![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
File: wUWlxnII1kEfrCgEpsL2697NLoM.roa (raw, json)
Hash identifier: HBrmAmH878UT2+mp//sM8lrtJx05WqvRK4j3OXne/uM=
Subject key identifier: C1:45:A5:C6:72:08:D6:41:1F:AC:28:04:A6:C2:F6:EB:DE:CD:2E:83
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 03
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
Signing time: Tue 03 Oct 2023 06:52:36 +0000
ROA not before: Tue 03 Oct 2023 06:52:36 +0000
ROA not after: Wed 18 Sep 2024 07:00:52 +0000
asID: 24255
IP address blocks: 103.198.212.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Oct 3 06:52:36 2023 GMT
Not After : Sep 18 07:00:52 2024 GMT
Subject: CN=C145A5C67208D6411FAC2804A6C2F6EBDECD2E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:82:b9:0a:f6:77:ff:ad:d1:17:0b:6c:96:
88:0d:cb:95:5f:ea:27:3f:1b:3a:f0:48:5c:f5:bf:
3c:14:82:22:44:c1:f5:07:4f:a6:3c:46:e4:fe:bd:
d3:7b:1c:38:44:d6:73:b9:5d:36:23:e4:8a:d8:4a:
b0:06:0c:02:95:81:b9:f8:93:55:0e:1e:eb:b6:b5:
b9:04:2e:a5:1f:2f:86:4b:b6:8e:82:8c:9d:1f:57:
50:2c:92:ce:4d:e2:31:0c:56:2e:90:2c:ef:c3:00:
09:8a:dd:77:ac:fd:81:14:7d:92:aa:36:3a:de:09:
7c:3a:9c:f8:e6:0b:d6:9f:e9:eb:45:3e:b1:0d:31:
d4:0f:df:15:e5:ad:c2:ba:01:d5:f8:e5:66:0f:9a:
d4:73:aa:cf:07:ab:16:c3:38:86:18:3d:d7:3b:d1:
ce:68:77:4a:7f:af:6e:0b:83:0c:70:6b:e2:1a:52:
bd:4c:4b:24:e1:b5:85:ac:69:93:f4:0f:cb:34:a9:
e1:29:71:74:52:61:d5:af:a1:ca:09:61:9e:56:c0:
2d:66:ce:44:d9:93:3f:40:be:3c:8b:4a:6f:b9:00:
e7:71:c7:38:6e:3e:68:83:2c:09:66:72:8b:01:7e:
ef:78:e8:42:6c:7e:41:65:17:08:9f:3d:90:bb:c6:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:A5:C6:72:08:D6:41:1F:AC:28:04:A6:C2:F6:EB:DE:CD:2E:83
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.212.0/22
Signature Algorithm: sha256WithRSAEncryption
43:8c:7c:82:a9:19:d3:b8:c5:8d:4c:09:ae:68:98:53:ec:cc:
29:f3:d9:2d:19:27:c2:51:1b:7d:a5:48:07:41:6e:59:49:d3:
e7:0f:86:e9:12:1a:90:1b:bb:c0:88:3f:b3:35:4f:5b:b6:c0:
02:43:e3:ef:a8:6a:40:57:0e:21:d8:cc:77:20:fd:5a:6a:cf:
2e:8f:d1:ea:ee:a3:ae:3f:97:3a:4d:25:49:74:ba:58:71:39:
98:3a:80:78:1b:c2:fe:ff:dc:aa:aa:f8:ec:96:80:f1:6e:93:
6b:7b:5f:31:eb:a2:01:4a:00:bb:4d:49:c9:98:a6:f4:79:e3:
33:de:0d:68:e2:a0:db:23:83:8c:74:6e:c6:00:83:62:bb:af:
2a:48:78:3f:7a:a7:56:9c:74:44:43:73:08:0b:21:cd:5a:ea:
29:dd:4b:04:0c:e8:b8:80:f0:5e:99:9c:37:04:1c:be:3d:d6:
66:3b:f4:b4:33:8b:55:1a:eb:59:11:62:35:52:07:34:e3:08:
f7:d5:47:b1:92:6e:ea:8f:72:9a:f5:69:b6:17:2c:7b:5d:67:
18:f1:15:03:36:24:5f:ff:66:7a:0f:06:ae:62:ec:99:9d:1e:
c2:8f:17:54:3e:2d:38:b9:fe:c1:d9:77:d0:80:c7:ee:cf:29:
65:58:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:51 2025 by rpki-client