![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
File: ZaTjl8wo-3rBq1U0b4VAczuufjU.roa (raw, json)
Hash identifier: J1UF7zkqwc45sl6f8IgTCRwuQFydjNvLba//Elo6zWU=
Subject key identifier: 65:A4:E3:97:CC:28:FB:7A:C1:AB:55:34:6F:85:40:73:3B:AE:7E:35
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 16
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
Signing time: Mon 03 Oct 2022 01:12:00 +0000
ROA not before: Mon 03 Oct 2022 01:12:00 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 9824
IP address blocks: 202.43.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 3 01:12:00 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=65A4E397CC28FB7AC1AB55346F8540733BAE7E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:19:35:18:19:28:24:29:80:57:e2:95:58:
e0:09:83:51:07:88:38:5a:63:ce:b0:94:3f:5b:9b:
df:bd:ae:85:4b:d3:69:f7:9d:47:ad:45:55:4d:8b:
14:85:62:34:96:fc:63:3e:51:bb:20:33:92:7c:2c:
15:6a:4d:3d:37:17:7b:1f:04:13:0a:cd:0d:cf:2d:
5c:06:eb:6b:a7:d7:a4:49:ac:24:5c:a2:ac:7c:ae:
40:62:2a:79:a3:2d:ea:4f:6a:77:1f:8c:56:0c:e6:
9d:ae:ec:b9:52:25:82:83:00:2a:80:3b:30:1c:c4:
48:7d:24:22:7a:47:95:f3:04:b1:5e:df:6c:a5:38:
ea:90:e0:16:8d:56:63:e3:53:eb:c0:89:24:66:36:
95:17:23:3e:f9:4c:be:08:8f:e3:05:af:24:05:3b:
80:64:bd:2a:1a:c0:f0:e8:a7:fc:5b:7c:39:9f:d6:
87:88:8f:d7:ad:43:98:bd:97:29:a0:ce:33:06:ff:
74:02:12:75:70:4a:b8:53:31:ab:82:d9:43:7f:83:
09:ec:3e:82:35:7e:72:23:ca:b7:74:a9:0c:89:b0:
99:b2:be:90:6e:80:97:86:5f:99:28:a5:70:c3:cb:
08:62:b5:a9:eb:9f:1c:cb:bd:b1:af:60:64:6f:a8:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A4:E3:97:CC:28:FB:7A:C1:AB:55:34:6F:85:40:73:3B:AE:7E:35
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.43.68.0/22
Signature Algorithm: sha256WithRSAEncryption
46:01:16:10:00:f0:6c:fb:04:e0:9e:af:75:42:99:58:1c:40:
8c:93:9b:db:f1:aa:ab:78:22:9f:20:de:f6:e9:50:b8:cc:4c:
0a:92:22:d3:2d:05:4f:b5:88:6c:f8:f0:ab:88:68:f8:bb:fb:
95:ab:ee:ae:a7:94:40:4a:fe:49:9d:25:bc:0c:5c:72:7a:2d:
a1:24:1b:17:d8:79:9d:93:cc:5a:c1:b8:15:84:14:5f:db:b7:
34:ec:b0:91:cd:c8:a0:f6:39:4f:99:6b:78:de:d2:28:42:8c:
2c:25:bb:39:77:76:64:40:2f:e5:54:fa:67:3f:5a:40:fe:88:
21:aa:9e:80:7f:07:34:2d:26:a9:5e:da:e9:62:71:25:67:6a:
2e:b6:51:f8:f7:50:78:93:6b:99:6f:1c:33:18:d3:94:75:c9:
a0:70:a8:c1:5f:49:21:b6:34:cb:47:ca:5a:af:08:d9:bb:55:
d6:9a:38:68:5a:33:2a:d4:23:b8:13:eb:5d:2e:81:70:96:14:
7f:a6:91:ea:44:2b:b6:25:5a:2c:8c:e9:17:50:4f:37:87:85:
40:bd:39:94:84:8e:85:4c:8e:5a:95:11:06:97:8f:ae:a4:3f:
17:0a:86:09:98:e8:80:ce:47:42:fe:25:e3:3e:ac:bf:ee:86:
df:cc:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:42 2025 by rpki-client