![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TW6ePlZiXUZIHB524IS6Nppo5Sk.roa
File: TW6ePlZiXUZIHB524IS6Nppo5Sk.roa (raw, json)
Hash identifier: 9vdJRtwKwyCvKzeSvP0tGYh+so1NqC/QJUYbIWUbez4=
Subject key identifier: 4D:6E:9E:3E:56:62:5D:46:48:1C:1E:76:E0:84:BA:36:9A:68:E5:29
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01F1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TW6ePlZiXUZIHB524IS6Nppo5Sk.roa
Signing time: Wed 01 Nov 2023 01:32:37 +0000
ROA not before: Wed 01 Nov 2023 01:32:37 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 4686
IP address blocks: 220.150.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Nov 1 01:32:37 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=4D6E9E3E56625D46481C1E76E084BA369A68E529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:f5:a6:e4:12:b7:07:66:ec:9d:42:7f:db:
6b:27:ca:c3:8a:98:39:fa:a5:46:bc:11:4e:2c:b5:
0a:54:31:de:0c:cd:04:7a:ef:90:bb:15:16:d4:d7:
c3:95:0b:ae:bf:d3:04:ee:74:27:b6:57:2a:43:b8:
8f:29:0d:8d:d4:bd:10:2d:47:bc:1b:54:15:25:1c:
44:7e:93:f8:d0:72:d1:5b:14:fd:1c:4b:9d:44:62:
98:90:d8:91:a0:91:fb:a4:c9:d8:6b:ab:c9:e1:55:
43:45:fe:6f:a2:3a:1c:3f:0e:54:6d:a9:ac:78:a4:
d3:b5:9a:8f:97:19:9e:85:31:c7:22:63:b3:71:4f:
58:1c:1e:95:5e:31:3d:75:14:e6:cc:30:90:a0:04:
70:21:e4:7c:13:02:5c:b3:15:10:31:ca:0c:eb:eb:
73:cf:bb:87:50:b3:3f:fe:6a:b4:be:25:52:3f:50:
65:40:da:3a:f9:49:12:db:1d:b4:28:a6:c8:e1:d7:
43:31:e8:4e:25:cb:8d:c0:e0:e9:0f:ca:76:0d:3f:
96:4a:8b:52:40:73:99:b8:49:8f:13:c3:ee:72:d0:
18:d8:3c:1b:50:47:19:37:c8:38:1d:0f:d5:44:09:
f9:46:12:9c:c0:9d:7e:06:6d:22:f9:65:d2:d5:18:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6E:9E:3E:56:62:5D:46:48:1C:1E:76:E0:84:BA:36:9A:68:E5:29
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TW6ePlZiXUZIHB524IS6Nppo5Sk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.150.223.0/24
Signature Algorithm: sha256WithRSAEncryption
08:85:9d:d1:41:fb:cd:e3:0b:7e:53:62:5e:7d:b9:21:33:83:
a9:0f:c0:3a:f8:d2:fc:96:cf:b8:73:74:77:ba:81:86:4c:10:
84:51:ff:b4:f4:50:33:6f:8e:dd:84:2a:70:e7:6f:00:9f:67:
51:d0:87:83:21:96:23:63:10:3a:28:80:d8:40:fb:36:a6:b6:
e8:3e:d4:68:fd:9a:84:74:f8:77:3b:9b:21:9c:3f:8c:ab:61:
6d:2e:bb:7e:bf:e2:1f:3f:bf:03:73:8b:80:fd:e7:33:f7:83:
b8:f6:4c:0e:fc:10:81:6b:73:cf:0e:f4:9d:28:b8:bc:e9:e3:
d8:3e:a4:b9:e2:e6:f0:cf:1d:53:6f:a0:99:ed:d4:98:48:99:
af:3a:4f:6d:a5:18:2b:4c:92:a4:26:27:bd:3f:70:14:60:96:
5c:d5:46:a5:51:86:d5:70:5c:f5:51:49:7d:46:2e:2e:e2:72:
fc:00:b7:2a:f6:00:92:9d:75:f9:a9:fc:ee:b5:4e:57:04:4d:
84:6e:23:6e:c8:72:40:45:8a:99:1c:2e:a7:95:95:a9:e7:6a:
f3:4b:76:38:02:e5:b9:e9:37:c4:65:e3:cb:72:64:0a:e2:9d:
14:3b:d4:05:da:22:e2:44:43:48:39:56:ba:35:8a:ff:b2:22:
62:d6:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:46 2025 by rpki-client