![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
File: rItcvMwiAgNQeDcTDAaGzkRvSDc.roa (raw, json)
Hash identifier: K9Zl7NX/SExKUtcySVO53F6IhN7dpl5CaNp32hDAfF4=
Subject key identifier: AC:8B:5C:BC:CC:22:02:03:50:78:37:13:0C:06:86:CE:44:6F:48:37
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 2C
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
Signing time: Fri 29 Sep 2023 06:36:56 +0000
ROA not before: Fri 29 Sep 2023 06:36:56 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 203.215.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:56 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=AC8B5CBCCC220203507837130C0686CE446F4837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:55:a4:43:24:65:73:b5:5d:d0:0a:a2:0e:
79:47:3f:a0:b5:f1:23:e0:e9:eb:fc:1c:58:65:43:
84:46:19:e9:25:96:90:79:b8:2a:81:0a:23:af:ed:
d8:35:36:d8:85:93:de:d9:72:7e:c8:5e:ef:a5:88:
27:37:0b:c6:42:a6:0f:aa:5d:e1:03:16:85:28:79:
85:8b:ef:8e:2e:6c:50:32:db:cb:9c:2a:94:0f:3f:
81:1c:22:97:f7:e8:51:96:dc:00:24:97:07:2a:70:
f3:c7:56:a0:5b:81:11:26:88:15:a1:30:d5:6e:04:
c6:a2:e0:c4:3c:4c:8e:07:8c:3f:b1:85:04:f0:44:
b2:b4:91:2e:78:f9:bf:01:79:ce:95:88:00:38:0e:
83:09:da:32:87:ef:79:58:67:53:67:62:8c:92:3f:
c4:64:c4:a1:42:ae:6b:5c:4b:8a:cf:26:1a:b9:3a:
a5:2a:d8:94:ce:e6:46:4d:0d:64:6f:11:e7:26:e1:
48:da:ad:7d:39:d7:a2:99:e7:35:91:34:87:cd:12:
d1:2d:6e:b6:6f:77:b5:c2:86:b0:af:2c:3e:b9:d6:
e4:45:9d:4b:fc:a1:fc:ed:6a:a4:34:1f:21:ef:ca:
82:7c:44:b0:27:99:31:ec:4b:92:90:dc:48:c7:5b:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:5C:BC:CC:22:02:03:50:78:37:13:0C:06:86:CE:44:6F:48:37
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rItcvMwiAgNQeDcTDAaGzkRvSDc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.215.56.0/22
Signature Algorithm: sha256WithRSAEncryption
91:13:e1:5e:26:40:86:55:07:f0:fd:2e:93:47:05:89:db:29:
10:ab:04:68:aa:ab:68:6e:51:4e:fc:70:76:ea:a5:2d:72:19:
0a:c4:16:8c:c9:17:46:8c:c0:24:06:d6:2e:5f:d2:95:f7:71:
af:ae:a9:89:1a:73:8f:b1:85:c2:c8:b5:2e:06:b7:28:d7:c5:
26:6a:73:2d:f0:18:c9:89:f4:d8:3a:fe:a6:f3:64:ba:93:4a:
3e:0e:d8:9c:43:78:db:30:8b:ca:91:68:43:e6:16:a9:25:74:
bc:ee:c2:3a:f9:53:f8:c3:18:a3:ae:9a:23:65:26:74:c5:2c:
7e:c3:80:2b:9b:56:93:41:d3:79:54:14:97:37:78:e2:c2:f4:
7b:70:a1:76:9a:3c:9b:f2:0f:5a:b7:80:49:ba:23:9e:e1:89:
ec:1a:28:fa:d2:8c:5f:ef:7c:f3:31:12:fb:d1:fb:5d:79:27:
53:b8:ee:5a:8d:ea:3b:8c:36:b7:f6:27:ef:07:0c:a6:ea:42:
a7:dc:72:a5:9c:3c:ca:1c:5b:e8:ad:77:79:26:5f:a4:46:42:
12:ad:04:32:ed:0a:42:38:c2:e5:7a:86:b6:b7:47:bd:40:4a:
88:b7:b1:9b:45:8c:f5:2d:67:3c:b8:07:22:9a:17:1d:f6:38:
d5:6b:4a:61
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1NloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQUM4QjVDQkNDQzIyMDIw
MzUwNzgzNzEzMEMwNjg2Q0U0NDZGNDgzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK85VaRDJGVztV3QCqIOeUc/oLXxI+Dp6/wcWGVDhEYZ6SWWkHm4
KoEKI6/t2DU22IWT3tlyfshe76WIJzcLxkKmD6pd4QMWhSh5hYvvji5sUDLby5wq
lA8/gRwil/foUZbcACSXBypw88dWoFuBESaIFaEw1W4ExqLgxDxMjgeMP7GFBPBE
srSRLnj5vwF5zpWIADgOgwnaMofveVhnU2dijJI/xGTEoUKua1xLis8mGrk6pSrY
lM7mRk0NZG8R5ybhSNqtfTnXopnnNZE0h80S0S1utm93tcKGsK8sPrnW5EWdS/yh
/O1qpDQfIe/KgnxEsCeZMexLkpDcSMdbLmUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSsi1y8zCICA1B4NxMMBobORG9INzAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvckl0Y3ZNd2lBZ05RZURjVERBYUd6a1J2U0RjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsvXODANBgkqhkiG9w0BAQsFAAOCAQEAkRPhXiZAhlUH8P0uk0cFidspEKsE
aKqraG5RTvxwduqlLXIZCsQWjMkXRozAJAbWLl/Slfdxr66piRpzj7GFwsi1Lga3
KNfFJmpzLfAYyYn02Dr+pvNkupNKPg7YnEN42zCLypFoQ+YWqSV0vO7COvlT+MMY
o66aI2UmdMUsfsOAK5tWk0HTeVQUlzd44sL0e3Chdpo8m/IPWreASbojnuGJ7Boo
+tKMX+988zES+9H7XXknU7juWo3qO4w2t/Yn7wcMpupCp9xypZw8yhxb6K13eSZf
pEZCEq0EMu0KQjjC5XqGtrdHvUBKiLexm0WM9S1nPLgHIpoXHfY41WtKYQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:00 2025 by rpki-client