![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
File: l1q_6qZD46S1NREOpcZYrmh4q14.roa (raw, json)
Hash identifier: Z/MgumaJfC2R6kIMImdk7KxI/3h8MIAQaZYf3p7u2hg=
Subject key identifier: 97:5A:BF:EA:A6:43:E3:A4:B5:35:11:0E:A5:C6:58:AE:68:78:AB:5E
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 2A
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
Signing time: Fri 02 Feb 2024 07:37:03 +0000
ROA not before: Fri 02 Feb 2024 07:37:03 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Feb 2 07:37:03 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=975ABFEAA643E3A4B535110EA5C658AE6878AB5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:a3:39:00:dc:be:60:28:08:04:77:01:b1:
47:59:e2:93:da:b1:ff:63:e8:1b:3a:f5:c7:8f:dd:
17:2f:75:7b:fb:62:af:19:71:f1:63:47:8e:a1:cc:
15:dd:f4:8b:80:e4:46:e5:a1:7b:e7:b1:b8:8b:7f:
6b:f4:be:6b:6b:60:68:69:28:53:8d:fa:e3:f0:9a:
9b:e1:f2:da:9d:a3:91:db:64:00:8b:c7:34:e2:37:
65:59:14:ae:dc:81:bf:b0:73:b0:fe:fa:ab:eb:84:
1d:54:78:7a:04:90:46:f7:e3:6a:98:bd:e3:0d:3b:
63:31:ee:4a:b6:a0:0d:88:30:ee:85:9f:90:0b:53:
3b:df:20:28:f4:42:92:ee:4b:f4:25:92:73:59:7f:
a1:ef:3d:e5:e4:1b:8e:c6:29:7d:ca:2c:13:79:0b:
c9:92:df:4c:06:db:40:a2:d6:fe:41:68:ab:e0:be:
05:72:7e:73:71:d2:4e:6e:63:99:e8:f9:31:f2:5b:
60:6d:10:d3:f8:c7:a7:a3:35:d5:11:a0:02:36:f7:
d5:3f:e5:19:87:75:0e:e0:c1:3d:2f:c6:38:0b:a1:
10:42:fe:c3:4a:f0:05:59:c9:38:f3:d6:c4:2a:2a:
b2:32:bd:26:3f:47:57:eb:88:3a:cb:09:41:dd:23:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:BF:EA:A6:43:E3:A4:B5:35:11:0E:A5:C6:58:AE:68:78:AB:5E
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.138.0/24
Signature Algorithm: sha256WithRSAEncryption
31:76:4e:19:64:45:ee:5a:e2:30:69:d5:d4:dc:48:0d:2d:a5:
d0:d1:19:4c:fc:5b:4d:c0:4c:8e:81:14:31:25:b8:0f:ef:71:
ba:9f:2a:df:6d:ba:71:a1:2b:b9:e4:83:0d:21:cf:81:79:83:
36:bb:35:24:c6:09:91:ea:85:14:19:77:37:a8:33:5a:56:4b:
1d:0d:fd:c7:09:42:80:d9:f1:c2:cf:ef:0a:20:15:47:38:c8:
1d:7c:8e:7b:95:15:36:99:05:b4:67:ac:9f:e2:da:af:2e:8a:
e5:79:be:b6:22:fe:6b:cb:c6:ca:c5:cf:12:5a:e2:5a:a0:39:
46:77:5e:12:75:3e:79:92:56:5e:d5:28:87:b9:26:9b:77:ed:
34:d7:ed:2e:e7:f9:67:fe:85:17:ef:89:4e:10:99:68:46:01:
45:4c:46:7c:a9:ed:74:d4:5b:18:33:ca:61:b2:e0:f8:21:f8:
56:db:1b:83:10:af:97:98:a7:fb:6c:13:e7:be:e8:65:59:20:
29:da:ee:9a:18:6a:ee:e2:70:c5:39:8e:43:a3:d8:17:a5:a3:
3b:23:2c:b0:91:8a:42:60:03:38:df:f2:47:c0:69:42:db:7c:
a3:39:0d:9e:35:fa:80:f1:7b:d5:2c:f9:a9:60:3c:ea:10:cc:
a4:8c:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:45 2025 by rpki-client