![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa
File: RM3TW-1KwzCS38--UhfeopVSYhE.roa (raw, json)
Hash identifier: drNVBoGf4Cgi6r7vUyni5fhSnB90NEWGsB6ZXvMZ1ik=
Subject key identifier: 44:CD:D3:5B:ED:4A:C3:30:92:DF:CF:BE:52:17:DE:A2:95:52:62:11
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 0B
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa
Signing time: Wed 20 Apr 2022 08:47:24 +0000
ROA not before: Wed 20 Apr 2022 08:47:24 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 61.123.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 08:47:24 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=44CDD35BED4AC33092DFCFBE5217DEA295526211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:73:10:11:28:4b:cb:23:19:4d:d7:0a:91:
86:c3:2a:53:eb:e4:25:70:0b:27:9c:e5:7a:67:9e:
b5:71:d8:7e:60:53:22:91:df:ed:3e:3b:9b:4e:a8:
4a:5f:da:6d:67:92:72:06:a2:c8:7a:ac:99:01:8f:
18:a5:66:b8:c4:19:96:5c:85:25:a3:14:ff:1f:eb:
28:10:41:ea:a6:0c:2c:ca:16:c5:25:fc:93:8d:96:
87:6d:80:5f:eb:87:fb:f4:77:39:af:ba:a9:9b:af:
3a:df:9a:fb:92:b6:92:70:34:be:c8:4d:a8:94:1a:
c5:97:2a:09:2a:dc:73:75:41:fb:06:97:96:da:25:
c0:66:ce:95:1c:a3:a0:80:6e:b8:6b:98:1e:4d:d5:
53:d8:af:29:11:d0:13:08:77:81:3b:8e:7a:93:00:
ac:e2:f1:8d:6f:be:62:4a:c1:ef:2d:58:59:24:68:
d1:0e:e4:40:36:eb:6b:e4:e1:92:e2:6f:bc:c0:9f:
c9:56:6a:60:c2:3a:7e:f4:83:48:57:0f:c6:c6:d6:
09:aa:97:e0:f7:49:51:13:06:bc:14:4e:2b:c1:cc:
95:6a:4d:c8:d0:8a:88:0b:fc:8b:b6:2a:54:c1:83:
d1:61:2e:c8:05:07:a4:4e:6a:76:1d:a6:21:3a:27:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:D3:5B:ED:4A:C3:30:92:DF:CF:BE:52:17:DE:A2:95:52:62:11
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa
sbgp-ipAddrBlock: critical
IPv4:
61.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:66:84:b1:64:87:ea:09:d6:c5:a4:3a:8d:07:89:49:72:08:
8f:d1:fc:ce:a3:10:c7:b2:5f:97:ea:b2:b4:12:26:af:a4:98:
5c:bf:af:ca:82:5e:3c:4b:75:de:c2:b7:e2:8e:f5:db:44:7f:
76:2d:d0:01:28:aa:80:ad:7e:f7:3b:06:87:c8:05:1a:eb:a7:
11:71:40:3a:ae:2e:55:04:31:e8:05:33:68:8d:08:8e:c7:52:
21:e0:00:bc:a2:dd:dc:a9:b9:a6:af:f7:85:4a:db:2c:22:59:
13:ac:6e:34:94:25:5f:65:73:6f:12:e0:ff:5a:ce:ba:40:54:
75:84:25:88:68:1a:a1:9d:0e:f2:0a:f0:29:1c:32:33:bf:1e:
2f:e8:ff:e1:fd:d0:74:78:5d:f2:12:ae:a0:d9:fa:86:b1:c5:
ed:38:ed:8e:f0:a1:e8:89:ae:40:c3:f0:ca:e8:49:00:f4:46:
04:87:1b:b3:b1:b4:f8:73:2a:ce:96:39:66:58:f0:95:8a:f9:
3e:34:42:f2:ed:e0:bc:ee:7c:2d:f7:52:0e:45:c7:3d:66:8c:
54:58:c5:e1:73:63:1b:c5:53:fa:c8:00:e1:44:f1:8f:6d:27:
4f:3d:95:05:0c:0f:07:7d:43:2d:94:e3:a3:7f:9c:7d:8c:fd:
70:db:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:52 2025 by rpki-client