![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
File: v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa (raw, json)
Hash identifier: 8ItH055qMCzMmmMe60+T9q07In4BguXiF/HCsLUNi2M=
Subject key identifier: BF:E5:FC:8D:DF:26:FE:15:85:0D:CF:99:69:A5:B8:A4:1B:C3:CE:52
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: DA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
Signing time: Sun 01 Jan 2023 01:31:01 +0000
ROA not before: Sun 01 Jan 2023 01:31:01 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 218.41.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:31:01 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=BFE5FC8DDF26FE15850DCF9969A5B8A41BC3CE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:bd:8c:99:38:d7:d2:54:02:a7:bf:33:aa:
76:8e:85:d9:7e:98:34:1a:06:da:e4:0e:f6:98:19:
ee:ad:ba:d4:6d:2d:85:30:c4:b1:cc:b6:b3:74:4e:
1c:ef:67:32:57:41:32:44:1a:61:4a:48:bd:1c:2e:
49:9e:16:8b:b2:da:99:ec:7e:53:2a:a4:02:c7:8e:
a5:38:9e:8e:f9:4b:29:7f:b1:18:14:cd:f4:79:7b:
d1:e5:eb:12:39:af:d7:bb:72:5d:25:71:b0:cd:d8:
43:97:72:0f:2e:2e:ae:8f:bb:74:8b:d0:47:ae:fe:
4d:93:7c:91:2a:0e:4e:26:74:4e:51:60:8c:d3:30:
7e:11:33:4f:c5:ac:2e:f1:07:14:29:e1:d9:c7:3f:
a4:fa:3d:f0:e3:d9:0e:c5:0f:bb:a0:fa:1a:4a:99:
aa:27:3e:8f:e4:6d:a8:a9:93:47:19:90:5c:2c:d9:
b4:ac:0b:fc:56:62:90:ac:e7:a2:59:60:c0:30:0c:
ac:ca:da:f5:b2:e1:27:b4:7f:86:31:d8:5d:5a:78:
31:63:f2:88:16:e7:8c:4f:d6:c9:bc:7b:27:43:ff:
e9:bb:55:2c:21:6d:45:0d:ab:b8:40:3f:db:2c:b3:
31:86:b3:2c:87:1c:75:f6:16:ce:6c:4f:64:8a:fc:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:FC:8D:DF:26:FE:15:85:0D:CF:99:69:A5:B8:A4:1B:C3:CE:52
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:3e:15:50:a2:d5:e2:3f:1f:00:24:42:f8:1f:c7:ac:a2:c4:
e0:fd:dd:37:0a:97:87:6e:42:cb:18:d5:71:4c:d7:73:5c:a7:
b3:42:7c:21:a4:d4:0c:93:e1:81:fd:d2:bb:04:dc:57:7a:f1:
f5:4f:09:52:3c:57:7c:1c:9c:fa:4d:a9:df:77:04:c0:2a:ce:
65:38:d8:6c:5e:20:ab:7c:48:1e:47:c2:cc:59:0f:6a:ee:79:
97:43:c6:71:cc:94:68:a9:54:52:69:1a:ed:2d:bc:5b:ff:29:
cb:d9:8c:6b:09:c7:a2:11:09:58:9e:b5:bb:87:77:a2:77:1d:
89:4d:8a:04:e4:7f:17:fc:73:5c:44:50:d5:e0:31:ac:ab:73:
51:48:48:09:01:9a:fa:ab:9e:b7:86:f9:5f:25:69:ab:97:f3:
12:e7:a3:e0:5c:b1:a2:4c:5a:00:3b:f5:af:0c:b0:eb:e3:a8:
65:28:5a:f9:1f:ed:f4:33:d6:51:96:28:44:24:33:15:16:4c:
09:e1:94:a2:e7:f4:39:2b:0b:95:08:c3:f6:92:e0:0a:3d:ae:
45:4c:91:c8:21:3a:42:b4:ab:e3:3d:65:f7:cc:70:cb:f3:59:
7c:bc:ba:8c:69:f7:d5:ed:af:72:a8:3d:5d:76:d4:1c:a3:9a:
5f:64:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:06 2025 by rpki-client