![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
File: Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa (raw, json)
Hash identifier: NF8zwTpNBlfEfBsDDOmPz6lq+TO5Q7+UHfbW1JN/3x0=
Subject key identifier: 29:B9:78:B4:4E:B5:21:FA:0E:A6:80:9F:51:E5:10:F4:57:92:B1:E9
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 14
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
Signing time: Thu 20 Oct 2022 06:24:20 +0000
ROA not before: Thu 20 Oct 2022 06:24:20 +0000
ROA not after: Fri 20 Oct 2023 06:07:19 +0000
asID: 9374
IP address blocks: 210.199.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Oct 20 06:24:20 2022 GMT
Not After : Oct 20 06:07:19 2023 GMT
Subject: CN=29B978B44EB521FA0EA6809F51E510F45792B1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:3c:79:77:85:e8:fd:09:76:d6:3f:f1:68:
41:b4:59:57:5c:94:e2:2b:04:93:bf:64:10:24:94:
4b:16:68:97:0d:99:40:d8:d9:b9:76:17:9e:14:af:
b5:54:80:a7:b0:7e:60:7f:64:f6:70:c9:0f:7f:a0:
c0:23:ce:42:55:17:ad:59:f0:65:55:85:17:d5:c4:
ad:d2:65:7e:55:10:25:9b:bc:2a:7d:54:51:92:2b:
9d:fc:10:09:56:63:89:0f:01:71:72:a8:f8:76:e8:
2b:6c:68:66:c9:bf:b4:de:8e:75:72:3f:3b:a5:56:
73:86:94:ec:f8:ec:05:7a:64:df:31:33:e8:2b:20:
40:b9:41:e5:fc:b0:11:a5:0c:21:ce:6b:bf:21:0d:
84:75:98:38:67:98:9c:d4:7f:01:1f:75:ce:c0:d1:
a3:31:ef:1d:f2:ff:b8:df:70:54:c0:7d:fc:0a:9f:
1f:e2:c7:61:be:c9:11:d8:f4:a5:c9:17:62:09:76:
43:ff:20:c2:9c:01:20:fa:c6:81:0b:f1:80:b8:88:
fb:9e:4e:3b:d1:6d:e2:58:90:dd:43:8f:f9:93:1b:
53:2c:ee:29:9d:a2:f7:c4:35:84:25:52:b0:07:5a:
58:5f:e5:86:e5:a9:d4:55:4f:82:57:74:a9:c7:49:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:78:B4:4E:B5:21:FA:0E:A6:80:9F:51:E5:10:F4:57:92:B1:E9
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
66:2c:d1:a4:a7:b5:9a:a1:c7:a7:a0:4c:54:d6:e4:de:cc:ef:
0c:0d:11:5d:d0:15:73:9e:92:bd:6a:a5:96:e2:76:e1:10:cf:
01:dc:53:0f:25:91:d6:d5:26:ee:2e:9b:64:36:48:dc:7a:29:
a1:81:3a:66:3d:ff:ba:35:79:22:38:22:80:aa:40:6a:3b:e0:
4d:b3:76:cc:39:d2:28:7e:a0:c0:03:e5:03:23:f5:ef:e3:d4:
85:5e:6b:ed:35:b5:a4:74:ef:6a:9d:a1:b9:35:30:70:99:7e:
ae:47:37:98:12:7a:40:ed:cd:07:fb:db:c3:2a:9a:b7:01:5f:
52:03:4f:fb:0c:96:2b:78:57:7a:7d:e5:21:9e:59:3c:79:40:
f0:1a:18:6d:f8:7e:8c:e5:16:5d:f1:71:c5:df:6e:b3:59:cc:
88:cd:48:e3:8f:86:b9:68:d5:00:17:09:6f:c3:41:c6:3a:01:
4a:a4:80:f6:82:ad:79:86:20:dd:19:97:38:84:50:c6:99:fa:
f3:12:31:58:18:b0:11:07:d9:77:97:2d:ea:a8:6f:33:fe:fe:
4e:fb:73:42:23:a0:84:7a:ab:86:1e:e2:fe:75:cc:c0:fa:ba:
3a:1d:33:82:1a:06:5d:bc:61:77:1d:29:2f:0e:07:41:a7:ab:
9f:70:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:13 2025 by rpki-client