![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa
File: 2AWm8e6y35wQ43hXkHwvL53AIrQ.roa (raw, json)
Hash identifier: uEM0HRLBE3cQcGTA+3JJyCykvvk+CSrJ7Gb2Cudgr0A=
Subject key identifier: D8:05:A6:F1:EE:B2:DF:9C:10:E3:78:57:90:7C:2F:2F:9D:C0:22:B4
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 01B1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa
Signing time: Sun 01 Oct 2023 01:36:38 +0000
ROA not before: Sun 01 Oct 2023 01:36:38 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 219.113.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:36:38 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=D805A6F1EEB2DF9C10E37857907C2F2F9DC022B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:65:66:cf:f0:a9:aa:a5:88:3b:97:5b:6e:
3b:d3:2e:1c:a3:fe:cd:ac:28:cd:54:20:6b:1d:ea:
85:7c:c7:5d:f2:ea:e9:50:03:d6:93:87:ae:52:10:
8f:94:0a:eb:30:56:05:9c:c8:3c:d5:6d:a5:f1:2e:
2d:04:99:51:40:87:f9:db:32:48:e1:5e:eb:34:17:
47:2a:b3:21:b4:a8:38:1b:c5:ed:8f:34:3c:32:c1:
92:af:59:6d:97:a7:66:2a:e3:80:a1:09:8d:9d:4b:
ba:07:7a:a3:39:f2:35:db:57:fa:84:d0:40:88:90:
e3:1c:56:8d:c6:db:d8:0a:14:ba:da:dc:a9:0b:d6:
f4:d4:1e:73:6c:12:2a:a5:46:f3:23:e0:de:43:01:
c7:f4:7b:83:85:29:bd:9c:3d:b5:4b:49:75:25:1c:
70:15:d4:44:71:f7:da:40:a3:ce:28:26:16:f4:6a:
20:c5:3b:d2:f4:85:a9:73:34:55:10:b7:61:ca:d4:
35:e8:cd:23:6a:90:ff:fd:af:d6:f3:6d:4d:7d:cb:
64:35:c6:25:58:1f:88:32:75:96:f6:7e:ae:75:e1:
71:61:e2:10:88:ae:76:10:3c:c0:3a:41:d3:4a:05:
bb:5a:15:e7:49:07:cd:e5:e3:13:21:3c:cf:7c:94:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:A6:F1:EE:B2:DF:9C:10:E3:78:57:90:7C:2F:2F:9D:C0:22:B4
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2AWm8e6y35wQ43hXkHwvL53AIrQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.113.96.0/20
Signature Algorithm: sha256WithRSAEncryption
96:35:93:da:06:ce:58:05:e5:88:b7:b9:90:33:7a:88:83:d0:
b0:d8:02:d3:24:ba:97:29:de:64:92:28:86:40:61:ba:5d:cb:
49:11:15:0c:b1:24:6c:d4:a0:0f:9a:cb:e8:f4:a5:5b:67:cc:
1c:af:48:37:6d:a8:6b:fd:85:2a:5e:e9:21:9f:c9:f2:1c:04:
79:0d:9d:a6:2d:3c:95:b7:07:1c:0b:74:26:80:aa:1b:77:a8:
3c:37:a5:7b:0c:3a:b2:e8:7c:95:da:e6:bc:50:00:68:85:83:
54:12:95:53:f7:d3:fe:4e:0c:2e:ac:6f:ee:d5:6c:07:c0:d5:
d7:6a:e8:05:7a:d2:c8:32:60:be:23:c0:04:5a:0b:e3:2d:ca:
b0:69:f2:98:78:de:5e:bb:a8:71:58:6a:8a:b2:00:84:6f:7c:
69:e5:3a:e3:d5:f7:23:08:71:82:43:7c:cb:9c:05:4b:23:9b:
02:b9:bd:51:a0:e4:71:9e:2d:c0:8d:15:b5:fc:43:a5:29:fc:
e6:26:96:19:52:43:2c:57:b6:b1:40:c1:15:01:ab:59:3b:c2:
69:fb:dd:c5:ba:aa:e4:cd:9e:81:15:dd:18:0a:13:36:f8:30:
51:c3:48:31:e9:97:ba:2d:a4:5d:f3:d2:68:16:4e:42:72:ef:
32:8d:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:19 2025 by rpki-client