![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/KoUuUd55Rouoln9usjmE90G1P6g.roa
File: KoUuUd55Rouoln9usjmE90G1P6g.roa (raw, json)
Hash identifier: Fff1IcZLq5CCaQ9hPDdRdKCjY2iKUPyFrRl6RT+C6OY=
Subject key identifier: 2A:85:2E:51:DE:79:46:8B:A8:96:7F:6E:B2:39:84:F7:41:B5:3F:A8
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: DF
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/KoUuUd55Rouoln9usjmE90G1P6g.roa
Signing time: Sun 01 Jan 2023 01:31:04 +0000
ROA not before: Sun 01 Jan 2023 01:31:04 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 211.10.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:31:04 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=2A852E51DE79468BA8967F6EB23984F741B53FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:5e:c0:10:f3:ac:f1:e1:97:5f:46:14:cd:
57:bb:a8:76:e0:62:e8:3e:8e:8a:41:32:ec:2d:7b:
21:61:66:99:bd:dc:73:c0:45:6c:b2:3e:09:8d:02:
5a:99:ac:31:33:11:21:a4:4d:80:c2:e4:5c:a2:a6:
79:b0:39:70:7b:a0:8a:78:53:59:d5:2a:24:03:c7:
a8:33:9d:a9:f7:bc:84:91:bd:28:5d:6a:de:d9:66:
10:d4:15:5e:a3:4f:fe:0a:64:27:b9:31:f6:e1:47:
d9:f3:ff:5e:80:d4:60:c6:a4:54:1e:d0:d0:69:16:
e0:fd:7e:b4:0c:1c:5c:42:25:0a:0c:e7:ba:40:40:
6b:41:9f:44:c7:90:28:c9:84:ad:9e:0e:de:11:1b:
21:8a:2f:37:ee:c7:48:5e:26:a2:1d:3e:3b:30:64:
85:92:47:d2:37:d1:cd:0a:e1:f9:b8:c2:4c:61:58:
f3:20:8d:34:67:b4:8f:f2:c1:e6:11:63:0d:87:36:
b0:99:8d:e2:16:6d:a0:16:0a:54:a7:d6:b5:c3:91:
c8:2f:0e:b6:2e:fa:28:4c:e5:ea:cb:8b:42:aa:e1:
27:ef:d0:3b:95:61:87:59:dd:c3:33:82:8c:eb:f2:
a9:26:14:1f:6f:5b:ab:51:0f:66:a9:d6:0c:41:0a:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:2E:51:DE:79:46:8B:A8:96:7F:6E:B2:39:84:F7:41:B5:3F:A8
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/KoUuUd55Rouoln9usjmE90G1P6g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:0b:1f:78:05:2e:17:9f:8f:ae:b1:57:ae:1f:95:53:3a:02:
c9:35:c3:6e:d4:d7:53:08:54:45:35:27:a2:cc:02:f6:04:c3:
26:62:69:1d:49:5b:cd:8f:67:e8:99:5b:91:67:0a:86:83:55:
a8:b3:86:11:00:97:b8:b3:8a:09:f5:e4:ab:71:16:c6:5d:54:
61:35:56:3c:9f:be:83:ce:6d:dc:14:12:81:d5:95:3e:70:9e:
20:3f:03:8d:84:dd:7c:c5:82:bb:57:4f:f3:72:2f:e8:79:f8:
bd:a3:b1:15:86:bb:d9:d8:93:5e:fd:68:59:6c:6c:28:ab:3b:
a1:a2:37:a3:64:ac:86:f7:62:e0:41:76:94:14:64:6e:2f:c2:
11:60:aa:d4:e3:42:03:92:43:9a:72:e8:0b:a9:ab:8e:5f:c7:
c1:09:0a:73:21:ff:67:da:46:1a:88:af:5b:62:8f:d4:c9:a4:
8d:ba:85:e1:0c:dd:d0:d8:28:f4:f8:b4:1d:ef:80:b3:0b:5c:
70:50:21:86:6a:89:24:03:5e:77:b1:14:1a:52:5b:76:1b:8c:
a2:1a:9b:2b:20:22:84:a9:49:5c:fb:c4:31:1b:fd:d1:bf:67:
10:5f:f4:dd:5e:12:81:93:8c:5b:f4:db:9e:4c:17:ee:2f:0e:
ed:23:79:22
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTMxMDRaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBODUyRTUxREU3OTQ2
OEJBODk2N0Y2RUIyMzk4NEY3NDFCNTNGQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAD17AEPOs8eGXX0YUzVe7qHbgYug+jopBMuwteyFhZpm93HPA
RWyyPgmNAlqZrDEzESGkTYDC5FyipnmwOXB7oIp4U1nVKiQDx6gznan3vISRvShd
at7ZZhDUFV6jT/4KZCe5MfbhR9nz/16A1GDGpFQe0NBpFuD9frQMHFxCJQoM57pA
QGtBn0THkCjJhK2eDt4RGyGKLzfux0heJqIdPjswZIWSR9I30c0K4fm4wkxhWPMg
jTRntI/yweYRYw2HNrCZjeIWbaAWClSn1rXDkcgvDrYu+ihM5erLi0Kq4Sfv0DuV
YYdZ3cMzgozr8qkmFB9vW6tRD2ap1gxBCl3XAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUKoUuUd55Rouoln9usjmE90G1P6gwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9Lb1V1VWQ1NVJvdW9sbjl1c2ptRTkwRzFQNmcucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQF0wogMA0GCSqGSIb3DQEBCwUAA4IBAQC6Cx94BS4Xn4+usVeuH5VTOgLJNcNu
1NdTCFRFNSeizAL2BMMmYmkdSVvNj2fomVuRZwqGg1Wos4YRAJe4s4oJ9eSrcRbG
XVRhNVY8n76Dzm3cFBKB1ZU+cJ4gPwONhN18xYK7V0/zci/oefi9o7EVhrvZ2JNe
/WhZbGwoqzuhojejZKyG92LgQXaUFGRuL8IRYKrU40IDkkOacugLqauOX8fBCQpz
If9n2kYaiK9bYo/UyaSNuoXhDN3Q2Cj0+LQd74CzC1xwUCGGaokkA153sRQaUlt2
G4yiGpsrICKEqUlc+8QxG/3Rv2cQX/TdXhKBk4xb9NueTBfuLw7tI3ki
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:47 2025 by rpki-client