![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
File: zFVrX6zgM-DdH9eAule4N4nbA_g.roa (raw, json)
Hash identifier: J3rxo2AdC2eVSB3sCRWZQCGxyiKDYLPnZ+2E7A73IR0=
Subject key identifier: CC:55:6B:5F:AC:E0:33:E0:DD:1F:D7:80:BA:57:B8:37:89:DB:03:F8
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0404
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
Signing time: Thu 13 Apr 2023 09:52:14 +0000
ROA not before: Thu 13 Apr 2023 09:52:14 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 27.98.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:52:14 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=CC556B5FACE033E0DD1FD780BA57B83789DB03F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:44:27:80:c2:3e:34:3b:cf:dd:52:8e:4b:
89:2f:ba:4e:56:6b:fb:da:46:99:87:2e:9b:e1:5a:
ae:c6:75:22:75:b4:cc:1b:d9:a2:43:c3:62:35:d0:
ab:af:e8:a8:65:f6:56:b7:fc:30:d4:e5:d3:b4:a4:
f8:7b:9f:99:6d:d5:50:d1:7e:5c:29:d8:56:e0:4c:
ad:3e:7c:29:4f:c9:dd:0c:59:39:87:cb:1e:57:7d:
87:b8:19:12:8e:96:9c:db:05:24:ae:9a:e6:a5:91:
e5:77:91:ad:3d:4f:e7:43:b3:71:25:85:af:13:11:
71:1e:a5:46:87:53:72:78:71:6c:53:20:6a:76:b0:
47:d4:bc:b8:72:83:23:64:f7:a7:28:d3:0f:15:d2:
1a:c1:b6:35:cf:aa:8d:9a:cd:b8:4f:35:02:d8:80:
7f:a8:1a:c0:6b:47:f6:6c:74:a3:10:61:66:83:73:
8d:d2:22:18:4b:93:f2:f2:b2:04:9c:11:2f:b4:09:
ad:d6:cf:0a:4c:11:96:4d:51:04:74:73:11:f9:ee:
c7:ad:29:2a:45:14:72:c0:db:01:6b:47:e7:2b:1c:
a6:98:a5:6f:40:af:a1:55:cb:a1:dc:7c:be:46:2c:
35:2d:e1:b7:c7:ec:52:4f:af:2d:f7:15:00:9e:e3:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:6B:5F:AC:E0:33:E0:DD:1F:D7:80:BA:57:B8:37:89:DB:03:F8
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.98.128.0/18
Signature Algorithm: sha256WithRSAEncryption
70:2d:8e:1d:2f:d9:a9:42:19:f7:75:e0:6d:3e:35:03:1b:65:
be:3b:e1:6f:89:d2:67:14:ba:0d:d5:6e:d5:8e:3d:c6:ae:21:
a9:48:9e:a9:35:90:e9:a8:50:cb:a0:9a:0f:d9:f1:ef:64:9a:
36:d6:55:32:1a:ba:f0:36:23:b6:db:ef:e0:b8:3c:92:41:ee:
ee:bf:85:23:67:cf:b2:f7:35:71:fa:85:8a:a7:ab:91:f4:85:
bc:77:9e:b7:41:39:19:53:3b:53:e9:43:97:2f:3a:8a:c6:97:
ac:0a:33:36:d1:5b:b2:05:d0:1c:3c:29:1d:4e:75:0b:eb:47:
57:b4:b1:e2:71:b4:ca:b4:4d:db:cd:01:cb:c5:f5:96:64:87:
a1:cb:9a:9c:b5:cd:3f:5b:5e:a7:1a:f9:45:03:7e:31:fc:84:
c2:6e:4a:9c:ca:15:a6:dd:dd:12:1a:9f:f8:20:cf:98:b5:dd:
d9:39:16:1b:34:93:5e:1f:1c:65:3c:bb:db:e6:9c:30:f7:f3:
cc:51:9d:d5:f2:00:9a:f0:90:1c:4d:a8:1e:b9:a4:09:b5:42:
d4:e8:ef:ee:b9:d5:7c:04:52:ea:11:9a:17:fe:03:c2:18:1b:
26:0d:02:f0:a6:08:b9:21:0f:be:0c:5b:d9:97:51:59:88:f4:
b3:67:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:17 2025 by rpki-client