![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
File: CJR2CGK0jGc5iCybs96C6NmOZ2I.roa (raw, json)
Hash identifier: eR75aQ4XDkE5rN3ymW8SxyiNquJgtOddEnSCYImY75w=
Subject key identifier: 08:94:76:08:62:B4:8C:67:39:88:2C:9B:B3:DE:82:E8:D9:8E:67:62
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 36
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
Signing time: Mon 17 Oct 2022 01:13:28 +0000
ROA not before: Mon 17 Oct 2022 01:13:28 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 7686
IP address blocks: 61.211.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 17 01:13:28 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=0894760862B48C6739882C9BB3DE82E8D98E6762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:3b:0a:d1:f1:6a:0c:ef:27:13:0f:52:80:
71:b1:4e:8c:7c:b7:46:b2:46:5b:c1:6c:65:8d:6a:
b6:da:fc:1b:a9:ea:73:14:35:38:5b:c6:60:97:a8:
d3:70:e5:a2:5d:1a:84:16:c8:9f:25:4a:35:b3:56:
c8:a1:85:55:91:31:87:25:80:0b:b8:86:a8:93:bf:
a9:ba:ca:d1:f1:bd:b8:31:87:ef:df:33:91:23:ca:
53:d4:33:cf:b2:b8:27:24:47:65:f3:fb:50:e8:8c:
84:ff:b0:a8:6a:c4:e2:d6:c8:66:3b:ba:8c:59:43:
f0:c5:69:f7:fd:5b:a8:91:7f:9b:be:5b:08:f5:65:
ec:b3:1b:26:9f:cb:5d:a1:f4:bc:1b:59:0a:01:68:
d3:36:c2:70:73:36:4d:29:2a:16:50:e9:56:e4:b4:
ef:52:ef:4f:45:32:af:39:b6:0d:7c:e2:ca:e2:e9:
a8:0c:18:ed:c7:f8:a1:bf:e6:a0:20:64:bc:fd:e7:
be:07:e5:33:bf:dd:09:de:08:87:4f:df:07:32:2b:
14:bb:17:ca:dd:a5:4c:d3:f9:11:17:51:10:af:cc:
17:50:8e:bc:4a:a2:ba:ee:6e:0a:4e:97:ff:da:63:
c1:91:d3:d2:c6:d4:5c:b6:6a:7d:7c:13:9b:48:a5:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:94:76:08:62:B4:8C:67:39:88:2C:9B:B3:DE:82:E8:D9:8E:67:62
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CJR2CGK0jGc5iCybs96C6NmOZ2I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.211.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:d0:f1:98:67:c0:66:9b:fb:58:28:46:c3:a5:dd:b8:11:33:
a4:b6:cd:5f:07:d2:69:ae:8f:7f:19:c3:c8:aa:d3:ec:71:1e:
dc:9e:73:3d:c1:2a:bd:93:dd:4b:1b:61:ba:50:3f:4d:77:36:
06:2a:61:49:8b:45:9d:50:32:ae:19:fc:b0:42:cf:d6:7a:66:
e5:bf:c8:03:2e:ac:c3:fc:ce:6a:de:19:f9:18:bc:3e:d1:d6:
38:3d:dd:31:65:7a:19:b3:ed:24:7e:49:52:e5:a4:4c:44:17:
45:e5:67:44:3d:f5:63:8f:5b:cb:1a:0a:eb:90:e2:f9:c8:3d:
44:89:93:2d:22:52:7f:39:0d:cf:47:db:12:71:f8:d4:1a:d5:
0a:7a:84:f3:37:c9:15:47:ca:6d:5f:8e:63:23:e6:c5:8c:50:
fe:72:fb:9e:8b:c3:32:1b:f7:b1:9f:90:5e:f3:58:0c:68:97:
de:b0:64:3a:2d:35:ae:18:cc:0d:e7:6a:a8:e7:ee:5d:6f:78:
34:46:4e:51:b1:62:07:45:65:9c:09:21:00:0c:64:e8:a4:c8:
e8:7e:77:9d:eb:fe:11:f6:4e:46:67:ec:97:98:0b:8b:9d:29:
d2:29:1b:a7:b9:66:42:17:6f:57:99:9d:92:55:1e:1d:ee:23:
f6:cd:83:42
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAx
MTMyOFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMDg5NDc2MDg2MkI0OEM2
NzM5ODgyQzlCQjNERTgyRThEOThFNjc2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALjLOwrR8WoM7ycTD1KAcbFOjHy3RrJGW8FsZY1qttr8G6nqcxQ1
OFvGYJeo03Dlol0ahBbInyVKNbNWyKGFVZExhyWAC7iGqJO/qbrK0fG9uDGH798z
kSPKU9Qzz7K4JyRHZfP7UOiMhP+wqGrE4tbIZju6jFlD8MVp9/1bqJF/m75bCPVl
7LMbJp/LXaH0vBtZCgFo0zbCcHM2TSkqFlDpVuS071LvT0Uyrzm2DXziyuLpqAwY
7cf4ob/moCBkvP3nvgflM7/dCd4Ih0/fBzIrFLsXyt2lTNP5ERdREK/MF1COvEqi
uu5uCk6X/9pjwZHT0sbUXLZqfXwTm0ilcX0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQIlHYIYrSMZzmILJuz3oLo2Y5nYjAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvQ0pSMkNHSzBqR2M1aUN5YnM5NkM2Tm1PWjJJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3TkDANBgkqhkiG9w0BAQsFAAOCAQEAS9DxmGfAZpv7WChGw6XduBEzpLbN
XwfSaa6PfxnDyKrT7HEe3J5zPcEqvZPdSxthulA/TXc2BiphSYtFnVAyrhn8sELP
1npm5b/IAy6sw/zOat4Z+Ri8PtHWOD3dMWV6GbPtJH5JUuWkTEQXReVnRD31Y49b
yxoK65Di+cg9RImTLSJSfzkNz0fbEnH41BrVCnqE8zfJFUfKbV+OYyPmxYxQ/nL7
novDMhv3sZ+QXvNYDGiX3rBkOi01rhjMDedqqOfuXW94NEZOUbFiB0VlnAkhAAxk
6KTI6H53nev+EfZORmfsl5gLi50p0ikbp7lmQhdvV5mdklUeHe4j9s2DQg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:56 2025 by rpki-client