![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
File: PZrnUWfw3gmgibsipzNYL9x46pQ.roa (raw, json)
Hash identifier: zo3pHmi75y8AwIW23bb0VsgUaPi34dIAftZkezMZ3ik=
Subject key identifier: 3D:9A:E7:51:67:F0:DE:09:A0:89:BB:22:A7:33:58:2F:DC:78:EA:94
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 047B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
Signing time: Thu 13 Apr 2023 09:59:52 +0000
ROA not before: Thu 13 Apr 2023 09:59:52 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 116.68.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:59:52 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=3D9AE75167F0DE09A089BB22A733582FDC78EA94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:ef:d8:a5:f6:03:1b:62:de:76:29:58:d2:
51:a3:95:60:18:4a:72:54:52:6f:77:53:a9:64:23:
32:28:8c:3f:c8:7a:b3:ea:60:45:61:96:f8:94:84:
ba:54:84:af:0d:49:03:10:65:52:7a:6b:59:59:a2:
41:8c:85:59:b6:ee:b1:21:7a:2c:4b:7b:a8:d7:a2:
fe:b0:e0:59:91:7c:71:f2:bb:88:0e:d1:e3:ac:5f:
69:5b:d0:cd:55:31:8d:ba:a1:4a:b4:3e:c6:71:a8:
bc:69:af:5b:f1:61:50:73:6f:fc:1f:84:94:fb:9d:
e3:fb:6e:10:a3:05:1a:0a:f6:12:93:07:8a:09:22:
23:65:3a:c3:b0:5c:28:7a:2a:a5:89:4c:df:0b:d8:
94:10:54:f0:3c:fa:39:73:77:07:42:37:73:31:54:
53:08:a4:08:a4:18:6d:87:ea:02:79:f9:d5:91:55:
4c:60:e8:9c:9d:d6:17:ae:90:62:1e:d1:0e:a1:de:
f6:aa:d4:71:aa:78:35:23:fd:c6:75:e3:d3:e2:e8:
83:73:1d:99:76:8f:15:5b:44:5f:57:b0:57:0e:86:
b2:ad:27:10:e0:6f:2e:38:62:08:6d:47:19:7a:04:
61:d4:e1:ad:d3:81:d4:69:40:e0:ee:6e:99:aa:f7:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:E7:51:67:F0:DE:09:A0:89:BB:22:A7:33:58:2F:DC:78:EA:94
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PZrnUWfw3gmgibsipzNYL9x46pQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7e:5d:65:69:b7:9c:36:08:2e:38:f9:e8:c8:2d:87:ec:e6:
af:77:5a:47:3f:45:08:9a:09:e5:ff:0b:f1:b3:d7:fb:43:f9:
66:79:fb:b7:5e:ce:45:a0:a1:66:33:61:6e:7e:68:7b:f3:3c:
65:9e:21:48:6f:72:fe:c6:1e:c3:15:1d:68:20:2f:2f:ff:56:
8d:4b:12:75:ba:7e:36:4c:50:fe:f9:02:ba:3c:f0:37:31:5f:
f7:48:45:c4:e3:75:e7:57:f9:05:8a:d8:a7:97:f6:e5:70:10:
0b:20:5d:94:34:75:ed:c9:e1:09:41:55:e9:d6:24:f1:26:52:
29:d1:e9:99:9e:09:d0:36:a8:e6:4c:39:9e:ce:42:5f:cc:68:
66:12:f4:09:b8:93:82:a0:6b:d7:e7:61:78:b1:1d:f4:f3:0b:
e8:43:a7:6f:a8:ac:71:60:4e:b0:31:2f:84:00:a5:15:66:bc:
7b:c8:43:57:bb:d7:a1:e4:7c:e8:5c:a1:20:28:df:d0:b3:d4:
32:3d:01:ac:29:81:8e:f7:e5:8e:6c:92:7d:41:8b:cc:a8:58:
f1:0a:ee:9a:7b:d9:eb:e5:b0:ac:e9:9e:99:d0:fd:ea:73:ab:
af:45:b4:f6:7d:10:f1:d8:39:b8:6d:12:10:eb:e2:43:95:82:
94:81:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:26 2025 by rpki-client