![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
File: n8PCFC43er8ilGfZDmWH7e6CL1k.roa (raw, json)
Hash identifier: SupfH//YOtS5ArDv1LzL+sfw2oQxbirdbeXX4Wx+Uew=
Subject key identifier: 9F:C3:C2:14:2E:37:7A:BF:22:94:67:D9:0E:65:87:ED:EE:82:2F:59
Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial: 55
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
Signing time: Thu 29 Feb 2024 01:30:49 +0000
ROA not before: Thu 29 Feb 2024 01:30:49 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 18260
IP address blocks: 27.106.208.0/21 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Validity
Not Before: Feb 29 01:30:49 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=9FC3C2142E377ABF229467D90E6587EDEE822F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:ec:3d:dc:0f:d9:40:26:06:5c:5f:dc:a5:
d4:3e:c4:c1:6c:a0:e4:4e:5f:ed:b0:78:cb:b9:ae:
23:f1:85:52:d1:78:c0:c3:29:ee:f0:8b:60:f8:aa:
0f:fe:58:9a:9d:9a:96:13:d6:fc:12:41:ce:b6:ff:
22:89:29:5d:b4:ee:91:30:c7:8d:5a:7a:fe:b2:4e:
92:f2:df:b0:13:3a:e0:7a:dc:a1:dc:6d:3e:c8:c5:
9f:be:4e:57:5b:36:fe:68:60:48:86:32:b3:7f:a3:
48:be:96:20:31:18:51:41:14:dd:5a:df:df:58:45:
56:83:80:9e:61:69:bb:7a:61:c4:20:17:4d:49:7a:
17:9e:86:0f:98:bb:c5:a2:30:ab:68:c3:a1:93:72:
4a:7d:72:2c:89:38:f1:08:da:b9:b1:97:7d:aa:dd:
92:dc:55:ba:dd:30:90:6a:10:6b:5b:a1:ff:fc:43:
a9:e6:05:6b:91:25:19:b8:d4:59:c2:77:63:44:70:
18:67:9c:f4:43:57:e3:b5:31:ad:c6:44:9d:b3:db:
76:07:29:3d:20:76:07:fe:fd:09:12:30:15:c5:4c:
2b:0a:00:bd:f7:35:6b:56:0a:5b:9a:6f:97:d1:44:
3a:8f:78:29:54:40:08:1c:60:a6:e9:7f:bd:90:d9:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:C2:14:2E:37:7A:BF:22:94:67:D9:0E:65:87:ED:EE:82:2F:59
X509v3 Authority Key Identifier:
keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/n8PCFC43er8ilGfZDmWH7e6CL1k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.106.208.0/21
Signature Algorithm: sha256WithRSAEncryption
12:98:11:ad:5d:5a:41:cf:5a:89:99:68:77:d5:0f:43:04:13:
18:95:f5:44:aa:5d:14:b7:9d:4c:7b:e7:91:17:fe:a9:70:95:
5c:5d:d7:66:ae:6a:e8:c3:e5:66:55:f4:50:f2:65:22:a7:24:
81:23:f2:39:42:36:db:4f:1e:d9:00:8e:6b:23:26:4a:0c:d7:
b7:af:30:63:c3:e5:98:ff:e4:ca:3b:67:19:6e:fc:64:ff:60:
3b:e7:d4:c2:56:05:66:d7:7d:17:ce:a3:1b:ef:7e:2b:5b:8c:
d7:59:e1:55:f7:1c:2d:c0:a6:66:f7:c3:ff:68:c3:c6:bb:10:
3e:96:bb:a9:21:bd:67:42:4a:57:87:8a:e1:09:aa:b9:b8:be:
bd:9a:69:60:90:fa:26:24:55:04:5c:4a:bd:93:fd:4e:35:28:
bf:24:97:9e:11:76:20:b8:4d:b9:68:41:dc:e5:84:7c:c0:db:
cc:24:dc:ee:53:44:a0:19:68:47:0f:f6:da:94:c9:dd:52:af:
26:f6:7c:ec:de:4d:2a:57:8c:91:f3:e9:96:70:c5:9a:82:55:
f7:f2:c3:4c:21:05:79:e9:3c:03:c8:2e:75:70:0d:33:8a:28:
fe:96:26:94:2d:ae:75:d2:5e:0e:94:67:2a:cf:8a:29:e2:9e:
e0:ea:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:41 2025 by rpki-client