![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
File: zk9TReqp4wnbVGwI5dzU_pYyTK4.roa (raw, json)
Hash identifier: B7cScAcLlSVrjFXfbWgN9UvmmOL6NEPuks65nLwOMlU=
Subject key identifier: CE:4F:53:45:EA:A9:E3:09:DB:54:6C:08:E5:DC:D4:FE:96:32:4C:AE
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0104
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
Signing time: Fri 01 Dec 2023 01:30:05 +0000
ROA not before: Fri 01 Dec 2023 01:30:05 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 39.110.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Dec 1 01:30:05 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=CE4F5345EAA9E309DB546C08E5DCD4FE96324CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:e7:a4:d2:b4:0f:96:8e:1a:b8:f3:7a:d2:
62:e8:a8:28:15:94:30:0c:1d:95:95:5e:ad:82:3b:
55:59:26:b5:e0:5e:7d:52:14:02:76:3f:57:cb:04:
5e:dc:d5:b5:3b:56:12:54:e0:04:a2:fd:f4:3d:f1:
ef:b1:2d:50:9e:5c:43:b9:75:3e:b7:bf:5e:d8:d7:
1f:50:1d:14:5e:07:68:95:b4:2a:fc:8c:24:aa:64:
f7:42:ef:c1:37:ab:28:42:98:18:8c:f3:a9:1b:03:
2f:86:a2:92:55:e7:70:1d:cf:c4:20:36:37:cc:2e:
65:4d:b2:7f:73:05:67:b0:73:d7:de:c9:08:f7:6d:
0a:7a:92:2d:f9:be:17:23:88:af:6f:6d:7d:a7:5e:
28:ca:92:1b:e3:ee:29:4b:e5:6e:72:47:39:ac:fc:
72:61:75:48:41:9a:db:00:04:09:44:fa:0d:09:2c:
ad:6e:ac:8c:c0:49:d6:bb:ac:a5:56:9b:4f:59:64:
08:64:3d:53:1f:d9:6d:ee:7d:81:47:94:ab:ce:f9:
c2:00:0e:64:72:24:43:bb:16:09:5c:1e:ab:79:e9:
ac:6e:1f:63:57:78:57:60:d6:c1:a2:5c:51:35:e0:
32:b4:78:1c:85:56:ce:10:c4:73:9f:5a:21:56:eb:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:53:45:EA:A9:E3:09:DB:54:6C:08:E5:DC:D4:FE:96:32:4C:AE
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zk9TReqp4wnbVGwI5dzU_pYyTK4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.110.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2e:46:11:3e:6e:86:36:bf:97:08:72:bb:d7:40:ae:6f:11:22:
3d:55:37:84:c5:b8:9c:6d:06:f9:56:bf:90:ae:14:c1:1a:10:
07:c8:0f:e2:b3:73:63:d7:b8:b6:b4:54:32:ad:2f:6d:88:9e:
54:1a:55:38:86:d4:d6:dc:d7:09:43:fa:e0:37:89:92:f1:a7:
97:de:0e:25:c4:d8:03:c0:26:55:2a:9d:47:5a:e9:97:25:38:
13:57:10:98:fd:c3:4a:87:a5:78:86:c0:dd:73:14:c0:ef:79:
e9:69:86:0f:71:c4:d5:c5:c4:55:a2:3f:83:d2:51:de:d4:e8:
76:6c:80:9f:42:f0:f7:3f:be:d6:6e:23:76:b5:93:3f:d8:12:
2e:f4:94:57:bb:fd:93:3b:70:fe:30:74:b4:2a:ec:5d:e4:3b:
23:b8:03:43:1f:2d:03:cc:54:23:59:46:0a:62:31:c8:53:56:
c0:0d:2f:81:31:24:c8:ca:41:c9:95:ca:2f:90:59:4a:26:8a:
52:ec:a0:6e:23:67:f2:e6:2e:04:b0:d8:56:ef:5c:1c:84:5c:
4d:e1:98:37:34:58:1b:74:56:e1:37:47:a8:d2:47:b2:e0:64:
54:1f:75:d6:aa:9f:84:11:22:01:c3:d4:bc:a7:7a:e0:aa:02:
4f:b3:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:29 2025 by rpki-client