![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
File: _0LBhm4DyjwVumFWx020Ig4e69s.roa (raw, json)
Hash identifier: u+jiO7bsPOdfbsmY+3iU47nWiInwtPKo5nGyHdwtshU=
Subject key identifier: FF:42:C1:86:6E:03:CA:3C:15:BA:61:56:C7:4D:B4:22:0E:1E:EB:DB
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 01BE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
Signing time: Sun 01 Oct 2023 01:38:16 +0000
ROA not before: Sun 01 Oct 2023 01:38:16 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9617
IP address blocks: 49.250.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:38:16 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=FF42C1866E03CA3C15BA6156C74DB4220E1EEBDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:32:0b:91:14:cb:91:c4:a0:12:50:7c:7c:
52:49:a2:74:fb:70:cb:97:c7:2d:96:20:b8:c7:6c:
08:b5:25:c2:70:54:f2:79:1f:0b:87:a7:0d:7b:b8:
39:6e:27:ac:4c:1d:bf:05:8a:2a:ac:c4:55:f1:46:
fe:b8:8b:6a:62:85:ff:c2:40:e0:8a:92:db:38:d7:
9b:f6:5a:5e:80:1d:af:90:f7:f5:6e:b3:48:3f:94:
e7:04:5c:71:84:ec:f7:13:51:f7:b9:2f:e5:fb:13:
44:47:87:56:ca:01:a8:10:95:c2:80:02:1b:ba:e4:
e1:56:ba:68:31:f3:e7:1e:5d:a9:4c:c2:fb:ed:f0:
98:dc:84:73:5e:ba:f6:b4:41:b0:64:f6:8d:fa:39:
0f:a7:0b:d8:27:28:6c:56:df:4d:c2:50:89:81:90:
ca:3c:9d:0c:2b:b5:21:a9:ab:e4:60:47:17:94:17:
25:33:00:fb:ca:84:6d:d4:52:58:d4:fb:c3:66:56:
3f:5a:5d:6f:81:fd:46:28:28:c6:23:cc:49:8c:9b:
a1:f0:e6:5d:da:04:1c:37:09:5f:61:45:d4:18:41:
1c:79:6d:c5:5c:a7:42:e9:ec:6c:c7:d9:96:58:8e:
d4:0a:36:cf:24:64:71:3a:f9:1a:a8:46:b7:1b:fb:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:C1:86:6E:03:CA:3C:15:BA:61:56:C7:4D:B4:22:0E:1E:EB:DB
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_0LBhm4DyjwVumFWx020Ig4e69s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b5:3d:06:0d:dd:77:b4:15:27:d9:3a:6c:cd:a5:b2:35:a4:b4:
13:15:4b:1b:10:6f:f4:25:37:5f:51:eb:a7:f8:19:3a:a6:57:
c2:1e:67:2a:22:cc:a7:76:68:e2:0d:51:da:8d:f2:c1:2d:c9:
1c:13:ed:01:4a:cb:44:23:13:03:61:ca:05:4e:62:f2:3c:b4:
a7:a2:d9:da:db:3f:9e:11:01:18:ca:89:2b:b1:9a:6e:1c:e3:
f7:2c:57:a8:18:d1:fe:27:8c:23:5e:88:d9:71:27:93:fe:b8:
5c:04:c9:b1:2b:9c:e6:97:89:ec:f2:8e:91:71:e6:c8:88:97:
1c:20:1e:47:8c:52:57:af:cb:3e:00:74:5e:b4:1e:9d:30:c7:
7d:5d:1c:b0:ec:9c:75:98:8f:01:68:ce:69:b1:98:dd:a9:c2:
0c:6c:52:f1:44:67:71:56:f6:f1:da:73:ee:b4:b0:c8:7b:66:
2b:3f:e1:bb:95:8c:55:1c:99:22:f1:08:3e:84:e7:c2:44:65:
f7:ad:a8:73:c0:dd:15:58:6d:ad:00:84:43:73:cd:36:0f:71:
0f:be:96:08:cc:2e:5f:f0:37:cd:b9:16:50:dd:35:88:58:3f:
b6:f0:0b:1c:f8:17:13:9e:28:ce:fc:a5:00:be:d2:53:29:2d:
16:20:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:02 2025 by rpki-client