:5e:c3:5a:56:d6:c2:a3:07:63:a5:c0:7b:7c:
85:f4:4e:f7:9d:4d:04:d6:34:f4:5f:0b:f8:dd:b9:
d3:1d:f6:e5:13:aa:fc:1a:49:00:2f:4a:b0:61:fc:
98:e0:53:ff:19:f1:a2:a6:a5:8b:2a:df:c9:41:f0:
35:84:7e:0e:e9:5a:bf:ca:40:ea:37:bd:92:06:48:
b7:31:6e:a2:20:6c:c1:bd:d9:b3:d9:58:e7:65:b1:
58:67:8b:3d:e2:7f:fb:2c:ca:72:0d:2a:d5:2f:49:
05:03:14:ea:67:25:67:15:17:6c:cd:f7:9f:98:05:
56:9f:f4:07:97:cc:d3:35:a9:eb:14:24:62:31:7f:
e8:79:04:fc:94:9c:01:ea:7c:d8:ec:37:e0:40:7d:
22:66:52:64:35:fe:fb:bc:cd:a9:a1:70:01:d6:97:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:5B:85:D3:CA:83:26:50:57:6D:8E:50:51:0E:09:47:82:A7:9F
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OU1bhdPKgyZQV22OUFEOCUeCp58.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.234.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:9a:9f:fa:8f:f5:f1:4c:35:32:1d:d7:f7:7a:71:a9:e5:e4:
ba:76:66:ff:76:71:18:a6:81:25:71:b4:ed:80:d7:e2:c9:d0:
7f:28:7a:70:cf:6c:f0:fd:8e:22:9d:c4:e6:9a:f9:23:62:30:
a5:5d:e7:a1:3d:d9:e4:2a:74:ba:fd:82:62:fc:5d:dd:6f:03:
f6:04:f5:29:e9:6f:26:e9:15:c8:83:0e:1e:c6:37:2f:8f:83:
dc:62:6e:36:99:57:d9:d0:d2:00:b5:be:f1:17:02:3b:36:5a:
b8:ae:2d:6d:f5:a5:a3:20:15:81:32:ae:80:af:96:5f:09:4c:
84:d2:cc:c8:3e:1b:ec:63:f5:d0:ad:6f:6b:5c:a2:26:56:a7:
db:2a:04:00:aa:db:34:00:c8:cd:eb:cf:3b:28:03:06:20:43:
a8:3a:59:ed:99:95:08:84:6b:b7:79:e5:4f:82:3f:04:1c:75:
25:a8:66:7b:5c:6a:c8:a3:17:5a:cd:5d:e2:61:cf:30:35:fa:
19:03:ec:b2:1c:ca:1a:12:2e:12:41:d8:b8:35:32:9a:6c:35:
ff:70:e6:23:45:ba:c8:0d:78:9b:2c:0c:5e:ac:7f:dd:3f:1e:
5f:27:cb:01:46:35:67:74:a6:69:55:e1:47:7b:59:a4:5f:a8:
4d:aa:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:56 2025 by rpki-client