![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
File: RHosSBoB1nE5sm-rclJQ0lx81ro.roa (raw, json)
Hash identifier: SujIr7AI2VuH23RJmerfQyJRKI9WRh5tFX7ccha4zOY=
Subject key identifier: 44:7A:2C:48:1A:01:D6:71:39:B2:6F:AB:72:52:50:D2:5C:7C:D6:BA
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0135
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
Signing time: Sun 01 Oct 2023 01:30:14 +0000
ROA not before: Sun 01 Oct 2023 01:30:14 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 27.116.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:30:14 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=447A2C481A01D67139B26FAB725250D25C7CD6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:44:49:8c:8b:61:f0:75:75:07:b0:b4:a6:9a:
12:54:1d:65:e3:ee:62:b7:fe:ac:71:58:31:bd:45:
9d:a0:cd:90:cb:c7:34:f5:d4:b0:c5:6b:38:04:ed:
92:45:68:7a:dd:9f:a6:73:87:26:21:76:c4:14:c1:
bf:35:6e:4d:78:a3:3e:76:c7:c5:4f:be:f8:cb:bd:
cc:45:70:d9:fa:b7:ae:0f:46:97:6e:57:29:11:4c:
60:31:55:c3:27:cd:51:4c:1b:0c:68:34:52:dc:86:
74:f5:3c:a1:89:a8:d6:17:25:cd:26:c4:00:e8:72:
37:64:57:88:5e:68:36:9b:81:95:a9:d5:41:4c:23:
83:93:c5:98:51:e1:fe:f6:0a:c4:09:9d:84:95:4a:
d6:8b:10:db:ad:1d:65:ab:c9:9d:b1:2e:90:2d:3d:
10:68:f1:9a:df:18:08:da:0c:38:cc:be:ff:c3:b8:
0a:d8:f4:0b:f4:40:43:fc:c9:e1:e2:0e:4e:52:1e:
b5:be:37:48:c1:53:34:03:36:e2:cc:34:34:bc:80:
36:75:95:87:d5:5d:5d:bb:ce:6a:e3:e2:13:f3:c3:
32:4f:ab:6e:02:f1:6b:26:94:3c:9b:39:1b:ef:ad:
25:53:f0:68:61:e2:69:22:06:b9:6b:c6:d7:49:5c:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:2C:48:1A:01:D6:71:39:B2:6F:AB:72:52:50:D2:5C:7C:D6:BA
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RHosSBoB1nE5sm-rclJQ0lx81ro.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.0.0/20
Signature Algorithm: sha256WithRSAEncryption
31:c2:4c:e9:b7:06:f3:63:a7:a6:ba:6e:a5:ae:35:18:34:93:
88:15:d7:e2:1b:64:87:74:82:03:30:d5:e8:f8:fb:4b:97:01:
09:5f:fe:a7:eb:f6:1d:da:d0:9a:1d:21:60:55:7e:ff:32:8b:
e3:86:ab:05:3c:6c:b9:82:6a:a7:84:eb:9e:f2:34:ec:de:df:
eb:4d:36:b1:5d:ea:b2:4b:90:b6:b3:70:eb:f7:da:49:14:a9:
6f:1f:1f:c9:cf:a8:1f:b8:16:e3:c8:32:6d:25:ad:60:00:4f:
7c:de:24:b3:41:59:54:b9:e7:fc:fd:4b:e1:1e:52:2f:d7:62:
36:6b:82:d0:9d:3d:fd:f9:8f:0c:8c:12:3c:5a:5c:b8:dd:fd:
20:13:c6:71:77:83:67:aa:1d:86:37:65:7c:f2:a7:9d:9b:4d:
e2:5b:2d:71:44:5f:d1:00:2a:71:b9:b8:76:9c:46:2b:26:1c:
20:d5:17:f4:cf:f5:43:81:ea:8c:e5:46:aa:7f:7f:a9:35:b8:
32:9a:ab:94:27:23:92:05:69:af:d6:c2:d4:db:b7:24:83:ff:
9c:e0:36:74:69:83:63:0d:06:cc:29:e5:0c:29:f1:fc:33:b7:
45:8a:72:b6:7d:22:f7:d2:67:97:85:a9:83:70:64:f5:cb:e7:
ac:4f:a3:6c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTMwMTRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ0N0EyQzQ4MUEwMUQ2
NzEzOUIyNkZBQjcyNTI1MEQyNUM3Q0Q2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyREmMi2HwdXUHsLSmmhJUHWXj7mK3/qxxWDG9RZ2gzZDLxzT1
1LDFazgE7ZJFaHrdn6ZzhyYhdsQUwb81bk14oz52x8VPvvjLvcxFcNn6t64PRpdu
VykRTGAxVcMnzVFMGwxoNFLchnT1PKGJqNYXJc0mxADocjdkV4heaDabgZWp1UFM
I4OTxZhR4f72CsQJnYSVStaLENutHWWryZ2xLpAtPRBo8ZrfGAjaDDjMvv/DuArY
9Av0QEP8yeHiDk5SHrW+N0jBUzQDNuLMNDS8gDZ1lYfVXV27zmrj4hPzwzJPq24C
8WsmlDybORvvrSVT8Ghh4mkiBrlrxtdJXIGrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURHosSBoB1nE5sm+rclJQ0lx81rowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1JIb3NTQm9CMW5FNXNtLXJjbEpRMGx4ODFyby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQbdAAwDQYJKoZIhvcNAQELBQADggEBADHCTOm3BvNjp6a6bqWuNRg0k4gV
1+IbZId0ggMw1ej4+0uXAQlf/qfr9h3a0JodIWBVfv8yi+OGqwU8bLmCaqeE657y
NOze3+tNNrFd6rJLkLazcOv32kkUqW8fH8nPqB+4FuPIMm0lrWAAT3zeJLNBWVS5
5/z9S+EeUi/XYjZrgtCdPf35jwyMEjxaXLjd/SATxnF3g2eqHYY3ZXzyp52bTeJb
LXFEX9EAKnG5uHacRismHCDVF/TP9UOB6ozlRqp/f6k1uDKaq5QnI5IFaa/WwtTb
tySD/5zgNnRpg2MNBswp5Qwp8fwzt0WKcrZ9IvfSZ5eFqYNwZPXL56xPo2w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:42 2025 by rpki-client