![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/p1BP8tnX2_ctJLn0Ja9MaQWTez0.roa
File: p1BP8tnX2_ctJLn0Ja9MaQWTez0.roa (raw, json)
Hash identifier: McobpiVb4VOejttQp/wj2UkO2lgpztZKFVmkPnTonB8=
Subject key identifier: A7:50:4F:F2:D9:D7:DB:F7:2D:24:B9:F4:25:AF:4C:69:05:93:7B:3D
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 23
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/p1BP8tnX2_ctJLn0Ja9MaQWTez0.roa
Signing time: Sat 01 Jan 2022 01:31:55 +0000
ROA not before: Sat 01 Jan 2022 01:31:55 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 131896
IP address blocks: 103.198.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Jan 1 01:31:55 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=A7504FF2D9D7DBF72D24B9F425AF4C6905937B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:7c:38:51:c2:1e:57:92:09:a0:60:5b:d2:
d4:18:f9:d9:0d:56:b9:16:02:ab:35:55:39:23:44:
3c:f3:f6:d0:f2:8d:7f:23:8a:7f:99:44:6d:9e:26:
20:f4:41:30:12:e4:ab:72:b2:6e:9d:72:b8:92:a0:
76:3e:64:46:5b:d9:0a:4b:c2:63:07:ea:f1:d5:40:
db:64:e2:67:00:1e:5d:7c:6a:af:29:d3:5e:01:11:
64:ba:b6:75:8c:10:ac:21:39:bb:db:f3:b2:aa:bf:
40:7f:71:7c:cf:84:d2:ce:75:4b:08:c2:36:9b:3e:
4b:7b:e5:26:d6:0c:89:9e:69:23:2e:0e:e4:34:a3:
65:65:32:bc:4f:e8:10:79:e7:3c:53:70:8a:9c:db:
c5:06:c0:16:99:84:a9:14:86:d9:c9:cd:28:85:f1:
1c:eb:c0:6b:e2:b2:a9:02:2f:b4:7e:e9:9c:a6:08:
d7:43:d8:a1:cb:f8:47:22:ff:f1:24:0a:88:52:8c:
e5:7c:4d:4b:93:0d:82:b2:a7:72:b2:7f:49:df:fb:
42:49:fc:ff:9f:0f:ac:fb:c6:61:a1:79:70:a0:46:
47:ec:cc:ce:7f:94:42:b3:f1:b6:81:b9:c7:7d:a3:
e6:d9:55:fa:81:e1:f5:82:25:a7:1b:a1:8d:eb:5c:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:50:4F:F2:D9:D7:DB:F7:2D:24:B9:F4:25:AF:4C:69:05:93:7B:3D
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/p1BP8tnX2_ctJLn0Ja9MaQWTez0.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.111.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a1:52:41:a8:2c:d2:67:95:89:99:47:34:59:68:89:e6:5a:
0d:ad:40:18:12:d8:1c:82:df:94:da:57:f2:46:34:ca:eb:e3:
3b:88:59:d2:a4:38:5c:17:6a:f8:f8:2d:65:72:95:55:2e:44:
52:da:da:58:5c:4b:aa:4d:8e:24:1e:c7:71:68:e7:88:35:7a:
ef:85:ee:f6:62:e4:93:f2:00:1f:24:98:62:d7:c7:01:8b:39:
3e:fb:2c:8f:e9:4b:fc:22:3f:9a:13:61:f9:84:85:19:0a:9d:
8e:88:f0:41:b0:30:2e:0f:20:4b:00:ae:ce:3d:b1:79:2e:e7:
a7:db:70:b5:81:8c:83:e7:cb:cb:bc:0d:b0:2a:85:a8:d2:86:
60:12:2e:ff:53:b9:19:9e:3d:1f:9c:cf:18:a2:d5:50:e6:b6:
66:b3:cb:a2:ba:04:ac:38:ba:cd:46:63:f3:fc:99:f4:21:a2:
ef:3e:ce:87:7b:7a:64:6c:87:85:7d:3b:2c:78:b3:68:8f:0b:
24:11:9f:9f:97:01:34:0a:74:1d:85:43:04:53:3a:2e:44:6f:
38:2e:aa:d3:9a:13:f5:d2:e4:2b:13:c7:07:18:46:53:ad:fa:
16:75:94:27:70:64:5a:3b:8e:55:0c:2b:1c:1a:0d:93:1b:13:
8b:c1:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:06 2025 by rpki-client