![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
File: czjtmYl8WW_6ObsqS8OXYQWcZ18.roa (raw, json)
Hash identifier: YbEkGBJnlC/sOpwLiLMTLVdEAI/dZ7pamKWv87GOM6g=
Subject key identifier: 73:38:ED:99:89:7C:59:6F:FA:39:BB:2A:4B:C3:97:61:05:9C:67:5F
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0391
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
Signing time: Sun 01 May 2022 01:29:47 +0000
ROA not before: Sun 01 May 2022 01:29:47 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 10010
IP address blocks: 42.125.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 1 01:29:47 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=7338ED99897C596FFA39BB2A4BC39761059C675F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:82:ad:a3:e8:2f:26:2c:79:2f:45:69:fc:
03:11:f6:b0:e9:58:15:6b:d2:d1:7e:05:2a:14:d1:
ae:87:a6:79:5a:bc:6b:de:0f:00:7a:11:9c:75:55:
55:c2:bd:79:5d:e6:42:06:56:84:31:79:e7:35:cb:
98:9d:5e:d5:9a:3f:66:26:9c:d4:05:47:ee:12:1c:
2a:ff:23:7a:ca:66:e8:1a:95:79:a2:d5:84:d5:1d:
60:39:b0:55:71:1c:e4:c8:1f:f4:ac:aa:34:3f:2d:
74:51:f0:40:0b:3d:c7:3a:70:64:5c:3c:c9:17:1d:
d1:65:47:4e:ad:e4:2e:6a:9f:c6:c3:14:3c:3c:e4:
65:5b:4b:19:d0:3d:b4:b1:2b:22:0d:82:aa:0d:0e:
4c:eb:dc:2d:99:d3:7b:ac:8e:a8:dc:d2:cb:f3:5c:
4b:aa:25:03:04:f1:98:f4:b3:12:9e:e1:13:c1:7c:
9d:04:2f:27:13:88:65:84:d4:75:7a:b6:96:da:d1:
3e:0d:44:76:b7:8c:2e:b1:55:53:d8:74:92:d2:6c:
5c:06:b4:f0:a7:f7:c6:2f:8e:f3:50:87:66:f3:7b:
60:6c:f8:4d:3b:3b:1e:27:63:ac:0f:e0:14:83:d1:
80:e4:9f:b3:4d:9d:66:ac:75:7b:11:d1:4c:67:04:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:ED:99:89:7C:59:6F:FA:39:BB:2A:4B:C3:97:61:05:9C:67:5F
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:0e:bd:59:c0:6e:6b:5a:a7:92:cb:81:2e:c7:a3:e9:93:c4:
82:5c:5d:f7:b4:69:72:53:f1:92:31:39:87:22:72:1d:f5:ed:
a2:1f:73:db:9f:fd:bf:ff:e4:bc:76:9b:bf:5e:21:db:2e:c8:
51:01:d7:79:57:a1:cb:2d:1e:85:f3:bf:ec:9b:5b:c7:00:62:
27:53:af:28:23:9a:38:ab:bd:af:4c:d4:3f:f2:4c:6e:28:24:
5c:aa:30:1d:d5:70:0c:bf:75:84:06:e4:9c:42:83:e3:67:17:
2c:e4:09:31:03:11:d5:5d:2b:f5:27:e9:ae:1f:12:69:aa:08:
7f:7c:e2:96:ac:63:b4:2d:51:40:b1:78:01:12:51:f5:60:e5:
01:4f:44:23:d3:6c:7d:2e:f6:ad:1b:24:6a:3b:a5:ab:b8:84:
4e:ab:3c:d1:12:c8:fd:9b:0a:d5:6a:d0:84:8b:75:6d:7f:ef:
93:64:1d:00:b6:e2:fa:20:f2:63:39:97:f6:68:36:f2:94:77:
f7:46:5f:11:b8:0c:d8:a4:49:11:74:5f:0a:8d:f3:a3:e3:a5:
b3:00:10:ba:47:d3:f5:a6:d6:e3:d1:e3:46:c8:28:59:4d:d9:
cd:94:ff:64:8a:a7:a0:15:a7:5d:31:bf:88:fa:ca:90:fa:45:
fc:d7:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:43 2025 by rpki-client