![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
File: ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa (raw, json)
Hash identifier: Mihj9vHrRGvs5+hukzoWF7V0SHk+vnkYvKriy+7g/ug=
Subject key identifier: 64:A8:9C:28:EB:FA:71:41:50:C8:AD:99:A9:3A:49:7C:3B:61:1B:2D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: A2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
Signing time: Sat 01 Oct 2022 01:29:14 +0000
ROA not before: Sat 01 Oct 2022 01:29:14 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 124.41.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Oct 1 01:29:14 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=64A89C28EBFA714150C8AD99A93A497C3B611B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:74:51:b6:f2:cc:c1:66:75:d3:39:6d:6d:
98:94:85:b9:3e:28:1a:f5:98:95:a5:6c:07:d7:47:
34:e6:12:a8:32:f4:cf:4b:02:e8:d9:ef:99:7b:5e:
b2:3e:82:c6:4d:0f:65:b6:24:2f:fa:38:c6:a7:b7:
1c:ca:a3:8c:e8:0b:77:fc:ea:ed:57:ac:ee:ba:79:
df:fe:dc:79:59:03:88:0b:43:7e:cc:26:ca:d0:b5:
12:3d:d1:59:8c:8b:81:25:e2:3e:3e:32:38:4c:bd:
2b:74:d5:41:91:34:4e:68:5f:2c:f6:a5:1b:72:fa:
09:2a:ec:44:fe:b6:39:c3:4d:51:56:21:f7:a6:06:
2c:95:d4:f8:9a:07:10:01:28:a2:e7:77:94:48:e6:
c3:80:59:e9:fa:47:2f:9b:49:2f:fb:61:5a:8d:b1:
84:9b:b2:ac:bf:ff:8f:7f:c8:1e:81:03:58:f1:0d:
59:14:b0:d6:04:91:6a:06:b3:f8:24:cf:97:63:53:
4a:02:17:22:22:ce:fa:43:2a:e8:d6:e1:2c:79:1c:
de:db:dc:73:65:e1:9f:93:98:c7:8b:66:8c:c7:95:
bb:9c:16:0a:6c:b9:4f:38:36:48:28:81:11:2d:35:
a1:89:5d:4d:bd:4a:5c:0d:51:21:eb:d9:35:92:92:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:9C:28:EB:FA:71:41:50:C8:AD:99:A9:3A:49:7C:3B:61:1B:2D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZKicKOv6cUFQyK2ZqTpJfDthGy0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.41.0.0/17
Signature Algorithm: sha256WithRSAEncryption
64:f4:d2:93:fc:dc:91:ae:d1:f8:d4:2d:99:98:31:97:54:b7:
2a:ea:80:05:f1:4f:11:06:fa:5b:60:4b:4c:be:3b:6c:7c:ec:
8c:5b:97:b0:8a:d3:c1:a2:d0:aa:cb:02:2f:a8:8a:95:26:bd:
6a:be:e1:86:73:0f:6e:6b:08:95:c7:d0:58:d6:f5:ed:f3:91:
f2:8a:81:a1:d3:12:f4:6f:a2:95:22:09:89:93:1f:56:7c:8e:
3c:b2:48:fd:c4:51:a6:f0:d5:df:1b:99:b9:5a:f3:1a:aa:a8:
c4:42:ed:cd:a8:14:79:02:7e:71:ec:e2:99:c2:18:65:a9:54:
15:4f:ff:14:21:7d:1b:02:1b:69:f4:f6:0a:28:f3:c3:4e:a4:
95:04:4f:52:0a:44:4f:c1:b9:c4:ad:9b:d0:86:a6:d1:a2:6a:
41:2a:60:d3:bb:d2:fe:50:79:56:d6:7f:48:35:24:31:85:d2:
d1:5f:7a:bb:3c:92:d5:e2:85:d6:b0:84:9d:8b:c8:2c:21:21:
5d:c7:6f:9a:57:f4:35:5d:f4:fd:4c:f4:9b:13:31:2c:0a:aa:
10:67:28:2a:1a:27:b4:54:96:a6:b0:b6:f0:83:a6:92:de:57:
e0:0f:d7:9a:98:36:fc:42:c3:68:2c:9b:cf:88:4b:b2:ec:d8:
54:07:58:ef
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMjEwMDEw
MTI5MTRaFw0yMzA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0QTg5QzI4RUJGQTcx
NDE1MEM4QUQ5OUE5M0E0OTdDM0I2MTFCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX03RRtvLMwWZ10zltbZiUhbk+KBr1mJWlbAfXRzTmEqgy9M9L
AujZ75l7XrI+gsZND2W2JC/6OMantxzKo4zoC3f86u1XrO66ed/+3HlZA4gLQ37M
JsrQtRI90VmMi4El4j4+MjhMvSt01UGRNE5oXyz2pRty+gkq7ET+tjnDTVFWIfem
BiyV1PiaBxABKKLnd5RI5sOAWen6Ry+bSS/7YVqNsYSbsqy//49/yB6BA1jxDVkU
sNYEkWoGs/gkz5djU0oCFyIizvpDKujW4Sx5HN7b3HNl4Z+TmMeLZozHlbucFgps
uU84NkgogREtNaGJXU29SlwNUSHr2TWSkqTVAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUZKicKOv6cUFQyK2ZqTpJfDthGy0wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvWktpY0tPdjZjVUZReUsyWnFUcEpmRHRoR3kwLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B3wpADANBgkqhkiG9w0BAQsFAAOCAQEAZPTSk/zcka7R+NQtmZgxl1S3KuqABfFP
EQb6W2BLTL47bHzsjFuXsIrTwaLQqssCL6iKlSa9ar7hhnMPbmsIlcfQWNb17fOR
8oqBodMS9G+ilSIJiZMfVnyOPLJI/cRRpvDV3xuZuVrzGqqoxELtzagUeQJ+cezi
mcIYZalUFU//FCF9GwIbafT2Cijzw06klQRPUgpET8G5xK2b0Iam0aJqQSpg07vS
/lB5VtZ/SDUkMYXS0V96uzyS1eKF1rCEnYvILCEhXcdvmlf0NV30/Uz0mxMxLAqq
EGcoKhontFSWprC28IOmkt5X4A/Xmpg2/ELDaCybz4hLsuzYVAdY7w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:48 2025 by rpki-client