![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
File: UYKFvpmDOe10rZVRjxlfyxHyZGc.roa (raw, json)
Hash identifier: EFXNHdzZ8jQ6KbSMvuT8vIX/XeDOZOPUZP7YCuFbUWM=
Subject key identifier: 51:82:85:BE:99:83:39:ED:74:AD:95:51:8F:19:5F:CB:11:F2:64:67
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 2F
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
Signing time: Tue 01 Nov 2022 01:28:14 +0000
ROA not before: Tue 01 Nov 2022 01:28:14 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9621
IP address blocks: 157.70.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Nov 1 01:28:14 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=518285BE998339ED74AD95518F195FCB11F26467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:53:38:cf:c1:1e:cb:0f:ad:75:60:13:00:
2d:2e:8e:4b:bc:c2:ca:9b:a9:d6:7b:db:6d:f7:66:
44:12:10:55:da:b5:e7:4f:d6:3d:86:a9:9a:07:d2:
3c:48:48:d7:53:fe:fa:dd:44:9d:c8:8e:a4:9a:a9:
14:81:d2:2e:79:e7:6b:4a:00:ac:bc:c5:77:68:e4:
88:cf:c6:88:cd:15:7f:a1:0a:82:91:99:96:c5:94:
f6:6d:91:48:8e:4c:ec:d7:70:4a:b6:39:91:3d:d0:
cf:60:3a:52:8b:48:d1:90:18:b0:88:09:87:60:2b:
d2:4e:62:70:3b:39:e7:81:b7:5d:e8:c2:6c:d9:c1:
b7:e8:91:4d:eb:8e:e9:4b:2d:0d:d2:da:7a:b1:59:
35:62:e9:4b:23:41:4e:e0:3b:ad:85:59:aa:59:ff:
f4:77:9c:d1:ee:78:97:d7:7c:d4:c2:b2:5f:39:9e:
81:b6:9e:18:36:e3:78:10:08:62:23:9c:ac:13:d6:
5e:35:37:41:01:a1:97:fa:87:06:40:1a:0e:01:c3:
02:5d:ea:7f:b0:5f:4d:82:ab:ce:18:fa:27:75:7d:
09:b4:92:63:1a:de:52:b2:94:ed:e2:2e:4d:e6:6b:
a2:be:25:fc:ca:7a:62:85:de:cf:d5:27:74:f3:98:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:85:BE:99:83:39:ED:74:AD:95:51:8F:19:5F:CB:11:F2:64:67
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.70.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:ce:60:d2:25:1f:1a:18:17:57:e6:fd:f6:88:92:4a:dd:79:
e5:1a:3d:02:46:42:6e:2e:26:d2:23:9f:e6:41:39:0d:bf:7a:
55:92:5f:8e:a3:27:a5:8e:e6:85:70:cd:1d:ed:88:35:b9:70:
1f:9b:18:dd:24:d6:93:3d:35:fe:5a:29:4f:92:a5:16:ed:bf:
a3:ee:2e:6c:38:46:c4:60:5f:4d:eb:16:fe:9e:64:9f:4d:9d:
28:7e:89:2d:d2:f3:72:d0:9a:68:ae:a4:c8:ce:a2:5e:c8:f4:
b9:18:b9:c3:54:14:3b:0b:f9:44:98:10:64:bd:cd:80:11:5d:
67:54:e3:5a:9a:f0:47:38:f5:a2:d9:0c:8c:ae:d4:7d:8b:97:
ba:41:22:29:33:b6:d2:ec:a4:61:1e:34:00:ca:6f:d3:6d:1c:
3a:65:f7:92:18:45:9d:db:18:71:5d:60:57:15:70:32:a1:a5:
33:92:ae:be:8b:3a:72:de:2d:36:34:57:d0:12:4b:39:e0:06:
45:d6:1f:6c:e9:30:78:0e:c8:4a:ad:0f:61:a9:31:4c:04:f7:
c0:f8:21:ea:26:58:e9:55:62:dc:ac:9f:37:c0:0b:c0:b6:9a:
c2:89:08:c1:19:dd:c1:63:fc:3c:11:f6:61:7b:70:44:f4:24:
f7:97:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:58 2025 by rpki-client