![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa
File: QFurrkJMiqyu4AZ6naGBTo7JYZU.roa (raw, json)
Hash identifier: s7Ck7xstQzcVlkYr1oUKJmbeSng+pHsrZ+3c8iA8Qjg=
Subject key identifier: 40:5B:AB:AE:42:4C:8A:AC:AE:E0:06:7A:9D:A1:81:4E:8E:C9:61:95
Certificate issuer: /CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
Certificate serial: 02
Authority key identifier: 81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa
Signing time: Thu 02 Nov 2023 09:45:02 +0000
ROA not before: Thu 02 Nov 2023 09:45:02 +0000
ROA not after: Fri 01 Nov 2024 09:38:09 +0000
asID: 63806
IP address blocks: 43.228.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
Validity
Not Before: Nov 2 09:45:02 2023 GMT
Not After : Nov 1 09:38:09 2024 GMT
Subject: CN=405BABAE424C8AACAEE0067A9DA1814E8EC96195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:69:57:7b:47:e4:cd:ce:b8:00:04:71:f8:
8d:9e:a1:ab:0a:f7:96:60:5c:e7:d1:fc:ef:b1:40:
a6:22:59:a9:27:e2:2e:dc:81:0d:4d:44:00:c2:db:
49:1a:90:1d:39:28:01:71:28:3f:79:b6:5d:62:d1:
8f:09:28:fa:74:21:94:cf:b8:73:8e:fc:79:1f:1d:
32:07:92:4f:56:c5:7e:25:34:82:4a:1d:03:83:b5:
e7:59:71:57:0b:d7:ee:c3:f0:a0:b1:09:11:45:ac:
2c:8d:41:df:78:cd:21:56:87:75:d7:be:e3:a9:d6:
ff:02:62:e2:e3:16:0a:5b:ed:cf:9e:42:31:34:b4:
e5:27:a7:1b:77:0e:18:42:99:c7:56:b0:58:cb:ba:
41:fe:6f:d6:e1:77:2b:92:11:d5:b9:b8:43:f7:b3:
9b:6c:9c:fe:c5:62:84:91:da:10:39:4d:ab:9c:47:
2c:88:b4:f9:0c:be:1c:56:0d:80:7e:a0:e5:03:78:
9d:2a:82:f7:7f:0a:f0:88:80:10:f1:25:fd:63:08:
32:a6:f7:ae:8f:67:1a:90:81:eb:5f:5a:85:e9:79:
7f:e7:ce:be:62:40:41:86:c3:89:73:55:07:2e:a3:
c0:f5:e1:e4:00:69:b8:bd:5a:e6:a1:85:6a:02:b8:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:AB:AE:42:4C:8A:AC:AE:E0:06:7A:9D:A1:81:4E:8E:C9:61:95
X509v3 Authority Key Identifier:
keyid:81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:28:5c:c6:33:62:f5:42:3e:6e:3d:81:af:3d:be:dd:56:cf:
09:49:ae:51:79:3e:70:15:13:39:10:b7:8c:db:46:44:ee:2e:
a2:aa:6b:0d:f7:17:74:ba:66:81:3f:07:78:e3:4e:e7:48:e5:
f5:2a:10:60:6e:94:f3:9d:c0:70:f6:b0:4a:29:c8:7b:1c:91:
ab:75:78:61:a3:a9:c6:ca:00:23:ff:99:92:14:d2:0d:00:5d:
69:9f:6e:5d:1d:7e:9e:e6:78:d4:23:3a:7d:b4:f0:23:8a:d9:
d7:4e:00:9e:35:41:8d:f7:06:82:2b:7a:b9:2a:7b:01:a7:f8:
94:b3:24:13:24:89:4f:12:2d:c3:77:6e:3c:62:93:88:f6:d0:
0f:0a:03:8e:ef:e8:0b:89:d4:7f:f3:f0:74:2e:e5:24:74:95:
66:ec:3d:d3:1a:6b:f9:29:18:f7:31:0d:26:7e:cd:06:fc:11:
7d:d8:33:54:80:07:52:aa:5a:4c:0e:6b:eb:2d:b5:8b:e1:69:
0f:15:37:b5:a8:49:c6:05:b8:bb:7e:5b:df:54:3d:39:20:95:
9c:30:d6:b7:75:ff:9e:f2:5d:ea:77:aa:70:e6:4a:ce:63:1f:
e3:96:ca:bd:03:e4:1a:63:11:f0:f0:d0:a0:be:61:d2:46:ac:
8a:40:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:37 2025 by rpki-client