![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0CO5UPUHmKtFL741oV0LNYrMFxI.roa
File: 0CO5UPUHmKtFL741oV0LNYrMFxI.roa (raw, json)
Hash identifier: p3/wtDKMWdmpxcrnjls3L9mRg1m3Hez/86g8Hzt3Dt0=
Subject key identifier: D0:23:B9:50:F5:07:98:AB:45:2F:BE:35:A1:5D:0B:35:8A:CC:17:12
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 85
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0CO5UPUHmKtFL741oV0LNYrMFxI.roa
Signing time: Tue 01 Feb 2022 01:31:15 +0000
ROA not before: Tue 01 Feb 2022 01:31:15 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 111.216.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:15 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=D023B950F50798AB452FBE35A15D0B358ACC1712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:f9:c4:93:0e:0f:cf:10:43:1e:7f:2b:95:
5f:32:a9:60:6e:5e:96:4c:af:0e:b0:ff:5a:67:3e:
8a:21:7e:dd:16:ac:8d:67:c9:9c:ec:22:ea:72:67:
71:11:cf:4b:1d:4f:34:60:e1:9c:3e:ef:7f:34:75:
f0:91:e6:28:37:f7:22:90:a4:9d:0b:2d:00:36:d8:
d0:c2:3c:4c:11:60:e3:f8:fe:cb:1d:a4:c6:87:ad:
89:43:2f:cf:90:39:f8:3c:04:f6:b6:04:2f:85:1d:
d0:ef:f5:ce:f4:0d:72:88:ec:cf:e7:09:c3:58:b1:
01:b3:97:29:9a:26:26:2f:d0:d8:32:7c:63:62:45:
df:d3:78:cf:9f:01:5a:f6:e8:27:f7:82:8d:60:c9:
99:2a:1f:71:ac:79:3b:cc:f1:17:c8:f1:95:97:39:
3f:a4:8f:76:da:69:20:c8:fb:3d:f9:6f:ae:ab:72:
71:53:ee:d2:d3:50:bb:c5:9a:52:12:d5:5a:40:28:
52:15:bb:ab:e2:72:bf:ca:63:62:3f:87:19:b9:42:
ec:78:55:55:7e:d8:6f:73:98:f2:49:97:e0:6e:f1:
e3:cd:7b:7a:57:30:27:3e:62:20:cd:a8:6d:65:1f:
fd:72:11:da:c1:2a:5c:bf:37:f6:7f:95:c5:f7:bd:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:B9:50:F5:07:98:AB:45:2F:BE:35:A1:5D:0B:35:8A:CC:17:12
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0CO5UPUHmKtFL741oV0LNYrMFxI.roa
sbgp-ipAddrBlock: critical
IPv4:
111.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
53:f7:09:e2:c9:2c:58:28:c7:8b:4f:48:83:0e:13:a8:d4:fb:
12:7d:67:be:d7:35:6e:93:05:61:39:9b:70:9d:f7:0e:2a:86:
6a:da:47:e7:e0:e7:3a:c8:48:98:1c:e2:5a:1e:fa:a1:e4:fe:
da:07:01:90:c8:99:b9:90:17:56:9d:6c:74:10:c6:1d:89:12:
26:7b:93:9f:80:ad:26:7f:77:1d:87:1a:8d:a2:6c:8f:4a:1f:
f3:86:94:19:cd:91:84:1b:b3:a4:df:fe:b4:74:c8:6b:31:67:
40:a8:ab:73:f2:26:c8:13:52:a1:d4:73:0c:d8:4a:19:e5:bf:
fa:f0:1b:79:f2:17:b6:29:7e:c5:ac:5e:fb:a4:60:69:2e:95:
ee:99:2d:90:5c:c6:1f:88:0c:be:c3:2c:d9:42:9d:2d:25:fc:
f2:ea:e8:2f:ff:01:93:81:5f:0e:cf:8e:92:1b:12:8f:cc:d3:
91:ef:1c:72:5a:e1:1e:74:db:83:ff:61:1f:db:33:d6:83:02:
87:87:8a:bb:53:f9:e4:c1:56:67:7f:b9:6e:f4:9f:ab:3f:a5:
45:7f:21:f8:da:63:f9:ca:eb:c7:a3:1a:f6:7c:3b:4f:20:e2:
5c:8b:98:76:02:d0:9e:da:ff:a5:86:30:d4:27:72:d2:70:f2:
04:f1:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:10 2025 by rpki-client