![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
File: CznYjdmTQoDkbB1mak5uEEmt_PA.roa (raw, json)
Hash identifier: YvatqOUWYD5DIQuRmKbYaGrkueu/i8gv0gmfiIDl3tY=
Subject key identifier: 0B:39:D8:8D:D9:93:42:80:E4:6C:1D:66:6A:4E:6E:10:49:AD:FC:F0
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: E6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
Signing time: Sun 01 Jan 2023 01:31:08 +0000
ROA not before: Sun 01 Jan 2023 01:31:08 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 218.110.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:31:08 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=0B39D88DD9934280E46C1D666A4E6E1049ADFCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:42:8d:bf:8e:b0:01:43:33:53:61:a0:6b:
46:d7:87:fb:94:68:7a:07:87:c9:e5:02:db:94:c0:
01:75:5e:6c:85:22:77:2e:9c:ba:d1:53:11:00:a8:
a0:d4:22:41:c6:1d:4d:8e:60:65:5a:f6:12:c5:f6:
a3:29:f3:c0:53:67:ee:d9:e7:40:01:21:3b:5d:e1:
71:41:a5:cb:fd:f3:38:9a:83:4a:ea:99:49:65:61:
36:6b:ef:ad:f5:50:5f:5d:bd:86:b6:23:4e:68:1e:
bd:3a:da:5f:73:97:30:5b:16:bc:fe:44:0e:75:bb:
53:ec:b3:fb:04:cc:0b:75:16:ff:d9:8b:3e:05:0d:
80:2c:2e:02:a4:eb:36:9c:0b:0f:42:f4:2a:6f:3e:
ca:f3:19:b2:6b:e1:fb:5a:8a:60:d6:b7:38:63:65:
4c:71:29:26:de:36:fa:38:da:b4:b7:2e:19:d6:dc:
aa:6b:bf:3c:fe:cc:e2:0b:51:9b:3a:79:12:20:1b:
cb:a2:fc:4d:72:b9:c2:16:c8:a6:ec:7e:aa:02:30:
59:22:fe:7c:9e:a4:a8:31:0a:5c:01:04:d1:b1:39:
9f:44:3f:c7:a6:5e:a4:37:88:82:13:f1:f0:6c:6c:
e0:ab:bf:1d:1c:73:90:30:63:2b:5e:d8:ef:4f:4b:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:D8:8D:D9:93:42:80:E4:6C:1D:66:6A:4E:6E:10:49:AD:FC:F0
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CznYjdmTQoDkbB1mak5uEEmt_PA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:f2:e7:73:85:94:1f:fe:db:56:78:7a:8c:a4:78:4f:73:b8:
cf:a7:b1:3a:11:73:af:d2:a1:67:c4:a2:a8:bf:9c:1e:34:da:
d5:3b:8a:e6:7d:fb:8f:45:68:55:0a:9c:b1:f4:30:73:6f:69:
d9:b0:2d:9e:ff:3b:71:65:10:03:86:63:93:46:05:70:70:f4:
8f:7b:9d:fe:f3:b0:ef:9a:6d:00:ac:2f:9a:07:3d:e6:2f:5c:
9f:7c:d5:9a:be:03:e0:95:71:d7:29:aa:f3:c2:a3:20:11:66:
ff:4a:eb:e4:c2:c5:0f:07:13:13:68:24:6b:75:44:f9:a3:56:
52:a7:e8:83:85:a8:a5:b4:12:35:2b:b1:ad:29:a7:04:ac:a2:
4b:1e:14:f8:96:cf:0b:66:1a:6d:71:d1:91:72:12:43:3b:57:
ca:35:f1:30:c5:c3:b8:e7:85:4c:b7:ed:c7:10:36:b8:b6:b3:
09:92:4a:32:e3:4c:45:8e:a6:2d:a0:df:e0:c6:33:b6:7f:6c:
07:7c:3a:d2:ed:72:7e:55:9f:3b:0f:b5:c1:3c:ea:74:c6:ec:
3a:cc:07:f9:1d:9c:ef:84:4a:f3:49:ba:71:f5:7e:99:e1:10:
69:2d:c2:2d:34:f4:33:b4:8e:5f:ba:41:e0:20:76:84:f3:9f:
1a:60:86:0d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTMxMDhaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCMzlEODhERDk5MzQy
ODBFNDZDMUQ2NjZBNEU2RTEwNDlBREZDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqMkKNv46wAUMzU2Gga0bXh/uUaHoHh8nlAtuUwAF1XmyFIncu
nLrRUxEAqKDUIkHGHU2OYGVa9hLF9qMp88BTZ+7Z50ABITtd4XFBpcv98ziag0rq
mUllYTZr7631UF9dvYa2I05oHr062l9zlzBbFrz+RA51u1Pss/sEzAt1Fv/Ziz4F
DYAsLgKk6zacCw9C9CpvPsrzGbJr4ftaimDWtzhjZUxxKSbeNvo42rS3LhnW3Kpr
vzz+zOILUZs6eRIgG8ui/E1yucIWyKbsfqoCMFki/nyepKgxClwBBNGxOZ9EP8em
XqQ3iIIT8fBsbOCrvx0cc5AwYyte2O9PS+BDAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUCznYjdmTQoDkbB1mak5uEEmt/PAwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9Dem5ZamRtVFFvRGtiQjFtYWs1dUVFbXRfUEEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA2m4wDQYJKoZIhvcNAQELBQADggEBAH3y53OFlB/+21Z4eoykeE9zuM+nsToR
c6/SoWfEoqi/nB402tU7iuZ9+49FaFUKnLH0MHNvadmwLZ7/O3FlEAOGY5NGBXBw
9I97nf7zsO+abQCsL5oHPeYvXJ981Zq+A+CVcdcpqvPCoyARZv9K6+TCxQ8HExNo
JGt1RPmjVlKn6IOFqKW0EjUrsa0ppwSsokseFPiWzwtmGm1x0ZFyEkM7V8o18TDF
w7jnhUy37ccQNri2swmSSjLjTEWOpi2g3+DGM7Z/bAd8OtLtcn5VnzsPtcE86nTG
7DrMB/kdnO+ESvNJunH1fpnhEGktwi009DO0jl+6QeAgdoTznxpghg0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:05 2025 by rpki-client