![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
File: TAPaMOKTF59LQ821F9N-SSqwj0w.roa (raw, json)
Hash identifier: HpDG7tWwSGRqguIr9aPuGCmo31wZrUPpFETsbTAUZRM=
Subject key identifier: 4C:03:DA:30:E2:93:17:9F:4B:43:CD:B5:17:D3:7E:49:2A:B0:8F:4C
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01A4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
Signing time: Fri 07 Jul 2023 04:14:31 +0000
ROA not before: Fri 07 Jul 2023 04:14:31 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 175.28.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:14:31 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=4C03DA30E293179F4B43CDB517D37E492AB08F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:85:db:31:cc:9e:8b:f3:84:60:df:5a:28:
2e:0b:90:62:bd:29:d0:82:df:fe:35:e0:23:a4:bc:
43:17:f7:b6:78:ff:30:0c:99:5c:59:8d:ec:ae:7f:
df:36:dc:35:9b:c4:b2:a2:7e:af:06:ac:eb:b3:59:
f1:3d:c4:0c:37:a1:fa:de:34:f2:ef:e0:93:d9:1c:
2d:45:a3:85:f7:6e:07:1c:9d:3e:76:1b:cb:65:71:
af:f4:4b:ff:68:03:5a:92:40:89:53:e2:24:1b:ee:
5e:af:c9:30:1f:9d:20:2c:6e:a2:09:dd:1f:8a:40:
d1:a4:6e:e9:ea:f1:c7:49:68:03:fd:26:6e:1b:7a:
ca:e5:3b:6e:2b:2f:5d:01:2c:52:9b:4c:66:e1:38:
38:9d:01:1d:3b:1d:c3:be:50:94:1b:a2:aa:8d:24:
49:28:8f:7e:36:2f:66:33:16:47:71:da:e3:27:06:
6e:04:58:eb:21:89:bf:3d:1e:c2:44:71:5a:1d:cc:
73:4c:66:77:92:27:79:1f:c4:df:93:4e:c0:62:60:
14:cb:8d:92:1b:eb:16:81:e7:fc:d4:74:61:68:d6:
71:ac:66:31:f0:c5:93:87:90:a5:f8:5f:79:3d:96:
de:ce:61:96:b5:23:83:be:cb:91:71:0d:1f:f8:ce:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:DA:30:E2:93:17:9F:4B:43:CD:B5:17:D3:7E:49:2A:B0:8F:4C
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.28.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:de:49:e4:c1:c5:75:2b:64:f6:af:52:d1:e4:28:33:1d:08:
a1:fa:d9:62:0f:01:fa:4f:9e:6a:44:1b:4a:b6:8e:76:03:16:
2b:3e:5e:63:53:a9:b5:c4:6b:64:20:30:e8:33:bc:5b:ac:2d:
e9:84:5d:0d:8c:23:58:a6:ff:50:78:91:d7:ca:bf:51:92:32:
2b:6e:e9:27:41:78:b4:c9:6c:52:8f:5f:ee:9e:1e:63:b3:cb:
63:e7:0c:7e:d8:15:e3:dc:d8:1b:85:d5:cd:e1:6d:a7:24:24:
eb:75:e3:6e:8a:f1:ae:e5:84:28:19:f1:3d:9d:d9:08:78:3b:
41:c2:ee:89:d3:c5:ba:23:4c:bf:4b:d0:27:87:48:40:26:2e:
b7:e2:78:d5:31:6c:4a:88:ac:8e:2a:ae:ba:bd:8a:06:76:0d:
cc:2d:f3:91:e8:6c:e4:a3:9e:05:eb:8b:98:d3:98:13:f6:c9:
81:7c:e8:20:f6:b9:27:22:31:c3:af:17:f6:5b:f1:c7:e0:c8:
1c:d2:b8:41:c3:65:a5:b3:d5:df:6c:0a:a8:0f:13:18:df:75:
6c:94:6e:8c:fc:c9:56:00:1e:b8:26:6c:07:1a:b8:4a:bf:ae:
f3:a8:99:50:ad:c3:bb:93:fa:59:3b:9d:63:11:63:11:05:3c:
0c:ad:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:14 2025 by rpki-client