![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/tR_S3Tv-fOcSXHMwSPq53j69nDI.roa
File: tR_S3Tv-fOcSXHMwSPq53j69nDI.roa (raw, json)
Hash identifier: V6V+ziNS0wgR174BLJVt38ymKMRRISeaMDhVJS8cnNY=
Subject key identifier: B5:1F:D2:DD:3B:FE:7C:E7:12:5C:73:30:48:FA:B9:DE:3E:BD:9C:32
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 16
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/tR_S3Tv-fOcSXHMwSPq53j69nDI.roa
Signing time: Mon 13 Jun 2022 06:20:46 +0000
ROA not before: Mon 13 Jun 2022 06:20:46 +0000
ROA not after: Mon 15 May 2023 01:30:04 +0000
asID: 23778
IP address blocks: 202.58.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Jun 13 06:20:46 2022 GMT
Not After : May 15 01:30:04 2023 GMT
Subject: CN=B51FD2DD3BFE7CE7125C733048FAB9DE3EBD9C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:3f:5c:d1:90:21:4f:c0:8f:98:ff:eb:5e:
4f:9e:08:13:b5:16:e4:93:ff:0e:c0:39:25:3c:da:
20:83:d6:3d:09:d8:88:7e:15:b7:91:e3:ff:ec:2c:
64:17:9e:54:b6:75:3b:a0:8e:82:a4:67:4e:0e:3f:
08:c4:11:83:63:d2:ba:86:f0:e5:b8:bb:9b:22:3e:
4d:a8:72:a3:ba:35:ac:f2:91:19:b7:43:e5:3e:4f:
0a:f5:2d:a9:ff:1d:b9:2a:da:5c:f7:f5:bb:b0:f1:
e0:7d:31:eb:fc:80:d0:bc:bb:1c:27:e4:5d:0f:07:
37:cb:46:bf:3a:57:00:e3:1b:6f:28:2e:89:25:86:
ce:c2:e0:7d:cf:05:29:77:ea:57:4f:35:99:75:24:
a8:00:0d:51:5e:8e:83:0e:16:f0:47:ab:12:b9:74:
bc:dc:c7:b4:5e:52:33:2b:a7:42:8a:0f:07:b4:14:
87:34:0e:d8:30:ae:f8:40:ff:b5:23:fc:7c:c9:11:
f1:72:71:54:88:94:bb:2f:9d:b1:bd:51:bb:65:c3:
67:32:ec:62:fa:b2:29:9a:fb:9d:8a:7f:cb:30:60:
69:7b:7b:e4:15:f0:48:e2:bc:c0:68:12:07:47:3f:
d6:e4:5f:20:14:71:2a:fd:c2:9b:52:40:a7:ad:2d:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1F:D2:DD:3B:FE:7C:E7:12:5C:73:30:48:FA:B9:DE:3E:BD:9C:32
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/tR_S3Tv-fOcSXHMwSPq53j69nDI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.144.0/20
Signature Algorithm: sha256WithRSAEncryption
63:30:6a:56:be:9f:db:80:42:95:14:ab:7b:b9:4f:b8:31:a4:
22:48:e9:cc:38:ec:9f:70:3d:d6:c7:51:5e:2c:8b:5a:30:c2:
d4:d0:be:29:67:75:66:6f:b6:02:42:2d:b4:3f:d9:eb:7c:46:
37:a8:c2:ea:33:de:e0:e4:29:d4:9c:87:13:1c:93:e1:75:d2:
c1:d1:07:a1:ca:63:2f:ed:77:2c:b6:4e:eb:aa:36:78:01:47:
72:1b:b4:d2:10:b9:6d:d4:b3:9a:4a:09:75:ca:67:81:e2:35:
b6:32:34:0f:14:4a:d7:bd:ac:3a:83:6b:c0:6c:70:80:88:d1:
6f:46:01:c8:73:f8:fa:41:27:96:df:1a:09:83:18:6f:d5:de:
30:86:83:4b:53:a8:c6:a8:b2:a8:64:58:9e:e5:89:42:fc:06:
03:46:ce:af:9b:14:61:87:cf:9d:66:1c:7b:1b:fe:54:83:5d:
c9:c9:77:89:ec:da:b1:dc:09:2b:c0:62:93:55:c1:b4:73:c0:
11:72:3b:99:47:06:ae:22:6c:21:e9:30:7d:60:35:02:e0:d6:
c8:ad:19:b5:a0:3f:b0:05:0a:33:09:9d:b3:2a:3d:34:1d:3e:
35:a0:f3:d7:e3:f6:84:57:5f:20:6a:aa:b5:e7:62:c0:87:ab:
79:ca:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:03 2025 by rpki-client