![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/rzlMB6p-sXa1i2NaKyqIYlq1sz8.roa
File: rzlMB6p-sXa1i2NaKyqIYlq1sz8.roa (raw, json)
Hash identifier: mYiAJZ3zHKyZAvbHDDn/vpQvdlmFSItJYFIywMhHdXg=
Subject key identifier: AF:39:4C:07:AA:7E:B1:76:B5:8B:63:5A:2B:2A:88:62:5A:B5:B3:3F
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 25
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rzlMB6p-sXa1i2NaKyqIYlq1sz8.roa
Signing time: Wed 01 Feb 2023 01:30:24 +0000
ROA not before: Wed 01 Feb 2023 01:30:24 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 17676
IP address blocks: 61.213.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 1 01:30:24 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=AF394C07AA7EB176B58B635A2B2A88625AB5B33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:f3:79:0f:4e:1c:fd:c8:04:17:95:d5:be:
6c:dc:6f:b5:b4:b7:67:76:57:56:2a:50:d1:65:2a:
54:05:4b:4e:7b:ee:4f:dd:c1:0b:ea:bb:26:ba:62:
17:ce:e1:0f:65:5b:a3:83:80:d8:32:a0:e1:97:29:
e1:1e:c7:16:f1:23:70:9c:7b:44:ba:e0:73:ff:80:
89:a9:90:d6:bb:23:b4:ec:76:b1:17:bc:5a:ac:b4:
31:b8:9c:63:b0:e5:22:9e:a4:52:f6:d2:00:ef:ef:
47:2c:b0:ab:40:64:e5:e2:be:72:7f:9b:50:df:c4:
f4:48:8c:f8:3a:a2:e4:01:4b:80:75:54:1f:44:ee:
9c:97:7e:47:61:d2:ad:52:65:75:84:4c:46:9c:72:
04:ba:04:ad:cf:6a:40:91:da:cb:72:7e:03:57:e5:
a5:a7:c7:ac:db:14:dd:ce:05:7a:da:14:d4:80:45:
81:22:2a:f6:fb:fa:ba:7d:93:a7:38:41:3b:09:db:
eb:61:79:06:1c:86:ce:76:bb:74:2e:45:3e:8f:79:
cc:83:6d:25:14:13:ba:d0:c0:41:64:ea:cc:39:9e:
ff:3b:21:81:1d:e4:b4:14:32:ec:86:30:58:f8:68:
29:91:7d:a1:1c:5d:44:e6:3f:85:41:f9:0b:ba:08:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:4C:07:AA:7E:B1:76:B5:8B:63:5A:2B:2A:88:62:5A:B5:B3:3F
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rzlMB6p-sXa1i2NaKyqIYlq1sz8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.0.0/20
Signature Algorithm: sha256WithRSAEncryption
73:b8:bb:5a:27:fa:e9:8e:ed:32:78:cb:02:0c:14:33:6f:c1:
b9:35:61:94:69:d5:9b:29:f9:8a:f1:c8:28:d4:3e:de:29:06:
5c:cd:92:19:77:37:f1:d8:a9:b3:c0:fe:3e:93:95:fc:3f:0d:
1f:b3:03:f1:dd:18:67:61:ad:78:0b:a3:4e:f8:bd:68:ee:bc:
cd:c3:4d:3c:a1:16:bb:77:fb:c2:22:f9:de:fe:4f:76:b7:45:
de:c7:73:d3:48:46:b4:d6:dc:7d:61:74:84:a2:9f:c6:e4:9a:
b2:d4:2c:b0:40:9f:aa:df:7b:ca:7d:0d:95:c5:5a:8c:11:8f:
5e:01:eb:2a:9b:aa:d3:7c:39:8d:b5:07:17:2b:5c:50:1f:e1:
17:7e:07:5b:6b:e6:1b:f3:31:4f:b1:c0:cc:b1:13:61:dd:26:
3d:96:95:1a:c2:be:8d:f5:b3:1a:3f:7e:27:ad:71:4e:d6:65:
4c:a7:0d:b5:75:2a:5d:81:70:b1:d1:5a:94:97:ac:5f:2c:36:
12:32:a3:37:d7:95:3c:da:ea:2f:c4:20:49:46:19:c3:e2:d0:
90:ee:dd:02:13:c4:e6:c7:c0:f0:d4:3e:ad:d8:42:48:71:40:
97:3b:e4:fb:a0:e8:b4:c5:68:3c:30:1b:10:ac:73:5d:0c:76:
bc:7c:fe:00
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIzMDIwMTAx
MzAyNFoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQUYzOTRDMDdBQTdFQjE3
NkI1OEI2MzVBMkIyQTg4NjI1QUI1QjMzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQi83kPThz9yAQXldW+bNxvtbS3Z3ZXVipQ0WUqVAVLTnvuT93B
C+q7JrpiF87hD2Vbo4OA2DKg4Zcp4R7HFvEjcJx7RLrgc/+AiamQ1rsjtOx2sRe8
Wqy0MbicY7DlIp6kUvbSAO/vRyywq0Bk5eK+cn+bUN/E9EiM+Dqi5AFLgHVUH0Tu
nJd+R2HSrVJldYRMRpxyBLoErc9qQJHay3J+A1flpafHrNsU3c4FetoU1IBFgSIq
9vv6un2TpzhBOwnb62F5BhyGzna7dC5FPo95zINtJRQTutDAQWTqzDme/zshgR3k
tBQy7IYwWPhoKZF9oRxdROY/hUH5C7oIz+kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSvOUwHqn6xdrWLY1orKohiWrWzPzAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvcnpsTUI2cC1zWGExaTJOYUt5cUlZbHExc3o4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3VADANBgkqhkiG9w0BAQsFAAOCAQEAc7i7Wif66Y7tMnjLAgwUM2/BuTVh
lGnVmyn5ivHIKNQ+3ikGXM2SGXc38dips8D+PpOV/D8NH7MD8d0YZ2GteAujTvi9
aO68zcNNPKEWu3f7wiL53v5PdrdF3sdz00hGtNbcfWF0hKKfxuSastQssECfqt97
yn0NlcVajBGPXgHrKpuq03w5jbUHFytcUB/hF34HW2vmG/MxT7HAzLETYd0mPZaV
GsK+jfWzGj9+J61xTtZlTKcNtXUqXYFwsdFalJesXyw2EjKjN9eVPNrqL8QgSUYZ
w+LQkO7dAhPE5sfA8NQ+rdhCSHFAlzvk+6DotMVoPDAbEKxzXQx2vHz+AA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:48 2025 by rpki-client