![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
File: ItT0Ede70e8mRKKpsCbWEoTrTwU.roa (raw, json)
Hash identifier: OQ74vvIF5XN3dX7N/4278pOBvC9pv0eSfBxR0GsAvfE=
Subject key identifier: 22:D4:F4:11:D7:BB:D1:EF:26:44:A2:A9:B0:26:D6:12:84:EB:4F:05
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 49
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
Signing time: Sat 01 Oct 2022 01:29:34 +0000
ROA not before: Sat 01 Oct 2022 01:29:34 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 9621
IP address blocks: 211.120.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Oct 1 01:29:34 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=22D4F411D7BBD1EF2644A2A9B026D61284EB4F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:b8:02:20:b6:93:9e:9e:87:e6:8e:7c:b1:
b5:4d:6a:40:4d:bd:f4:06:7e:29:c1:d9:da:63:c5:
b1:09:4b:d1:5a:7e:38:7f:30:eb:d8:39:fa:66:06:
f6:d8:1b:bf:69:f1:d4:18:19:ae:70:f5:52:eb:93:
a8:e1:64:29:d9:64:b0:e4:8f:79:ca:8b:e1:c4:fe:
40:58:d9:80:7d:04:1b:6d:ca:97:47:ae:3d:fd:0d:
6d:63:1a:77:38:00:fe:dc:a4:11:6e:2b:73:f6:fb:
9b:c9:45:f7:16:64:29:3e:23:45:34:c5:a8:32:c6:
49:94:2e:a7:be:e3:e6:0a:4f:a4:a6:29:0a:d6:b4:
1e:39:d7:42:72:8b:33:72:f9:6a:3b:2f:a0:63:67:
f7:da:3a:7c:66:ac:af:2b:68:54:7b:5e:ac:e5:89:
70:56:fe:73:fc:ec:31:99:57:b6:5d:2e:4d:c0:5b:
cf:1a:cd:ce:cd:7c:4e:d2:62:e4:d9:83:9b:93:0a:
c5:75:75:85:e9:63:35:27:7b:33:9a:70:53:97:40:
1b:2f:dc:64:c7:11:c0:9b:c8:00:55:e7:de:45:77:
57:7c:d0:05:78:a7:04:bd:95:81:f0:2d:a8:91:07:
ca:7e:4e:d3:8d:7e:46:3a:17:34:24:46:25:bb:ad:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:F4:11:D7:BB:D1:EF:26:44:A2:A9:B0:26:D6:12:84:EB:4F:05
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ItT0Ede70e8mRKKpsCbWEoTrTwU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.120.224.0/20
Signature Algorithm: sha256WithRSAEncryption
28:bc:d9:f0:cf:af:43:9b:21:32:75:5c:f9:67:d3:19:f1:7d:
0b:72:85:31:c0:78:33:d2:5d:08:6b:02:c3:c0:69:c8:23:d0:
2b:eb:f8:92:cc:f2:d7:e3:1b:ad:e3:8e:31:1e:af:51:3b:cf:
eb:a4:93:a7:96:4a:54:09:f5:f1:49:18:ae:07:d8:a3:9b:9b:
cf:8e:7c:ad:d5:58:a8:9b:41:04:ff:c0:a0:2e:12:3e:c3:3e:
8c:20:0f:8f:e7:64:82:ec:86:ae:19:19:91:fd:94:41:12:c4:
b5:50:ad:d1:b1:80:4a:e6:39:3b:a4:4a:69:7d:f0:d0:0d:28:
c2:6c:ca:53:95:c3:ba:5a:43:f0:f3:5e:4e:dc:90:74:d4:2f:
99:5b:14:cb:43:21:10:5c:a3:23:5c:b6:4c:ae:3c:70:5c:76:
8a:0c:e8:74:11:a4:b5:0c:d1:65:d7:4b:b6:b9:42:77:a8:54:
4a:37:73:f4:d2:5c:19:ae:fa:c8:c4:57:73:a7:00:a8:62:42:
ee:74:da:d5:81:a3:1b:ab:e3:67:ae:9a:ab:1d:4b:1d:4e:f3:
fe:73:98:bc:30:64:5c:fb:f7:90:86:19:5c:ca:a4:36:88:3f:
07:b1:aa:98:0c:28:14:40:32:8a:26:9d:9b:41:80:25:b6:b4:
dc:3e:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:09 2025 by rpki-client