![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
File: BQcpSthQVJagvEe-01Bq6xUEKfw.roa (raw, json)
Hash identifier: gE4R6vt6FBOdF7XbFqVa/7POVmpPuw9rCJ0t5+6cgBU=
Subject key identifier: 05:07:29:4A:D8:50:54:96:A0:BC:47:BE:D3:50:6A:EB:15:04:29:FC
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 33
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
Signing time: Wed 01 Feb 2023 01:30:29 +0000
ROA not before: Wed 01 Feb 2023 01:30:29 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 17676
IP address blocks: 126.135.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 1 01:30:29 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=0507294AD8505496A0BC47BED3506AEB150429FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:1c:f0:a0:1a:b4:58:63:2a:4f:83:a2:6a:
99:05:d6:2a:58:11:cd:b3:9c:16:e2:c5:0b:1b:91:
e0:80:f5:11:26:6e:86:1c:a5:80:6a:c6:ec:57:c7:
37:64:c1:4c:fc:ec:76:90:3b:43:0f:ef:d0:35:34:
1f:d5:90:4b:52:5c:64:8c:f3:93:ba:13:cf:73:a3:
4c:ba:67:83:5e:4b:76:dd:7a:d4:db:6b:f1:d5:bf:
fd:2a:98:b7:8c:b3:5e:ba:fe:80:ab:6b:2f:cf:a0:
2e:c4:e6:2b:db:5c:6a:69:69:a4:b8:89:a9:ba:79:
c4:8a:76:e4:e3:ad:2d:f5:fe:8c:da:7d:54:54:bf:
6a:2d:27:df:9a:ca:7d:0d:26:4c:8a:28:93:fa:a0:
be:43:63:87:e4:e8:a3:9d:1a:4c:91:90:df:48:67:
ef:6e:9a:82:b0:dd:9d:12:52:37:99:83:3f:96:c0:
63:21:4c:23:5d:00:e8:69:08:5f:c4:7f:b7:0c:96:
0c:21:19:18:36:d5:db:b3:b1:64:bd:a2:e4:7b:d3:
ac:82:8b:a0:91:c5:f6:a8:9a:d9:fd:07:22:09:9f:
b3:9d:cb:c8:23:1c:25:8b:dc:25:5d:bc:24:bc:00:
80:14:56:52:a8:fd:d8:cd:6c:c9:bf:21:77:32:8d:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:29:4A:D8:50:54:96:A0:BC:47:BE:D3:50:6A:EB:15:04:29:FC
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
126.135.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:db:91:b6:9c:b9:3e:94:d5:34:14:b2:02:39:10:e2:c9:18:
59:7e:d0:67:7c:5d:d5:2f:bb:cc:64:5a:56:6a:07:5b:0a:8e:
79:36:c8:09:0a:22:64:10:d7:8d:90:ed:da:4a:73:00:12:11:
2b:13:08:f7:42:5b:c2:3f:a8:eb:cf:ec:e5:3a:21:ca:cd:44:
2c:07:95:b4:af:eb:4d:e7:6d:70:90:81:4c:8f:8a:1d:db:78:
c4:86:06:66:62:be:50:fa:28:94:31:b2:23:d9:3c:ba:c5:6f:
c5:6b:b8:92:82:9c:ad:6a:1e:06:e3:67:58:6b:46:17:90:c2:
75:e8:e1:8e:a5:7f:30:7a:2a:91:40:06:da:02:2e:aa:8b:61:
52:93:b5:ff:ef:02:f9:44:cd:58:1e:46:00:a6:ae:82:e8:10:
e7:45:52:4f:70:b9:45:cf:07:c0:09:74:bb:87:bb:d2:7b:26:
a8:fc:85:d1:4e:0b:b9:88:de:37:28:dc:e7:a7:eb:27:d9:4e:
bf:31:ef:7e:5a:6a:6b:a7:fb:d3:aa:21:a7:11:ed:45:9f:de:
68:84:23:ba:70:6b:96:5b:aa:da:b8:b7:7a:8f:1f:6c:f5:72:
5c:42:cd:ba:10:06:32:57:e9:e7:4b:f5:62:3b:d4:a5:64:50:
0c:75:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:50 2025 by rpki-client