![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa
File: QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa (raw, json)
Hash identifier: tAL+VUvzlj94jvGN9FRSC6cDn8Lp0Qi81GJfJLv1AL8=
Subject key identifier: 41:4E:71:CD:ED:BA:26:6D:43:2E:14:B9:4D:D6:78:80:4B:77:32:E4
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: EB
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa
Signing time: Thu 19 Oct 2023 09:26:12 +0000
ROA not before: Thu 19 Oct 2023 09:26:12 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 10021
IP address blocks: 27.110.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Oct 19 09:26:12 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=414E71CDEDBA266D432E14B94DD678804B7732E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:99:47:30:2a:c2:52:cc:e9:4b:a4:3a:57:
f5:0d:bf:35:22:dc:63:46:c9:03:4f:0c:20:e1:a3:
90:00:4d:6b:4b:0c:4c:40:ce:83:8c:23:a1:d8:bf:
d6:4f:ee:b4:3a:23:1c:91:c6:8d:65:6d:d7:80:51:
99:72:a9:88:16:3d:ba:46:b2:c2:f1:2b:b5:f8:21:
fb:d1:5d:65:45:e3:7a:5e:d0:62:63:00:95:17:c3:
d7:22:c8:3d:db:fc:7e:33:42:dd:51:ef:0c:43:ab:
83:1f:1a:14:fc:ad:cd:f9:05:64:b3:a3:17:f6:1b:
c9:8b:42:87:5e:85:53:f4:c3:98:9f:9c:08:9f:b4:
ac:8a:87:4b:25:0d:2d:aa:81:b6:b9:31:8e:2f:99:
b0:e9:4e:02:3c:ce:5f:1b:89:1c:a9:ad:f3:ac:85:
52:77:ca:d8:17:2b:aa:58:80:04:7c:4c:6a:d6:52:
2f:2d:ee:76:30:c7:cd:d1:7d:94:0a:18:24:c4:2f:
9c:29:1f:25:fc:ee:ec:8a:4e:9a:8c:90:bd:73:bd:
40:d5:6e:74:c6:fc:a9:cf:5c:fb:48:4f:74:5a:69:
e2:c4:ba:aa:7f:a5:32:eb:9f:ce:b9:90:af:e9:82:
78:cc:10:03:28:b1:bd:eb:0f:93:ff:23:a3:f8:6d:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4E:71:CD:ED:BA:26:6D:43:2E:14:B9:4D:D6:78:80:4B:77:32:E4
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.24.0/21
Signature Algorithm: sha256WithRSAEncryption
52:57:a8:c0:97:c9:48:1f:d1:8f:e2:10:cf:96:66:c2:cc:5e:
be:4d:f5:9c:64:c2:b6:0e:20:c2:eb:81:5c:d8:17:f4:6b:ed:
16:e9:24:df:0b:39:fa:7c:31:4c:ba:32:5c:f7:50:23:28:ac:
c7:bc:5d:89:62:cd:6b:ca:76:87:db:d1:88:fd:49:ed:4c:6a:
a3:be:f8:3d:78:92:7e:ae:ca:c3:d2:8f:f8:f1:b0:31:dc:65:
2f:10:b5:56:f2:68:80:19:1e:a2:2f:3a:82:2f:27:33:53:a4:
0b:b2:02:79:19:cc:15:96:46:13:01:d8:86:7c:5b:ce:07:a7:
bd:92:da:81:7d:0b:b4:80:36:cc:a9:0a:6b:55:15:bd:f3:cd:
3f:78:d0:e1:fb:3d:45:d8:01:68:4b:ed:a2:b7:bf:03:fc:e1:
c0:1d:7b:ee:42:bb:db:7b:d4:5c:3a:41:87:d7:b3:f1:df:b9:
ce:1f:3f:28:24:65:02:9c:2d:3d:ea:0a:57:73:a6:ff:87:f5:
f4:68:65:bd:e1:0a:71:1c:ec:19:12:98:d5:58:99:a9:a5:26:
c5:8d:7d:67:ee:1c:f8:28:9a:44:b1:4d:be:37:96:91:9b:97:
84:6a:1f:24:94:5c:fa:5c:05:56:77:25:5b:f8:c4:de:54:51:
2b:5f:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:51 2025 by rpki-client