![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa
File: 4AdT3yIPuR7vvSoeMRj4FGX916w.roa (raw, json)
Hash identifier: 9G1Wm/xyukJrqoERlrf8FBKB37k/NpKgCWW3kV/K3RM=
Subject key identifier: E0:07:53:DF:22:0F:B9:1E:EF:BD:2A:1E:31:18:F8:14:65:FD:D7:AC
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 048A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa
Signing time: Sun 01 Oct 2023 01:28:04 +0000
ROA not before: Sun 01 Oct 2023 01:28:04 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10010
IP address blocks: 133.186.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Oct 1 01:28:04 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=E00753DF220FB91EEFBD2A1E3118F81465FDD7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:17:09:62:b0:bc:0b:d2:f5:10:b5:57:59:
89:e4:42:4b:2c:5d:f4:60:77:08:f7:b2:c4:77:d9:
4c:96:b9:4e:bf:72:4b:4f:fd:8a:b4:d8:49:07:fd:
53:5e:f7:bf:17:09:14:91:f8:5d:66:4a:53:63:72:
be:f8:a4:f9:56:dc:2b:50:5b:df:d8:13:14:6d:f1:
f9:b7:fb:b7:17:9d:2f:35:07:32:73:87:ed:ec:57:
28:78:43:18:dd:61:c3:a8:53:b0:07:13:15:b8:df:
33:75:f6:02:ad:4d:b7:bc:40:96:b2:4e:60:58:53:
57:df:cd:dd:89:84:89:21:0e:f7:28:5c:4a:dc:5a:
54:75:7d:60:91:bb:2d:d1:ff:a3:5d:3b:86:2f:1b:
27:88:83:bd:2f:97:a0:58:7c:34:7d:e9:61:ab:0d:
bc:ab:9f:1e:e7:22:1f:4e:e0:11:91:7e:55:7c:85:
d4:6a:09:de:04:9f:d0:7c:7f:d9:19:e7:2e:c6:6c:
3c:3a:53:11:bd:7a:b4:af:e6:5f:4e:0a:a6:32:ff:
ed:6e:63:13:54:92:fc:36:5e:bc:2d:84:be:08:ea:
32:68:57:f4:09:85:10:c6:95:7d:5a:31:75:7f:21:
28:e7:79:ec:8c:6f:5c:c1:fa:8c:8f:e7:42:1d:b0:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:53:DF:22:0F:B9:1E:EF:BD:2A:1E:31:18:F8:14:65:FD:D7:AC
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4AdT3yIPuR7vvSoeMRj4FGX916w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.186.0.0/20
Signature Algorithm: sha256WithRSAEncryption
78:82:f8:2c:4e:34:23:fd:88:8b:10:58:0d:63:c3:7a:bf:bf:
d1:da:9c:f6:e9:f4:33:85:1c:ee:08:2b:5b:39:af:55:76:51:
35:ad:50:a9:e9:e8:fc:db:ed:16:0a:f4:bc:ad:35:c1:6d:27:
ed:4f:03:d2:3e:87:7d:04:6b:18:0c:cf:57:eb:03:b3:37:09:
3b:97:e2:b3:8d:10:9e:84:19:48:5c:88:22:09:c5:86:20:e2:
4d:70:e9:df:dd:12:d8:9d:c8:f3:9e:35:34:56:cd:46:22:34:
3c:08:89:1b:79:7d:a6:5a:fe:01:36:b0:b8:08:19:6f:f7:3e:
87:89:8e:77:4f:e3:b7:6f:aa:f0:3c:c7:29:e4:58:5d:69:45:
ec:a7:90:0d:78:26:b5:bc:cc:9f:cb:00:0d:2f:bf:f0:ad:4d:
73:86:e2:f4:d2:29:c0:73:51:11:8b:ed:53:8a:85:7c:ad:f1:
3a:43:29:c3:a1:1a:57:bd:57:81:21:db:9c:79:c8:bb:cf:51:
df:fc:49:d2:94:08:a1:e2:49:9d:20:46:fb:62:a4:23:8c:e0:
7f:d2:43:54:85:2d:1d:e4:78:ed:f0:d9:d8:e6:1a:f7:00:4b:
7d:9e:73:73:9d:86:80:62:3f:ed:46:ca:c3:7a:f9:d1:69:6b:
06:85:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:46 2025 by rpki-client