![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
File: 4s3u66J1IwBU6OTGRHXqHgoszsQ.roa (raw, json)
Hash identifier: ZUYy27rR/v7cnxyQ7g5UtrmT6u6JxwowKKxRLFD18fI=
Subject key identifier: E2:CD:EE:EB:A2:75:23:00:54:E8:E4:C6:44:75:EA:1E:0A:2C:CE:C4
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 18
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
Signing time: Mon 13 Jun 2022 06:20:47 +0000
ROA not before: Mon 13 Jun 2022 06:20:47 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 23778
IP address blocks: 210.235.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Jun 13 06:20:47 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=E2CDEEEBA275230054E8E4C64475EA1E0A2CCEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:9e:ab:0e:4d:12:f7:ac:35:24:16:89:2c:
63:74:70:62:2f:93:8a:2b:b5:90:04:ec:e9:86:28:
e1:36:60:7a:f8:2d:25:2f:1c:89:fc:15:4d:bc:95:
75:77:84:ed:5d:cc:c8:41:02:ee:b1:78:de:c4:5b:
c3:f5:4e:c3:99:5e:9f:da:0c:fa:7f:9b:cd:30:a6:
36:b4:8d:14:ca:43:e8:c6:8b:0f:02:69:6d:ed:85:
bf:74:b4:3c:62:8c:c1:8e:d6:98:66:ae:8b:6c:60:
7a:c1:0c:47:8d:92:c1:f4:ab:de:c0:fb:6e:87:d9:
07:1d:60:e8:b3:61:8e:a2:83:7f:b5:d1:4c:8c:48:
89:da:84:09:93:39:13:a7:de:98:f5:e6:91:68:2c:
a6:f8:1f:6a:2c:f0:e3:c9:75:78:ae:e5:db:af:79:
19:76:4d:85:29:25:e6:98:22:f0:c1:c3:aa:43:b6:
30:75:f7:f7:3d:66:01:bc:e2:d1:15:a6:0e:45:33:
2c:7a:9d:a7:d5:dd:9a:ba:3a:3d:30:fe:51:9f:30:
57:94:3c:07:c3:07:f7:0a:bc:8d:54:48:70:60:fc:
03:04:15:b6:f6:3d:56:7d:9e:28:d8:8d:14:13:34:
ad:e1:47:f7:9d:15:84:0a:5b:0c:5d:56:e9:8e:7f:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:EE:EB:A2:75:23:00:54:E8:E4:C6:44:75:EA:1E:0A:2C:CE:C4
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:2c:e8:a1:6c:0f:61:27:30:9c:f5:25:b3:6e:3d:74:01:22:
a8:37:79:34:bd:70:5a:c6:37:af:42:a2:77:e1:62:a1:64:f2:
f8:b2:4e:71:ab:b2:99:59:1b:0e:ec:b2:72:15:59:17:90:f0:
6f:48:fd:1e:5a:ca:93:63:01:a0:67:78:07:a4:99:2f:59:22:
37:e0:db:79:d9:12:3a:53:2d:4c:4b:82:a4:c3:d2:69:a8:0c:
67:10:f5:c2:2f:6a:d7:ef:39:8a:f2:d0:24:b9:55:ac:84:ff:
fa:71:0a:0e:13:8b:dd:f2:ca:66:97:c8:f1:86:e9:e4:6d:83:
d1:99:74:09:8d:58:e5:28:2c:82:30:31:18:a5:7f:18:6b:ec:
0e:25:34:8c:4d:fd:e5:f4:10:f6:70:ee:80:9d:5b:8f:ac:39:
56:d6:a9:61:33:17:b5:0f:45:f8:ae:2d:8a:48:42:b5:b2:7b:
e9:98:c3:84:1a:34:99:b0:04:39:86:b0:7f:f9:f5:4f:ba:8f:
41:97:93:9d:86:91:91:2c:7a:de:50:9a:fd:ec:f8:7a:89:41:
8f:7f:68:30:c5:f4:8e:e9:09:0c:b4:33:b6:76:0d:4e:e5:82:
f8:03:a1:a2:a8:15:39:67:19:9b:22:0c:25:51:23:bd:02:39:
3e:a8:1d:4f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw
RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTIyMDYxMzA2
MjA0N1oXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoRTJDREVFRUJBMjc1MjMw
MDU0RThFNEM2NDQ3NUVBMUUwQTJDQ0VDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL20nqsOTRL3rDUkFoksY3RwYi+Tiiu1kATs6YYo4TZgevgtJS8c
ifwVTbyVdXeE7V3MyEEC7rF43sRbw/VOw5len9oM+n+bzTCmNrSNFMpD6MaLDwJp
be2Fv3S0PGKMwY7WmGaui2xgesEMR42SwfSr3sD7bofZBx1g6LNhjqKDf7XRTIxI
idqECZM5E6femPXmkWgspvgfaizw48l1eK7l2695GXZNhSkl5pgi8MHDqkO2MHX3
9z1mAbzi0RWmDkUzLHqdp9Xdmro6PTD+UZ8wV5Q8B8MH9wq8jVRIcGD8AwQVtvY9
Vn2eKNiNFBM0reFH950VhApbDF1W6Y5/k8ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTize7ronUjAFTo5MZEdeoeCizOxDAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It
jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u
S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTkvNHMzdTY2SjFJd0JVNk9UR1JIWHFIZ29zenNRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtLrJDANBgkqhkiG9w0BAQsFAAOCAQEAsSzooWwPYScwnPUls249dAEiqDd5
NL1wWsY3r0Kid+FioWTy+LJOcauymVkbDuyychVZF5Dwb0j9HlrKk2MBoGd4B6SZ
L1kiN+DbedkSOlMtTEuCpMPSaagMZxD1wi9q1+85ivLQJLlVrIT/+nEKDhOL3fLK
ZpfI8Ybp5G2D0Zl0CY1Y5SgsgjAxGKV/GGvsDiU0jE395fQQ9nDugJ1bj6w5Vtap
YTMXtQ9F+K4tikhCtbJ76ZjDhBo0mbAEOYawf/n1T7qPQZeTnYaRkSx63lCa/ez4
eolBj39oMMX0jukJDLQztnYNTuWC+AOhoqgVOWcZmyIMJVEjvQI5PqgdTw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:08 2025 by rpki-client