![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
File: xQxWoPTlY35a0uBHkORLKS1l_m8.roa (raw, json)
Hash identifier: +f3GnmdVofI3XVwm4LwQOnWyTx+ANFUBp3yEbDZwmoc=
Subject key identifier: C5:0C:56:A0:F4:E5:63:7E:5A:D2:E0:47:90:E4:4B:29:2D:65:FE:6F
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 1A
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
Signing time: Wed 15 Mar 2023 00:13:56 +0000
ROA not before: Wed 15 Mar 2023 00:13:56 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 55385
IP address blocks: 202.174.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Mar 15 00:13:56 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=C50C56A0F4E5637E5AD2E04790E44B292D65FE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:50:ca:1f:fb:3f:3d:a4:a9:9f:d1:15:f4:
fc:a5:80:27:66:d8:9d:91:01:b2:1d:9f:fd:56:1f:
3b:45:77:49:06:76:50:57:6a:ad:54:21:a1:ad:0c:
94:97:6d:0b:eb:22:eb:33:ae:91:53:d5:12:97:6b:
bc:ce:f1:00:44:24:58:85:a5:6b:ab:45:1e:fa:21:
69:b1:5a:e3:d5:ea:a4:f0:34:a7:f2:a8:74:e4:1b:
7f:5e:83:91:cb:33:d6:e6:49:27:02:2c:74:0f:db:
55:3e:aa:5c:5d:69:13:52:8e:cd:03:22:c5:33:36:
82:af:e4:ae:bc:f5:8b:7e:7a:dd:7d:5a:1a:41:98:
a1:78:1c:5e:49:e5:6a:48:5e:da:e5:3c:2c:89:d8:
2f:24:62:fb:fa:6f:c8:9a:43:40:dc:10:42:23:1a:
d5:c1:7c:3d:b6:54:67:3a:5d:50:19:96:7d:19:94:
7b:52:91:d8:2b:3b:ca:00:63:50:e8:eb:af:4d:0f:
2b:d6:2a:1f:c8:b1:8a:bf:0b:5a:54:65:19:0d:00:
f0:e5:a3:75:70:9b:ad:d5:9d:12:78:10:6e:35:ad:
cc:d5:83:ae:2c:80:10:c9:5b:69:e7:5c:5c:ce:37:
23:90:f2:e8:1a:f5:c7:50:5f:ea:25:ba:bd:bc:8b:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:56:A0:F4:E5:63:7E:5A:D2:E0:47:90:E4:4B:29:2D:65:FE:6F
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.174.58.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:96:a5:45:ef:52:63:8a:65:e1:e6:58:50:ae:f2:55:64:95:
fa:e5:ea:f7:4f:50:93:56:cb:7f:e7:99:cd:17:38:9a:51:78:
07:3e:25:33:4f:4a:89:ca:1d:5b:ef:38:61:e8:13:64:33:b3:
8a:72:37:71:3b:fb:71:8e:9e:93:fe:6d:3f:bb:90:8b:7c:e4:
5f:2c:c6:d8:88:ee:13:ec:67:0a:2c:87:04:7e:54:ff:e9:a0:
62:2c:3b:b7:82:e6:91:50:d8:d9:78:cd:78:79:72:35:c8:24:
59:cf:3d:8a:fc:74:f0:cb:4f:54:84:38:e8:85:83:d5:24:9e:
41:80:c0:b4:53:3e:5a:90:15:09:ae:35:68:f1:be:f2:bc:c8:
a8:41:42:a1:69:6e:0a:da:b9:69:19:e5:f4:75:20:35:e3:3d:
28:1e:46:77:f2:03:c7:9d:08:00:fa:5d:8d:e0:07:75:48:83:
4b:1f:93:85:06:08:74:b8:3a:48:3d:b6:81:25:a3:9f:ed:ae:
38:c7:20:65:87:3d:ba:69:fd:85:5d:db:2a:e3:a9:43:45:86:
16:89:05:a5:01:f7:8c:09:e0:5e:f8:8d:e5:09:9b:3d:8e:da:
9f:5d:76:c4:96:3b:38:a7:01:64:a0:46:71:77:f4:01:40:44:
5e:1c:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:10 2025 by rpki-client