![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
File: kLZCNnVsACQa8e1b67Wf7eEsPjk.roa (raw, json)
Hash identifier: 9RwU4jpijYIdlrDTkLbewSIqLiN1m6SwZ0KYWUX6IRM=
Subject key identifier: 90:B6:42:36:75:6C:00:24:1A:F1:ED:5B:EB:B5:9F:ED:E1:2C:3E:39
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 03D4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
Signing time: Sun 01 May 2022 01:33:01 +0000
ROA not before: Sun 01 May 2022 01:33:01 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 10010
IP address blocks: 220.216.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 1 01:33:01 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=90B64236756C00241AF1ED5BEBB59FEDE12C3E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:11:70:0c:a2:3c:7a:3b:ea:71:5b:f6:ec:
5a:07:3f:c9:e0:2a:14:fb:ae:72:17:05:fd:39:bd:
a9:86:8b:31:28:c6:19:34:d5:d0:10:08:42:c7:44:
1d:eb:17:c9:d7:18:c9:8b:a1:5a:2c:01:a6:b8:3f:
de:89:ee:47:1e:50:92:9c:b6:d9:78:57:fa:20:b3:
24:30:2f:9d:3a:ce:36:94:c7:d8:d9:c9:40:8e:39:
ed:f2:77:0a:38:f2:e1:c2:71:36:d0:ba:ce:3f:d8:
cc:08:d0:37:0e:42:1f:ad:4e:19:a6:c3:74:68:73:
27:68:26:cd:4d:2f:59:56:2b:be:d5:a9:06:9d:bd:
50:11:74:36:dc:0b:cd:6e:8f:77:6a:bd:03:0d:6a:
c2:de:d9:02:6e:fb:b3:64:cf:7a:14:73:ed:4b:26:
0b:9e:97:c3:08:71:5d:3d:ea:48:fa:29:ba:f2:d3:
6d:d3:3c:2a:5c:3c:c5:4e:03:fd:ac:29:40:40:d2:
07:e9:8b:0d:b9:ff:a2:2c:66:84:fe:74:d1:83:21:
90:e2:cc:6c:2e:dd:2b:28:4a:34:66:28:93:04:2f:
b3:da:6f:db:14:04:17:c5:7d:1f:49:28:c9:c7:18:
79:82:c6:de:99:bf:96:36:8f:34:1c:3c:55:14:cd:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:42:36:75:6C:00:24:1A:F1:ED:5B:EB:B5:9F:ED:E1:2C:3E:39
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.216.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:1f:47:10:5f:f2:3a:7a:01:25:93:4d:a2:76:aa:03:c0:26:
dd:fd:af:1b:d9:73:38:79:3e:7a:93:84:ce:aa:98:6e:e7:39:
c3:e8:01:73:3d:b8:10:67:34:11:ab:0d:00:2e:90:ae:6d:b9:
74:17:eb:a5:b2:1a:97:cd:f4:b2:00:37:a7:7e:47:74:a6:69:
d6:29:b2:71:ba:d2:ef:9a:2b:f8:1f:69:06:a4:75:df:63:92:
86:e4:41:a0:85:2c:44:ca:1c:d2:68:73:33:c9:64:6c:e8:a2:
04:89:1c:64:6a:41:6e:47:b4:29:ed:24:61:5a:b7:7b:96:ed:
97:3c:a1:77:ce:6e:f6:0f:63:f5:f8:3e:3d:bf:4b:e8:56:71:
b6:6a:21:70:d2:7c:7d:05:e9:06:d4:5c:02:6a:b1:01:ab:cc:
27:aa:e6:62:53:ef:f8:e8:85:e5:25:b7:17:41:d0:3d:01:8b:
f5:8b:6e:7e:44:11:89:e2:79:e3:57:73:26:59:d8:2b:14:3d:
40:c2:dc:c2:b0:40:b8:5f:74:c2:8f:e2:c3:6b:0c:9b:32:42:
e4:9f:2f:8f:17:0b:cd:e0:5a:54:b3:45:a3:98:5c:b5:7b:5d:
b9:50:20:4a:b2:12:a7:ce:1d:34:ef:d9:96:88:ad:13:49:1e:
6a:b0:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:52 2025 by rpki-client