![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa
File: gRO1EbFR2A0b6x42zNqQBXIVvW4.roa (raw, json)
Hash identifier: l/j1gon93w2lPu186YqSzT0NOUGyGOG9cGSg2TrAqH0=
Subject key identifier: 81:13:B5:11:B1:51:D8:0D:1B:EB:1E:36:CC:DA:90:05:72:15:BD:6E
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0118
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa
Signing time: Fri 01 Sep 2023 01:31:38 +0000
ROA not before: Fri 01 Sep 2023 01:31:38 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 219.111.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Sep 1 01:31:38 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=8113B511B151D80D1BEB1E36CCDA90057215BD6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:b9:0d:4c:52:ae:61:2e:01:84:aa:bb:c0:
5a:e8:28:e7:e3:27:c4:99:00:70:25:29:df:fa:6b:
5a:c4:6b:e1:94:cd:c2:ad:9d:3a:2b:1c:4c:0e:f6:
f1:c0:85:eb:cf:cb:73:51:11:29:b3:bc:27:b2:ab:
ec:5a:77:9e:5e:f0:3a:8d:e8:32:83:e1:5e:e0:11:
eb:63:f6:18:b6:3d:63:41:ef:a0:c1:39:5c:6c:0a:
c0:c2:60:9e:92:d5:9b:b6:8c:1b:17:b3:21:99:bb:
bf:09:ea:d5:fb:c3:5b:ec:17:29:88:1b:b5:3b:ea:
d1:54:c0:7f:e9:f0:da:47:2c:65:93:38:5a:e6:87:
e1:d2:4b:e8:3d:32:75:ab:c4:bd:8a:ba:64:4a:b8:
b8:cf:02:ef:89:3d:61:59:44:40:a9:1a:38:ae:d0:
ab:b3:16:b2:22:f8:1f:57:bd:3c:d2:f0:f3:e3:d7:
57:d3:91:7f:68:45:80:c6:c4:f6:8a:b4:25:c0:4d:
32:3e:1d:ff:a6:8d:9c:81:e1:e6:3f:f1:80:1b:96:
73:96:61:5d:86:db:e9:71:97:28:2c:f5:cf:f8:8a:
e1:32:e3:36:5f:11:b8:50:a7:11:08:b2:25:c3:19:
71:30:43:45:85:c7:61:aa:a2:f5:46:b6:4a:55:28:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:B5:11:B1:51:D8:0D:1B:EB:1E:36:CC:DA:90:05:72:15:BD:6E
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gRO1EbFR2A0b6x42zNqQBXIVvW4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.111.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2f:30:d9:1d:f5:98:cb:41:79:d0:b2:6b:56:18:0f:2d:7b:55:
77:86:98:78:a6:15:6c:47:6e:25:a7:37:4a:9c:12:b2:fd:57:
29:0f:38:19:06:c2:73:ef:6b:a1:22:5b:7b:df:b5:b4:aa:75:
23:af:14:d7:70:14:9f:5c:72:ee:cd:b0:18:6b:7f:f3:54:37:
21:c4:b3:66:d8:41:a7:7f:aa:31:64:b7:6b:48:e7:6a:3c:32:
94:88:26:7f:32:f6:0c:68:67:14:a7:b0:64:a1:59:df:64:02:
59:bc:3e:28:ef:eb:dd:76:57:1b:5f:63:ff:93:f0:13:37:ff:
b7:37:4e:f0:a9:98:6b:4e:61:22:97:23:57:1d:e7:7c:84:78:
65:c2:58:4a:bb:fa:c0:70:1b:28:be:ca:31:f8:fa:b4:66:82:
ee:7d:2d:cf:90:80:9c:c6:4d:b3:59:3d:57:d1:44:b7:44:17:
9f:a2:b9:eb:37:36:c4:64:20:2d:b4:67:23:e3:f2:5e:ea:8e:
f8:e0:ad:1d:32:fc:a7:0c:27:ca:7e:2d:d3:b0:0f:6a:cc:be:
74:52:44:38:7b:d7:89:ad:a5:1e:5a:ab:23:63:17:12:98:e4:
dd:ef:f6:e1:d4:00:e8:01:04:20:b8:52:ca:ab:90:21:a7:f4:
1d:03:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:21 2025 by rpki-client