![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
File: owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa (raw, json)
Hash identifier: NPvhLpZOUsrZ9w4aSi+RTHt2lr3kSW3Stz8AUn458qg=
Subject key identifier: A3:00:48:5B:7E:92:77:F7:4B:62:B8:E5:CD:0E:DC:57:A0:70:41:3A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: D9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
Signing time: Mon 31 Oct 2022 02:00:07 +0000
ROA not before: Mon 31 Oct 2022 02:00:07 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9617
IP address blocks: 125.4.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 31 02:00:07 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=A300485B7E9277F74B62B8E5CD0EDC57A070413A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:26:2f:cc:ec:ca:7e:28:b5:08:24:06:ab:
df:29:86:75:42:58:73:f7:ec:0b:63:eb:a6:b1:27:
4a:62:90:8a:28:6d:fc:33:16:9d:fa:a7:4d:cb:28:
23:83:62:39:e8:e9:86:39:2f:01:b5:6c:32:3c:69:
7e:f4:62:16:4d:43:0f:55:8b:56:4c:45:98:34:bb:
9c:9d:b4:a2:f3:14:f5:97:e9:fe:a9:e5:dc:a4:de:
d9:b2:d5:f0:62:89:b9:44:4d:97:af:0e:ca:a3:82:
4d:e9:2f:fa:0b:16:34:b6:74:03:be:7b:1c:01:00:
8c:fa:b2:6d:43:4b:45:8b:03:9c:86:b4:a0:10:4c:
27:14:2d:f4:54:b0:5c:d8:c5:5d:64:e0:d0:9d:46:
45:6a:cb:64:10:4b:8d:5f:ed:3a:a0:59:80:be:14:
bd:1e:30:c3:c7:49:68:2e:b7:0d:e4:0e:da:c7:58:
84:44:23:82:89:8e:e1:47:18:f4:bc:85:f7:76:66:
1c:e1:50:30:1d:91:f7:0f:9d:5d:90:d5:dd:f2:70:
88:83:e1:dc:47:70:65:01:d5:a4:88:d8:5b:e1:0e:
cf:e6:e5:07:b1:af:a8:45:ec:6e:54:7f:3e:cf:f0:
00:4a:38:b1:88:a6:96:ef:2b:0e:5b:86:91:7f:96:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:48:5B:7E:92:77:F7:4B:62:B8:E5:CD:0E:DC:57:A0:70:41:3A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:c3:3d:43:41:8c:54:cf:b8:7f:5d:81:3d:4c:e1:99:52:6e:
b5:a6:1a:4f:06:4d:6c:3b:13:d7:2f:5a:ac:62:02:ac:27:22:
2a:dd:20:36:6f:8a:ba:64:44:88:67:a2:5f:a5:da:60:f5:64:
53:7d:b7:b1:62:f1:d8:7e:6d:62:56:21:24:31:c6:60:73:8c:
6f:7f:c3:b0:54:3d:ca:77:c3:93:68:b4:ee:24:26:3f:8c:aa:
19:2e:d7:d9:b5:97:8b:94:a9:7b:20:9b:53:63:d9:72:87:44:
26:28:ee:bd:d8:a7:fc:75:e4:a3:2d:3d:3b:61:0c:e8:d5:50:
52:09:db:d1:f5:2c:a1:0d:93:02:1a:1d:3e:0f:62:b7:c5:fb:
24:bf:bb:b8:a4:e3:fe:ee:ea:0c:13:9a:a5:8f:ce:24:b7:c9:
c5:9a:c9:ec:d7:38:1e:dd:09:e8:74:04:27:d7:fa:c9:99:f9:
d5:e2:77:81:12:30:60:e7:db:12:71:22:a0:9e:db:b4:fd:79:
5a:c8:ea:8f:67:4e:0e:09:98:22:3c:06:2d:83:0d:6c:67:8b:
d4:29:52:de:37:ad:16:13:a6:b6:13:0a:cb:0c:63:f8:26:ae:
81:0f:91:76:d6:9a:21:06:7a:05:bd:1f:81:17:a6:eb:6c:89:
52:17:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:03 2025 by rpki-client