![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
File: KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa (raw, json)
Hash identifier: 9JHwBLRaa02xbGGILbbdiDOpB8OYt93L5iwzbaEhkFU=
Subject key identifier: 28:93:49:7C:C5:3C:C3:45:28:5D:5B:34:A3:F6:02:61:D2:EC:88:56
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 010F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
Signing time: Fri 01 Sep 2023 01:31:34 +0000
ROA not before: Fri 01 Sep 2023 01:31:34 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 218.228.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:31:34 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=2893497CC53CC345285D5B34A3F60261D2EC8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:43:d0:3e:10:eb:c9:46:b3:a3:c2:0a:e6:
cd:b0:bc:25:b7:72:d2:93:80:7b:36:a8:04:a5:5e:
24:de:45:9b:b1:34:fb:0f:5d:81:7b:27:fb:9c:0d:
93:30:00:64:f6:a6:33:42:33:44:7c:cd:c9:76:83:
b8:a6:38:22:9f:d5:18:de:75:34:d2:54:c9:96:d3:
ae:bb:c6:22:0c:20:5c:27:87:43:f3:a9:ce:40:72:
38:f9:10:cc:9f:b0:42:86:4b:12:1f:d8:ed:49:8f:
58:52:68:bf:dc:b5:1f:7d:8d:b7:f9:f0:e9:06:2f:
dd:65:03:76:1a:4a:ee:72:a7:cb:d5:83:df:10:38:
9c:82:ec:39:a0:97:86:4b:33:60:c7:82:95:b0:ef:
78:f0:86:6f:12:a0:1d:63:85:f2:6e:82:e1:98:d6:
a3:14:3c:ec:e4:f2:9d:bc:70:68:fc:2f:04:ca:3a:
5f:44:db:c0:ed:35:28:7e:ca:7e:da:e3:e6:52:32:
46:98:95:6f:4d:04:a2:9f:bb:68:6b:80:6f:61:76:
ad:ad:ed:12:1d:c5:56:8e:97:5d:be:86:f6:1e:52:
69:cb:b9:36:8f:75:f7:f6:82:33:4f:6e:ae:52:62:
54:58:8c:bc:d8:e9:44:77:3e:a3:43:c5:93:cc:fe:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:93:49:7C:C5:3C:C3:45:28:5D:5B:34:A3:F6:02:61:D2:EC:88:56
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KJNJfMU8w0UoXVs0o_YCYdLsiFY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.228.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:15:fa:00:d9:15:8b:74:c3:d7:b5:22:8b:fd:eb:6b:fe:83:
69:87:8c:99:af:51:92:8a:27:59:8f:f8:ed:c7:f9:58:31:2b:
9c:80:64:83:34:13:5d:73:84:65:d0:29:24:2f:0f:fd:65:00:
12:04:97:65:fc:a3:c8:b8:c1:a9:ff:e9:91:8d:88:4d:3b:04:
34:60:1a:d8:b8:8a:62:44:7c:b1:02:2f:9c:22:a3:eb:df:5f:
6e:6a:b3:0b:e0:b8:ee:78:0f:a5:0b:a7:e8:a0:96:ba:e2:03:
c9:32:72:eb:d3:2a:62:a4:ca:74:5f:1f:e3:f2:2e:37:e5:ed:
46:4a:47:fa:ec:45:41:eb:a7:88:71:96:c4:e7:7f:ac:98:90:
de:ab:8a:48:01:23:9b:b2:8d:d7:74:ff:7b:bf:9f:d7:26:a8:
68:26:16:40:3c:57:45:84:9c:fa:43:a2:95:04:19:14:41:f2:
25:a0:5d:2f:26:39:5c:76:95:ee:82:43:32:ba:5c:66:72:d5:
1e:66:30:12:f2:67:ab:a3:ac:4e:33:f3:48:2b:15:2f:e9:70:
c9:36:51:5b:c4:e1:14:4f:22:2e:fb:62:91:64:01:6e:ff:f6:
2b:02:6a:a0:a0:6a:4c:cf:90:ba:65:22:f6:08:e4:2a:48:f6:
e9:81:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:35 2025 by rpki-client