![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
File: PnQM0xL5PwY5woN3bbWLy4X-sfE.roa (raw, json)
Hash identifier: nxpJoVvWHflLHZNVZ+E1Npn9w+T1c6+V1xLafSlwRKI=
Subject key identifier: 3E:74:0C:D3:12:F9:3F:06:39:C2:83:77:6D:B5:8B:CB:85:FE:B1:F1
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 03EB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
Signing time: Sun 01 May 2022 01:33:07 +0000
ROA not before: Sun 01 May 2022 01:33:07 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 10010
IP address blocks: 211.7.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 1 01:33:07 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=3E740CD312F93F0639C283776DB58BCB85FEB1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:34:ed:74:aa:10:2d:24:14:8b:63:bb:16:
8b:ce:3f:1e:7d:20:8e:5f:00:83:1d:76:b1:f4:9f:
c9:68:f0:5a:52:e4:cd:b9:4e:39:1b:f6:30:6e:9c:
a8:94:ef:f8:9f:62:ce:99:4e:8f:f2:60:20:7f:7b:
10:4a:85:a3:14:27:7a:7b:2c:78:3d:12:b7:8e:0d:
8d:40:c0:f6:10:93:65:98:ba:aa:bc:e1:b7:3d:a6:
36:34:70:3d:e6:08:ed:73:46:b5:2b:0e:7c:68:2d:
3a:93:f2:67:8a:14:6c:b9:06:70:66:40:19:8e:34:
e6:82:69:05:38:f6:6e:1f:95:a3:93:f9:21:40:38:
40:d6:74:03:17:ae:58:3b:f4:b1:bf:76:e8:1f:eb:
2f:e8:a2:74:17:ce:2e:72:6b:96:9b:e5:f7:cb:d9:
5d:ff:8f:16:bc:ba:f6:55:01:25:a5:35:35:24:c9:
db:31:4f:c6:b0:1e:a1:70:bd:ca:bc:26:97:67:71:
47:17:0a:09:80:b4:b7:c5:a6:ce:24:94:1e:04:99:
c2:6a:bf:ec:b9:8c:45:c1:f2:bd:aa:b7:93:90:0f:
05:74:29:62:5a:f2:eb:42:e2:6c:47:6f:5a:c6:07:
55:e6:c5:f0:34:16:13:61:6b:6f:7d:f7:88:3b:d7:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:74:0C:D3:12:F9:3F:06:39:C2:83:77:6D:B5:8B:CB:85:FE:B1:F1
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.64.0/19
Signature Algorithm: sha256WithRSAEncryption
51:21:91:f9:c7:5e:a8:0a:f1:61:02:d6:c9:11:c3:5c:be:05:
c4:0c:0a:1b:3a:48:99:40:20:8d:b6:d3:2a:99:49:b1:d5:1a:
70:24:a6:64:e3:12:0c:b2:1b:94:10:93:ea:1f:a9:aa:b8:59:
90:59:0d:67:c1:2d:f9:5c:6a:53:69:ea:b1:7d:86:6c:c5:fd:
0a:4d:f2:3c:ba:30:ce:26:33:77:a9:d4:b9:85:9c:4d:98:34:
c9:22:2c:20:29:eb:be:7f:c7:01:4d:7f:40:68:8c:b4:66:cb:
26:53:cf:03:f1:c2:a6:91:05:43:da:71:b2:5b:b3:80:f5:d1:
35:55:06:b7:b9:df:c3:1e:b6:21:db:d5:39:62:9f:71:ff:04:
8f:0c:c9:43:3b:e2:f7:d6:22:83:fe:de:08:d3:ef:80:1a:af:
f7:17:ec:8f:fa:78:9a:cf:9d:c8:5e:f4:c4:63:5d:6d:0d:cc:
7a:d9:fd:aa:f2:5f:64:eb:d6:0f:26:68:1e:30:c4:51:74:46:
3e:b9:c9:b2:47:b4:f4:61:d5:a4:7b:8d:1d:ca:90:46:16:c5:
90:ae:18:17:e8:4b:b8:ed:a2:f4:aa:df:6f:1f:3b:58:dd:71:
d3:3c:2f:de:38:b3:08:a1:b1:88:97:b2:86:58:87:03:10:2f:
f5:7b:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:48 2025 by rpki-client