![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
File: HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa (raw, json)
Hash identifier: y0CWWvRl7wOkpU7qGNEiSg5mQK56I6AZHo6oAXA3IuI=
Subject key identifier: 1D:BB:81:A0:1F:5A:54:B7:C3:84:F0:90:0D:4C:72:73:C4:2A:86:68
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0475
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
Signing time: Thu 13 Apr 2023 09:59:49 +0000
ROA not before: Thu 13 Apr 2023 09:59:49 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 61.211.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:59:49 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=1DBB81A01F5A54B7C384F0900D4C7273C42A8668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:af:c3:84:bd:55:55:95:97:0e:a5:88:97:
95:e4:3e:bc:85:1b:01:e3:5f:db:5d:4a:87:3c:c5:
fb:af:d7:b0:25:e4:23:b0:6f:fc:01:e0:6d:aa:50:
b9:58:e1:85:c2:dd:d9:e8:6e:8a:c1:86:da:45:61:
4e:30:08:43:8d:68:6c:04:66:17:b0:eb:11:80:b1:
9f:32:47:8b:ba:46:1b:47:e6:2d:32:ac:5c:e8:34:
5f:66:f3:6a:96:db:5c:0f:75:1a:9c:c0:ec:16:ae:
09:c5:ca:d2:75:ac:10:c5:1c:ed:76:fe:fb:7f:7e:
70:17:d9:63:ff:ed:25:05:5c:72:00:5a:41:12:90:
b4:a1:e7:bb:b9:1b:65:ce:3c:bf:b4:63:b0:d8:37:
4a:1a:fc:1c:58:86:2c:96:14:f2:f4:00:ab:8b:57:
52:ed:fb:95:05:57:63:52:a0:0a:c1:42:fb:95:ca:
86:f6:60:d1:f6:8c:b4:5c:90:41:e0:b8:e7:66:bc:
ab:15:62:97:07:11:f6:13:80:43:25:c1:fe:6b:67:
12:eb:26:11:4d:02:c2:37:3b:6d:35:bb:de:d9:9f:
50:62:07:d4:43:12:a5:85:8c:1a:fc:80:17:54:02:
d0:64:00:b6:f2:b5:89:fa:8e:38:33:3b:f5:30:a6:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:81:A0:1F:5A:54:B7:C3:84:F0:90:0D:4C:72:73:C4:2A:86:68
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.211.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:5c:fe:90:e5:32:41:a5:0b:fc:12:d3:42:32:4f:fd:35:d2:
f6:88:22:81:38:db:72:62:a4:d9:0a:e2:f4:37:de:c7:33:d1:
9c:3f:ad:30:83:a3:e3:a3:bc:55:dc:c0:10:f0:40:d3:db:0c:
ab:65:85:a8:3a:37:52:a6:d1:64:dc:15:0a:b0:22:20:c5:a4:
b4:73:11:95:ac:69:5d:7c:8a:1f:1f:2d:1f:dd:ce:7d:43:d1:
5d:b7:39:2a:03:99:25:72:54:94:79:84:0d:fa:fd:41:02:16:
6f:70:4e:a9:78:4c:61:55:40:ec:e1:da:cc:68:dd:dc:b8:81:
67:6a:72:19:0f:78:fe:3e:e6:1c:95:d9:37:9f:ed:aa:80:7b:
35:7a:6e:4d:dc:af:51:7a:94:32:40:b9:65:87:19:21:3e:87:
c3:17:5d:6b:95:d5:a3:07:9a:c6:ef:10:4c:71:da:b9:d6:25:
70:45:9b:a6:c6:67:41:96:04:88:7a:93:5b:82:a2:65:3e:c1:
0d:f6:a3:3a:62:f6:11:35:a0:64:0e:ce:48:5b:b6:dd:00:fb:
6a:1f:f4:cf:40:c2:a0:76:7d:a5:b6:e0:53:7a:ab:6d:b0:3a:
58:c9:e9:ff:5a:4d:31:54:52:08:af:f6:eb:82:f8:1d:6a:f9:
15:23:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:25 2025 by rpki-client