![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
File: OPdwiuII4NWx_RqwYb8QRSwga6A.roa (raw, json)
Hash identifier: JYIthYLPdFGnIqAsXwoFb5db/0cYE0bMQZPCh/vSCCE=
Subject key identifier: 38:F7:70:8A:E2:08:E0:D5:B1:FD:1A:B0:61:BF:10:45:2C:20:6B:A0
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 5D
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
Signing time: Fri 01 Sep 2023 01:29:12 +0000
ROA not before: Fri 01 Sep 2023 01:29:12 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 55900
IP address blocks: 43.248.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Sep 1 01:29:12 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=38F7708AE208E0D5B1FD1AB061BF10452C206BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:7c:a3:9d:ee:a1:7d:da:ff:40:cf:27:88:
38:11:35:7f:33:bb:a4:38:1e:90:df:59:11:04:aa:
4c:e4:60:82:d9:b5:04:1a:68:fe:90:b6:ee:9e:6c:
f6:8c:d4:a5:ac:f2:15:e7:f2:f4:08:63:1d:39:d3:
74:e2:22:e9:bf:4d:fd:e5:3e:ae:9e:02:f4:ec:33:
67:ab:b0:76:f8:9c:cf:f4:47:ca:87:09:ac:e5:35:
29:2f:b5:cd:56:d6:b1:80:10:a6:b9:5e:8c:33:e8:
14:a2:e6:37:9b:52:f7:fa:21:45:5c:76:90:54:fd:
90:0a:ae:6b:17:57:86:4a:f0:10:d0:00:b2:7b:88:
54:9f:a4:af:ac:41:1c:08:b9:02:fa:d7:91:d3:ad:
f6:1f:90:3b:ba:f3:11:7f:f6:2f:43:95:90:d8:fd:
7f:73:c4:41:44:6c:a5:f8:5b:f4:ab:8c:73:97:d3:
ea:30:e8:ef:96:d4:a5:bc:f5:fe:5b:52:a6:c6:b5:
9a:ad:0b:39:b4:61:fb:20:6f:5d:ed:92:b5:48:e1:
3b:45:78:6e:4d:09:bc:82:77:3d:0f:94:49:61:82:
80:35:3b:80:a2:ac:0c:ce:d6:36:1d:ed:bb:23:3a:
d5:bc:48:d8:0f:ab:ed:c5:19:33:36:54:ed:97:0f:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:70:8A:E2:08:E0:D5:B1:FD:1A:B0:61:BF:10:45:2C:20:6B:A0
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.160.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f7:a4:12:cf:b5:52:29:b7:7b:5c:9c:a7:a3:c1:6b:64:21:
8d:6c:e1:cd:0f:a0:3d:3f:bc:b6:a2:96:04:e4:17:e6:f0:d1:
e8:7e:94:25:47:93:20:d1:b4:92:b5:d8:29:64:ce:b8:01:da:
86:e3:12:a2:f9:19:0d:6f:78:d1:04:3b:03:00:8d:5b:16:67:
77:13:2b:a6:bb:e1:62:98:f5:79:ea:c6:3d:a2:16:8c:fa:be:
50:92:1a:2d:04:b0:65:ce:7a:31:09:7d:9a:99:d3:5b:f6:7a:
bf:17:0e:8b:b0:89:1c:c7:f5:cd:a8:25:21:66:41:a5:7d:1f:
fa:81:2f:92:23:54:9e:85:56:08:b6:70:b4:37:f1:e2:0e:fc:
8d:36:2c:4f:50:90:4c:73:f2:1f:f8:c3:10:09:ea:fa:92:89:
65:f6:6f:bb:74:88:27:b2:d4:36:82:1c:9c:83:99:c0:ca:cc:
35:ab:82:d1:e0:42:d6:0a:c5:0c:64:c3:8f:ed:0f:44:4d:cd:
bc:9e:b0:93:5f:b7:66:36:28:99:ff:d2:3c:9b:9c:fb:87:2b:
af:1e:7d:43:40:be:17:87:01:16:39:46:72:d0:01:42:e3:ca:
7e:0d:f2:58:99:da:59:61:73:1c:98:55:3b:38:84:97:25:55:
7a:93:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:38 2025 by rpki-client