![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
File: rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa (raw, json)
Hash identifier: mIN/mZCAcm8JAuX7D6550V0yfSZ3Eh2Wq/GWXONb/zA=
Subject key identifier: AF:19:0D:F3:2A:D1:B8:1A:B6:71:39:C8:AF:64:F9:73:23:B5:64:6C
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 64
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
Signing time: Mon 17 Oct 2022 02:26:07 +0000
ROA not before: Mon 17 Oct 2022 02:26:07 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 23788
IP address blocks: 110.172.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 17 02:26:07 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=AF190DF32AD1B81AB67139C8AF64F97323B5646C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:1d:75:55:40:7d:0d:35:4d:92:f2:b7:30:
7a:08:9a:c7:22:43:d7:1e:b2:f0:89:18:bd:9e:ac:
cd:31:b0:cd:93:7c:ff:cd:48:31:cd:25:6d:71:8a:
44:a9:e7:67:4f:df:c9:70:c7:14:09:95:e3:df:0b:
96:f2:e7:57:06:da:8d:d2:68:4c:24:11:83:60:9c:
b1:fa:44:2f:c8:8d:37:ac:63:ad:cd:21:60:7b:f6:
1e:07:42:50:b1:16:c5:f0:4b:30:db:23:32:46:48:
4b:55:c9:9a:13:30:3b:fc:06:c7:51:15:07:b0:1c:
9b:b0:fa:37:8d:51:b3:a5:5c:cc:17:6e:4f:e4:96:
85:57:49:21:e1:a9:bf:f0:0b:45:e6:84:04:f3:e1:
1e:11:e0:d2:87:ab:a6:86:d1:7a:07:bb:0c:57:e2:
9b:73:58:7e:5a:f3:d8:73:a8:16:90:9e:7d:4c:3d:
c3:46:9e:77:4a:0c:2b:e6:73:bd:a5:9a:43:90:02:
64:88:89:93:15:38:26:a3:21:ce:c5:5f:0d:0f:9a:
d5:e0:f4:ee:a0:fe:cc:d7:d5:d3:39:4a:46:a3:9b:
0f:b7:9d:54:f9:45:1b:c0:38:0d:87:7d:ba:81:95:
9e:2b:24:f2:d1:74:d4:98:8c:0b:74:8d:10:76:7c:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:0D:F3:2A:D1:B8:1A:B6:71:39:C8:AF:64:F9:73:23:B5:64:6C
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.172.0.0/20
Signature Algorithm: sha256WithRSAEncryption
13:67:02:a2:48:02:02:8e:aa:d7:37:08:bc:bb:4e:a7:b8:c7:
34:7c:d0:b9:0c:43:d5:a8:af:d0:1c:07:9a:eb:74:89:bb:5a:
73:6e:66:a8:b9:31:90:6e:d9:d9:b4:39:d5:21:cf:0d:82:2e:
72:bf:6b:09:c2:07:64:0d:24:26:65:8d:3c:75:ed:fb:fa:7d:
28:b8:7e:04:5e:ab:57:d1:4d:48:62:4c:9a:57:bf:ea:47:2f:
8e:cd:57:77:53:5a:99:9d:b0:94:84:f6:8e:5d:03:ee:de:64:
55:0f:bc:72:ac:f8:e0:90:8c:c4:dc:fd:de:b7:c1:04:f8:9f:
a2:15:f6:a7:a6:27:15:ac:d9:8d:9e:dc:2a:77:fc:1a:f5:22:
36:ca:44:a6:dd:3d:2e:8f:1f:5c:55:0c:55:ed:aa:ce:51:3e:
64:3b:e9:5b:1a:1e:37:08:a5:d7:85:d4:a2:cd:46:0d:99:aa:
3f:8e:73:a4:13:28:d0:07:dc:f6:bd:95:3d:b5:7a:d4:d8:e6:
f1:c8:c5:9f:2c:3e:f1:f9:bf:05:af:75:4e:cf:7c:68:07:0e:
a3:76:ea:7b:36:2a:cf:6d:24:53:6b:2e:bc:e4:de:82:5a:3d:
9e:36:27:7d:18:c8:93:79:7b:15:60:6c:31:04:dc:ad:2d:48:
ba:80:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:57 2025 by rpki-client