![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa
File: QNRk1GmYGK477JK-qeKNt0aT7O0.roa (raw, json)
Hash identifier: On82A6EchLQu1mmI+6ZRzXXCFJa/1kZdEbESxj3woCs=
Subject key identifier: 40:D4:64:D4:69:98:18:AE:3B:EC:92:BE:A9:E2:8D:B7:46:93:EC:ED
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 032F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa
Signing time: Tue 25 May 2021 02:42:54 +0000
ROA not before: Tue 25 May 2021 02:42:54 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 220.216.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:54 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=40D464D4699818AE3BEC92BEA9E28DB74693ECED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:e3:ca:05:82:72:3f:0f:8b:20:7e:65:51:
80:ed:71:44:91:dc:33:d5:89:5e:74:5a:fb:96:e3:
60:d2:91:bc:a0:06:c0:4c:ca:24:9c:37:bf:f7:56:
35:ef:ba:fc:fa:c3:f9:a8:b5:df:3a:bd:8a:e2:02:
e8:f0:92:2c:c7:49:46:a5:58:90:11:75:b8:67:f6:
e4:d0:6d:a7:25:a6:52:5c:37:b5:58:5b:43:2f:96:
e9:47:76:b5:9a:14:0f:ab:eb:68:15:ef:d8:29:ee:
99:7d:1d:a7:d7:a5:ef:b8:6e:61:43:72:6d:e3:9c:
ea:37:8b:69:e3:9e:60:1a:3f:57:25:9f:d6:aa:06:
6a:1c:76:a0:cc:cc:98:a9:a3:a9:3f:be:49:58:c8:
07:f7:8d:86:f9:8d:e5:e2:ed:83:a7:bd:c7:3d:f8:
99:86:da:27:52:c9:33:77:7b:a0:50:08:96:16:24:
8e:67:b5:46:ba:31:5e:b2:ce:b0:ec:58:9d:04:1b:
a0:9e:05:da:dd:03:fc:af:6b:b6:7c:1e:02:41:c6:
c6:af:57:6e:87:3a:5b:70:b4:09:21:ab:47:65:38:
10:d0:aa:38:70:a7:84:d8:d0:09:79:9e:d2:a1:90:
f9:80:75:6d:5f:c0:1f:f2:3f:eb:4b:97:d8:f9:7c:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:64:D4:69:98:18:AE:3B:EC:92:BE:A9:E2:8D:B7:46:93:EC:ED
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:72:95:b0:9c:ba:36:58:81:93:00:3f:42:b9:0d:7f:95:68:
5c:69:1c:88:fa:20:2c:42:2b:15:0b:ef:6b:fc:1f:7f:d4:cf:
c9:21:9a:46:0c:54:b5:0b:74:fa:b0:04:37:20:cf:8c:eb:cb:
80:82:5a:95:ca:4c:0e:28:47:52:d0:79:69:b6:c3:c3:85:8e:
f1:44:d6:57:89:01:d8:3c:27:1c:7b:61:de:c6:4c:a8:bf:14:
30:fe:9c:85:dc:25:e8:47:e8:03:4d:7f:2d:bb:66:c0:cf:51:
82:bb:ae:98:67:68:ef:48:b5:ef:b9:11:81:11:ae:d7:1b:1a:
b0:22:0f:f2:f5:69:30:b7:48:21:f9:16:36:0c:01:ca:07:ec:
17:f9:b3:45:db:99:a7:cb:00:62:89:9b:7f:cc:c5:8a:5f:99:
f1:f6:12:cf:13:99:13:29:17:4a:50:47:0b:5b:99:00:48:4a:
17:ef:d9:50:c8:36:e6:85:36:44:4d:e8:69:1f:d3:d7:f3:2a:
60:2f:29:7e:ac:12:3b:44:b1:56:e0:8d:83:47:fe:a5:45:d4:
a4:cb:c9:ab:b3:9e:82:c8:7c:73:db:41:05:22:2f:a8:34:b9:
59:db:a4:e4:83:ad:c7:bf:bd:6c:27:6a:7a:45:53:52:9d:6d:
e3:70:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:50 2025 by rpki-client