![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/o-DlJRfzKr14BeKLrflp2elVUQY.roa
File: o-DlJRfzKr14BeKLrflp2elVUQY.roa (raw, json)
Hash identifier: MC4s/+WoQK/E+5ybn4XFTtt2epZRP4OS+H/a4I2VF+Y=
Subject key identifier: A3:E0:E5:25:17:F3:2A:BD:78:05:E2:8B:AD:F9:69:D9:E9:55:51:06
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: EF
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/o-DlJRfzKr14BeKLrflp2elVUQY.roa
Signing time: Fri 23 Jun 2023 04:42:09 +0000
ROA not before: Fri 23 Jun 2023 04:42:09 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 32787
IP address blocks: 210.148.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jun 23 04:42:09 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=A3E0E52517F32ABD7805E28BADF969D9E9555106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:78:83:9e:08:f0:3c:a3:8b:83:e1:db:c0:
de:ef:7e:de:f5:b4:48:a0:43:08:a7:05:f8:53:75:
b9:8b:0d:a4:af:82:ff:f7:a2:61:dd:cc:fa:80:63:
c5:56:e7:36:e9:b8:5a:70:57:d5:e5:ee:d8:e1:cc:
93:0c:7d:ec:16:47:ec:d5:99:67:90:b7:68:41:98:
b3:ad:3a:4d:fc:3e:47:8e:a3:97:f4:33:e5:9c:82:
79:26:29:ae:42:19:f9:c2:49:36:f7:a1:1e:db:7a:
db:2c:be:7c:8a:5c:87:09:9d:48:e7:17:c7:61:b9:
1f:71:cc:99:a8:a2:92:ae:ac:e4:90:a2:59:a5:c6:
80:f5:f7:01:e0:2a:43:33:99:5b:1b:32:bd:cf:a7:
6f:6f:b0:10:fd:8f:4d:39:92:d9:81:f8:3e:17:24:
98:be:f9:21:18:d8:6e:11:66:b9:fc:2b:43:7c:c0:
ef:d9:06:d8:c5:c6:8a:0f:14:1b:6d:e7:49:e1:91:
04:99:9e:37:43:7c:f3:2a:a7:b8:a1:88:e6:27:04:
f8:07:11:bb:cb:3f:78:b0:c7:62:88:cd:8d:b0:64:
2d:c1:b6:f9:65:e0:be:b6:e4:e5:5f:2e:3b:9b:08:
ba:91:7f:25:e8:ae:4b:07:41:f7:9b:66:ad:5f:89:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:E5:25:17:F3:2A:BD:78:05:E2:8B:AD:F9:69:D9:E9:55:51:06
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/o-DlJRfzKr14BeKLrflp2elVUQY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
31:43:df:81:a5:1f:80:8e:96:3d:0f:9b:9d:ab:b7:aa:84:67:
e4:b3:76:e9:99:b0:3d:3d:4d:0c:18:1b:1f:50:4f:79:ce:7f:
72:09:37:13:c4:3c:48:e8:35:b1:ef:a4:69:ed:9b:91:9f:2d:
51:6b:23:79:dd:61:d2:28:39:cf:24:a7:89:14:40:ac:56:fc:
1f:00:f7:e1:f4:7b:e6:47:f5:e7:23:0c:7e:72:b4:1e:37:e1:
ae:39:22:22:64:75:00:6a:93:54:a6:08:84:d5:10:f9:f1:e8:
e7:af:16:a5:92:14:89:24:67:9a:c3:34:46:54:fd:32:d6:3c:
95:ba:7e:4d:74:b9:10:7b:5e:e5:34:79:f6:f0:36:fa:bb:b8:
0e:11:c2:86:44:fe:0e:34:f0:75:f0:3b:e9:d7:f5:bd:8e:c3:
a3:4e:ea:ca:9f:3c:81:5a:bf:59:17:da:80:1e:73:84:a2:a8:
01:08:e7:1b:2e:fd:6c:9a:85:59:d3:57:d7:d1:1a:ee:b8:04:
03:62:36:7e:ba:81:99:e3:97:ff:71:f4:93:8b:af:58:c8:63:
91:a1:60:a3:c0:54:4b:21:18:f8:f8:b9:49:3d:57:87:e6:6c:
9e:9c:6b:5d:28:fc:75:88:8b:06:c0:75:91:f9:69:11:b4:d6:
c3:1f:e8:db
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA2MjMw
NDQyMDlaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEEzRTBFNTI1MTdGMzJB
QkQ3ODA1RTI4QkFERjk2OUQ5RTk1NTUxMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC913iDngjwPKOLg+HbwN7vft71tEigQwinBfhTdbmLDaSvgv/3
omHdzPqAY8VW5zbpuFpwV9Xl7tjhzJMMfewWR+zVmWeQt2hBmLOtOk38PkeOo5f0
M+WcgnkmKa5CGfnCSTb3oR7betssvnyKXIcJnUjnF8dhuR9xzJmoopKurOSQolml
xoD19wHgKkMzmVsbMr3Pp29vsBD9j005ktmB+D4XJJi++SEY2G4RZrn8K0N8wO/Z
BtjFxooPFBtt50nhkQSZnjdDfPMqp7ihiOYnBPgHEbvLP3iwx2KIzY2wZC3Btvll
4L625OVfLjubCLqRfyXorksHQfebZq1fiSi3AgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUo+DlJRfzKr14BeKLrflp2elVUQYwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvby1EbEpSZnpLcjE0QmVLTHJmbHAyZWxWVVFZLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANKUgzANBgkqhkiG9w0BAQsFAAOCAQEAMUPfgaUfgI6WPQ+bnau3qoRn5LN26Zmw
PT1NDBgbH1BPec5/cgk3E8Q8SOg1se+kae2bkZ8tUWsjed1h0ig5zySniRRArFb8
HwD34fR75kf15yMMfnK0HjfhrjkiImR1AGqTVKYIhNUQ+fHo568WpZIUiSRnmsM0
RlT9MtY8lbp+TXS5EHte5TR59vA2+ru4DhHChkT+DjTwdfA76df1vY7Do07qyp88
gVq/WRfagB5zhKKoAQjnGy79bJqFWdNX19Ea7rgEA2I2frqBmeOX/3H0k4uvWMhj
kaFgo8BUSyEY+Pi5ST1Xh+ZsnpxrXSj8dYiLBsB1kflpEbTWwx/o2w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:52 2025 by rpki-client