![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMIvX1Eib06dwRZpKoSaTOOuwgI.roa
File: VMIvX1Eib06dwRZpKoSaTOOuwgI.roa (raw, json)
Hash identifier: 4k2JPutXQkAKGifQ/IWxLmuZ2v9UPe9Zhq2GoFZKwos=
Subject key identifier: 54:C2:2F:5F:51:22:6F:4E:9D:C1:16:69:2A:84:9A:4C:E3:AE:C2:02
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 5B
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMIvX1Eib06dwRZpKoSaTOOuwgI.roa
Signing time: Sun 01 Jan 2023 01:31:03 +0000
ROA not before: Sun 01 Jan 2023 01:31:03 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 216.153.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Jan 1 01:31:03 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=54C22F5F51226F4E9DC116692A849A4CE3AEC202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:42:30:91:75:e7:d8:ed:43:8b:3a:a0:84:fa:
03:48:46:da:38:50:f8:75:7d:bf:2b:c6:2d:e3:ff:
33:6b:24:72:d2:6c:ef:c8:45:fb:c9:e4:75:38:80:
5b:34:30:e1:bf:7f:80:a8:19:47:a4:e7:86:e2:9a:
04:ff:c6:3c:94:7f:9e:43:c7:98:0e:cc:14:86:fc:
99:65:86:2b:0a:83:1e:e3:86:09:2e:f8:29:34:f6:
78:34:06:02:7b:3c:1c:00:20:9f:43:de:51:66:24:
c0:c9:59:2d:96:bc:5c:5a:0c:6a:c6:3a:6a:3f:47:
0d:3a:0d:b0:60:b8:69:cf:51:f6:c4:e9:69:0e:69:
70:2d:f1:1e:70:f3:a6:3b:e1:6c:20:b6:a3:85:ea:
26:bb:05:c9:8b:3e:27:a6:f2:e6:34:4f:8d:ed:c6:
61:3c:e6:a7:c2:7f:b7:0b:34:ca:76:7e:5d:df:57:
24:dc:9a:91:aa:b4:cb:e3:59:14:38:bc:2e:f2:99:
47:57:0e:1f:ae:fb:24:4a:8a:79:d7:e7:1d:17:f4:
83:23:b1:43:0f:44:4c:23:d5:b6:b1:68:9a:b7:32:
40:05:e4:b3:db:77:be:2f:30:29:01:6c:79:02:81:
80:e2:ca:42:7a:7d:40:f9:d9:5e:fc:63:84:16:30:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C2:2F:5F:51:22:6F:4E:9D:C1:16:69:2A:84:9A:4C:E3:AE:C2:02
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/VMIvX1Eib06dwRZpKoSaTOOuwgI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
216.153.64.0/18
Signature Algorithm: sha256WithRSAEncryption
63:8e:0e:e2:f6:ef:fe:9e:f1:0d:82:f1:16:4f:15:21:af:45:
39:85:d6:3a:62:7f:d0:e3:5b:0a:f9:2e:b1:d1:fd:fb:d7:f8:
b3:50:14:3c:ae:22:77:91:34:fd:19:a8:c1:e2:5f:19:6a:8c:
92:aa:1d:0b:79:42:f5:02:5c:2b:36:e7:53:f5:40:83:d8:85:
7b:a1:74:59:71:6c:89:4b:fb:93:cc:de:37:4b:4c:11:0f:1d:
44:48:a5:95:35:50:a9:b4:52:65:0b:37:bb:31:7c:06:2a:84:
b4:83:65:88:66:16:2e:c7:00:51:b7:76:97:e8:53:c4:43:b7:
97:bb:7a:bc:12:c8:ea:00:dd:71:89:62:e5:bb:87:e4:fd:be:
0c:a3:34:d8:05:48:d7:29:44:26:ed:13:60:72:ba:9e:4d:cb:
97:e2:e0:e1:bf:8a:75:27:46:04:04:94:3f:8a:82:82:79:7a:
6b:04:1e:81:d6:ef:69:cc:1d:fe:e4:9c:6c:45:21:7d:89:c5:
af:e9:a8:22:8e:f1:ec:eb:94:72:af:85:46:6c:69:9a:77:1b:
cc:86:d1:90:26:16:be:d7:44:bf:b1:7a:54:91:72:4c:e2:01:
84:93:d1:7a:6a:d6:72:86:1c:1e:dc:4f:23:5a:b8:0d:e0:69:
49:4b:f0:c3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIzMDEwMTAx
MzEwM1oXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNTRDMjJGNUY1MTIyNkY0
RTlEQzExNjY5MkE4NDlBNENFM0FFQzIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPtCMJF159jtQ4s6oIT6A0hG2jhQ+HV9vyvGLeP/M2skctJs78hF
+8nkdTiAWzQw4b9/gKgZR6TnhuKaBP/GPJR/nkPHmA7MFIb8mWWGKwqDHuOGCS74
KTT2eDQGAns8HAAgn0PeUWYkwMlZLZa8XFoMasY6aj9HDToNsGC4ac9R9sTpaQ5p
cC3xHnDzpjvhbCC2o4XqJrsFyYs+J6by5jRPje3GYTzmp8J/tws0ynZ+Xd9XJNya
kaq0y+NZFDi8LvKZR1cOH677JEqKedfnHRf0gyOxQw9ETCPVtrFomrcyQAXks9t3
vi8wKQFseQKBgOLKQnp9QPnZXvxjhBYwoLcCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRUwi9fUSJvTp3BFmkqhJpM467CAjAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzQzL1ZNSXZYMUVpYjA2ZHdSWnBLb1NhVE9PdXdnSS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAbYmUAwDQYJKoZIhvcNAQELBQADggEBAGOODuL27/6e8Q2C8RZPFSGvRTmF1jpi
f9DjWwr5LrHR/fvX+LNQFDyuIneRNP0ZqMHiXxlqjJKqHQt5QvUCXCs251P1QIPY
hXuhdFlxbIlL+5PM3jdLTBEPHURIpZU1UKm0UmULN7sxfAYqhLSDZYhmFi7HAFG3
dpfoU8RDt5e7erwSyOoA3XGJYuW7h+T9vgyjNNgFSNcpRCbtE2Byup5Ny5fi4OG/
inUnRgQElD+KgoJ5emsEHoHW72nMHf7knGxFIX2Jxa/pqCKO8ezrlHKvhUZsaZp3
G8yG0ZAmFr7XRL+xelSRckziAYST0Xpq1nKGHB7cTyNauA3gaUlL8MM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:15 2025 by rpki-client