![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
File: k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa (raw, json)
Hash identifier: UNl74Qv46AWL6mpAKFMXMWw87BRIR170H5DP1DrBWew=
Subject key identifier: 93:B9:EA:68:9D:6E:44:17:1C:14:3B:F6:56:8B:A6:E6:BE:E0:F2:A4
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 0A
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
Signing time: Mon 20 Feb 2023 03:32:55 +0000
ROA not before: Mon 20 Feb 2023 03:32:55 +0000
ROA not after: Fri 16 Feb 2024 07:35:22 +0000
asID: 9619
IP address blocks: 211.125.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Feb 20 03:32:55 2023 GMT
Not After : Feb 16 07:35:22 2024 GMT
Subject: CN=93B9EA689D6E44171C143BF6568BA6E6BEE0F2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:56:e8:35:8f:dd:cd:87:5d:6f:e8:21:ab:
d1:9b:6d:04:18:d8:5e:ef:93:14:8d:bb:dc:07:51:
3d:36:fe:0c:34:2a:51:8f:df:40:79:a8:10:9d:16:
c7:a7:c4:17:7f:b1:16:8b:18:a7:81:22:c2:41:3f:
c3:4c:72:fc:6b:84:8a:7f:38:52:4c:79:4e:7f:e8:
3e:67:d9:3a:07:bf:2d:76:e5:1a:80:e3:23:8f:2b:
f1:5a:0a:58:3e:a2:3c:b1:96:a3:00:ef:2e:e5:6c:
25:9c:31:47:ee:4a:44:96:81:eb:4c:dd:e7:5f:79:
0c:32:1f:14:7e:99:3d:52:e6:b4:12:34:9b:47:21:
7d:7a:c0:2b:d2:1d:8b:ff:ec:1c:f7:19:c9:13:f6:
c4:db:25:5d:f3:3b:23:6d:8c:4b:62:d5:13:78:1f:
46:9c:7a:2f:77:f7:d1:ec:b2:04:bb:eb:09:8a:81:
af:60:d0:35:35:5e:21:27:ba:72:00:24:fe:90:41:
99:ab:b4:9d:12:25:de:4d:50:21:8c:3d:c9:18:86:
5f:4e:ef:a9:31:32:72:08:ce:64:f1:41:42:f1:8a:
d5:54:f7:15:d7:5c:d9:62:4a:15:e2:38:b1:01:3d:
3e:b5:13:a6:0b:97:8a:bc:98:88:9a:7b:d7:4d:f4:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:EA:68:9D:6E:44:17:1C:14:3B:F6:56:8B:A6:E6:BE:E0:F2:A4
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/k7nqaJ1uRBccFDv2Voum5r7g8qQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.131.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5b:c7:1c:50:2a:a5:8f:1c:fb:7f:8c:3e:bf:35:fe:ac:a7:
c5:92:f2:c9:d0:31:f3:43:63:9c:20:8b:6c:46:5d:3e:57:b4:
df:cb:7b:f0:6c:a3:b8:eb:60:f1:20:8a:46:e6:fe:f4:95:a3:
ab:a5:00:86:7d:ad:6c:67:37:7b:e7:e0:f5:8e:c8:f2:98:67:
ab:ff:a5:a4:ba:32:99:67:94:14:4c:0e:6f:30:c2:1b:d4:37:
47:f3:9b:a8:24:01:90:7d:02:86:08:fa:b5:c3:2c:51:2d:73:
19:6c:af:2e:52:9e:99:3b:16:6a:42:0c:f1:f5:10:90:fa:59:
ba:0d:d0:5e:b3:28:ff:d3:37:57:cc:76:a5:9f:2f:83:db:92:
31:93:0b:2f:81:31:ff:47:8c:8e:9a:9a:d6:01:24:19:c8:f0:
1a:c2:2a:2f:1c:56:cb:29:bc:43:0a:17:be:25:5b:38:fa:1b:
f2:8b:0c:91:b7:aa:03:0a:06:84:bb:79:a4:73:43:8b:df:34:
38:ed:61:73:d5:15:23:22:e5:79:bd:0e:ba:aa:61:39:61:92:
ca:2c:a6:db:25:21:4e:44:d3:82:df:a4:d6:34:36:3e:2a:dc:
34:a2:41:46:c3:fd:e6:fd:7c:3e:0d:7d:1e:90:2e:6f:2c:9f:
f1:ae:ce:02
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz
QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTIzMDIyMDAz
MzI1NVoXDTI0MDIxNjA3MzUyMlowMzExMC8GA1UEAxMoOTNCOUVBNjg5RDZFNDQx
NzFDMTQzQkY2NTY4QkE2RTZCRUUwRjJBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN3mVug1j93Nh11v6CGr0ZttBBjYXu+TFI273AdRPTb+DDQqUY/f
QHmoEJ0Wx6fEF3+xFosYp4EiwkE/w0xy/GuEin84Ukx5Tn/oPmfZOge/LXblGoDj
I48r8VoKWD6iPLGWowDvLuVsJZwxR+5KRJaB60zd5195DDIfFH6ZPVLmtBI0m0ch
fXrAK9Idi//sHPcZyRP2xNslXfM7I22MS2LVE3gfRpx6L3f30eyyBLvrCYqBr2DQ
NTVeISe6cgAk/pBBmau0nRIl3k1QIYw9yRiGX07vqTEycgjOZPFBQvGK1VT3Fddc
2WJKFeI4sQE9PrUTpguXiryYiJp71030G3ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSTueponW5EFxwUO/ZWi6bmvuDypDAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm
j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o
N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTUvazducWFKMXVSQmNjRkR2MlZvdW01cjdnOHFRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANN9gzANBgkqhkiG9w0BAQsFAAOCAQEAJ1vHHFAqpY8c+3+MPr81/qynxZLy
ydAx80NjnCCLbEZdPle038t78GyjuOtg8SCKRub+9JWjq6UAhn2tbGc3e+fg9Y7I
8phnq/+lpLoymWeUFEwObzDCG9Q3R/ObqCQBkH0Chgj6tcMsUS1zGWyvLlKemTsW
akIM8fUQkPpZug3QXrMo/9M3V8x2pZ8vg9uSMZMLL4Ex/0eMjpqa1gEkGcjwGsIq
LxxWyym8QwoXviVbOPob8osMkbeqAwoGhLt5pHNDi980OO1hc9UVIyLleb0Ouqph
OWGSyiym2yUhTkTTgt+k1jQ2PircNKJBRsP95v18Pg19HpAubyyf8a7OAg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:46 2025 by rpki-client