![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa
File: _tTD_Gg0lPERviF3jCaDuDZqRhU.roa (raw, json)
Hash identifier: FmyinW8bSUffAmfK+9zuqjeC0aFKnJGa/MnJNYRdQLY=
Subject key identifier: FE:D4:C3:FC:68:34:94:F1:11:BE:21:77:8C:26:83:B8:36:6A:46:15
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 3A
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa
Signing time: Tue 01 Feb 2022 01:31:14 +0000
ROA not before: Tue 01 Feb 2022 01:31:14 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 147.192.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:14 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=FED4C3FC683494F111BE21778C2683B8366A4615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:57:a7:d6:77:66:87:e4:04:23:16:94:09:
ca:3e:af:c2:af:a0:14:f9:4b:9c:f2:5e:03:60:3d:
c8:52:c0:af:86:ab:a1:a2:2d:69:5d:97:e5:c1:53:
0a:e1:87:55:5e:7c:18:2e:e1:49:55:8d:81:84:7f:
81:a6:05:77:60:42:03:5f:7b:18:bf:41:3b:b3:cb:
07:34:99:4f:26:2a:7a:c0:76:d1:b7:14:45:ef:73:
a4:a5:a8:1c:28:c7:52:ed:00:fd:83:ee:6a:c1:06:
0e:88:20:0c:1a:2b:4c:a7:6a:da:b6:e8:bf:b2:ae:
d3:0e:5a:11:34:08:7b:b0:2b:ac:bd:cd:d7:e8:86:
1e:ad:63:43:f6:ce:aa:89:aa:82:c3:29:b3:40:8e:
c4:f3:f2:55:bc:76:57:0e:e9:40:1a:97:7f:b5:55:
ae:85:a1:6d:62:20:eb:4c:79:53:55:8c:82:f1:11:
5c:44:5c:18:d4:8b:e3:2e:be:c4:30:22:bd:2d:44:
7f:73:c7:6f:b6:7d:00:a5:ab:49:20:70:81:b0:a0:
24:d6:b7:37:13:85:c8:3d:dc:4d:95:8f:fa:cf:f4:
4c:00:31:f9:cf:e6:e0:9a:25:9b:c8:3d:e1:ce:a2:
f4:ab:d6:50:1a:af:50:59:83:29:32:86:17:4f:c9:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:C3:FC:68:34:94:F1:11:BE:21:77:8C:26:83:B8:36:6A:46:15
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_tTD_Gg0lPERviF3jCaDuDZqRhU.roa
sbgp-ipAddrBlock: critical
IPv4:
147.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:d0:d5:8b:a4:59:28:7d:0e:0b:8a:7f:81:f0:48:ca:b7:08:
8e:59:50:19:f4:51:5e:39:bf:fa:71:56:40:ec:7a:ed:12:18:
cc:59:96:30:02:78:cd:95:36:d3:2e:41:95:55:5d:3a:3a:47:
72:0a:6a:89:16:67:5d:eb:cd:af:79:c3:f0:27:a9:57:cb:ac:
c9:a9:89:9c:da:87:51:89:0e:94:2f:ef:ca:e7:ee:75:92:22:
b0:8e:82:bc:f1:e4:32:48:79:a3:e2:b7:2c:82:67:dc:4f:19:
da:a3:ad:42:3e:95:1d:97:c5:3d:67:d4:a8:05:45:da:78:b0:
ba:ab:57:1a:b5:59:b0:87:25:9d:ed:f0:7e:c5:2e:cf:70:58:
f1:17:0c:3c:3f:8b:4d:65:f8:67:df:d5:3a:ad:c8:83:00:a0:
54:95:6b:7d:6c:e1:f3:9e:c3:77:fb:5d:7f:53:0d:ee:45:37:
e0:37:22:54:e3:6f:13:3f:87:58:a6:f9:20:95:6a:28:11:0e:
2d:81:2f:3f:cf:f5:ed:b3:f0:7d:6c:6d:99:3d:6d:56:53:48:
f8:0f:59:99:9b:f3:3d:3f:93:f3:43:a5:c1:5c:54:a0:91:5c:
db:f9:d6:8c:2d:30:60:18:46:39:8d:ed:72:9f:af:90:ed:23:
fa:b2:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:25 2025 by rpki-client