![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa
File: YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa (raw, json)
Hash identifier: 4N8R7SKiS4FwVnnJ4j8EFxM07+9eafGVdfqIi/nY0wk=
Subject key identifier: 60:F7:93:A7:5B:CE:E8:B9:1D:BA:3E:BA:CD:09:69:6D:66:50:4D:0E
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 5D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa
Signing time: Mon 01 Nov 2021 01:28:32 +0000
ROA not before: Mon 01 Nov 2021 01:28:32 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 220.208.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:32 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=60F793A75BCEE8B91DBA3EBACD09696D66504D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:f9:50:b1:0d:e0:0e:72:1a:82:2e:6b:7c:
38:fe:f1:08:b9:71:8b:5b:75:6f:c7:56:1d:57:36:
3b:ef:d2:c2:ac:7d:e1:a4:6b:db:af:cf:16:8c:a7:
5c:1c:aa:17:6e:73:33:53:4d:90:c9:f6:14:d3:2a:
16:0e:30:97:08:69:47:f4:8d:25:c9:83:9d:e5:a6:
54:a5:60:a1:2b:99:25:74:3c:4f:95:c0:0d:ed:92:
cf:1b:58:09:40:09:0b:b4:40:09:08:31:bf:cd:ea:
a2:8a:bf:72:3d:23:ad:a2:d0:0e:9f:29:4e:0e:f1:
48:b5:a9:4a:b9:bf:7b:cb:b7:1c:f4:b6:ca:72:4e:
8e:29:e7:77:fc:1e:4e:ff:60:b6:81:f8:49:78:36:
f8:98:e1:7c:e9:43:3a:09:4e:b3:bc:94:28:63:5a:
b6:d2:f2:0a:da:b8:84:88:db:c7:06:d6:13:d1:7a:
c6:e5:78:a7:ce:16:fa:71:7d:6d:ea:0f:c4:b5:23:
6c:36:c0:dd:2a:85:42:02:b9:db:be:71:55:67:a9:
22:52:c8:4e:4d:43:52:f7:ba:1f:16:28:d7:80:b3:
97:ee:67:67:59:96:b5:26:97:e5:d5:d2:88:17:df:
a5:a8:1f:f9:5c:a5:90:5a:f9:e4:0e:af:bc:85:4a:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:93:A7:5B:CE:E8:B9:1D:BA:3E:BA:CD:09:69:6D:66:50:4D:0E
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/YPeTp1vO6Lkduj66zQlpbWZQTQ4.roa
sbgp-ipAddrBlock: critical
IPv4:
220.208.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:96:d4:d2:68:22:49:7c:51:b4:69:e9:fc:d4:00:83:51:af:
9e:b7:ea:b1:a9:be:c6:0f:e7:7f:5d:e7:98:62:96:0f:d8:d8:
66:3d:6d:72:75:2c:d9:ab:14:fe:8a:96:52:2f:62:77:8c:7e:
98:4d:e7:77:83:a4:33:07:44:95:65:78:bf:90:a9:f7:4b:01:
5c:2b:c3:63:9b:e8:da:99:23:5d:a5:2f:40:c9:e4:51:fd:c5:
dd:fa:ae:bd:91:d0:ce:d4:2c:84:13:4c:c7:a8:65:9d:22:8c:
44:59:76:e8:f8:9d:50:70:f6:d6:bd:12:a3:39:ca:76:fb:06:
95:81:8c:61:62:45:f8:9d:38:d1:58:21:77:3e:c3:ef:82:28:
a8:c7:8a:dc:49:12:0c:46:24:3c:15:3c:98:1a:53:39:40:ec:
42:c9:a8:04:55:f9:c7:12:3a:b7:d7:a2:29:ea:a5:23:c7:30:
ae:2e:16:73:c1:01:23:29:de:e7:c8:4c:59:c4:ff:53:f3:a1:
8b:fd:a8:51:95:92:30:2d:ee:64:dc:1b:b2:cb:ff:66:76:03:
b5:00:02:9b:84:62:e8:e4:3b:74:bc:c6:6e:64:b9:15:b9:b1:
df:3b:a3:03:d2:ef:06:01:ba:46:60:eb:1f:95:73:61:28:22:
ad:e3:3e:d4
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzMloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNjBGNzkzQTc1QkNFRThC
OTFEQkEzRUJBQ0QwOTY5NkQ2NjUwNEQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3r+VCxDeAOchqCLmt8OP7xCLlxi1t1b8dWHVc2O+/Swqx94aRr
26/PFoynXByqF25zM1NNkMn2FNMqFg4wlwhpR/SNJcmDneWmVKVgoSuZJXQ8T5XA
De2SzxtYCUAJC7RACQgxv83qooq/cj0jraLQDp8pTg7xSLWpSrm/e8u3HPS2ynJO
jinnd/weTv9gtoH4SXg2+JjhfOlDOglOs7yUKGNattLyCtq4hIjbxwbWE9F6xuV4
p84W+nF9beoPxLUjbDbA3SqFQgK5275xVWepIlLITk1DUve6HxYo14Czl+5nZ1mW
tSaX5dXSiBffpagf+VylkFr55A6vvIVKly8CAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBRg95OnW87ouR26PrrNCWltZlBNDjAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9ZUGVUcDF2TzZMa2R1ajY2elFscGJXWlFUUTQucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQF3NDAMA0GCSqGSIb3DQEBCwUAA4IBAQA9ltTS
aCJJfFG0aen81ACDUa+et+qxqb7GD+d/XeeYYpYP2NhmPW1ydSzZqxT+ipZSL2J3
jH6YTed3g6QzB0SVZXi/kKn3SwFcK8Njm+jamSNdpS9AyeRR/cXd+q69kdDO1CyE
E0zHqGWdIoxEWXbo+J1QcPbWvRKjOcp2+waVgYxhYkX4nTjRWCF3PsPvgiiox4rc
SRIMRiQ8FTyYGlM5QOxCyagEVfnHEjq316Ip6qUjxzCuLhZzwQEjKd7nyExZxP9T
86GL/ahRlZIwLe5k3Buyy/9mdgO1AAKbhGLo5Dt0vMZuZLkVubHfO6MD0u8GAbpG
YOsflXNhKCKt4z7U
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:21 2025 by rpki-client