![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa
File: qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa (raw, json)
Hash identifier: 6f9JdcBfcfvyWKXM5aGloa6ObkXSuBMq2taXhYFn934=
Subject key identifier: A9:9F:BD:17:DC:D5:2B:23:97:B1:EF:C3:93:6F:BC:B6:0E:6F:76:16
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 15
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa
Signing time: Wed 20 Apr 2022 09:07:30 +0000
ROA not before: Wed 20 Apr 2022 09:07:30 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 218.216.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:07:30 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=A99FBD17DCD52B2397B1EFC3936FBCB60E6F7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:33:27:fc:2e:0b:48:e7:50:b2:5e:75:3d:
41:52:2f:b6:06:b3:f6:59:ac:80:2b:ee:8e:fe:32:
76:ff:4f:9b:13:16:a5:bc:0c:4b:12:52:34:f1:d7:
bf:2b:37:68:20:4f:e9:0f:9e:cb:dc:d7:a2:18:3a:
d0:4c:b5:2d:77:48:fc:2f:b5:e1:95:9c:81:1e:25:
7b:91:55:02:77:97:e8:43:5b:db:78:3d:10:f1:2b:
60:6d:cc:e4:ad:ad:cf:6d:23:a1:c1:42:1d:6c:72:
d5:04:b7:f2:4d:20:15:cb:71:b9:35:f4:e0:d3:90:
1a:9b:1c:d1:33:0b:8b:e9:25:49:c0:2f:1a:6a:b1:
cd:0b:72:02:df:c0:d4:07:d9:b7:e8:15:cd:a7:1d:
7c:20:40:2e:13:8d:0e:fd:a1:6f:cc:3c:b4:58:49:
08:09:7b:3e:9d:11:5f:41:85:6d:85:ce:11:5f:c8:
24:aa:3f:be:7f:57:80:46:a1:a3:38:9e:01:0c:cf:
88:b2:ae:2d:91:5f:97:08:43:5a:09:1b:ec:d5:33:
5f:04:de:db:0c:33:c1:b3:6d:1f:da:a2:9f:e4:26:
4c:35:38:90:84:bb:1e:eb:ab:ad:9c:a5:42:07:2b:
0c:8e:f1:74:0f:ea:09:3f:28:77:ee:4c:1c:1d:73:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:BD:17:DC:D5:2B:23:97:B1:EF:C3:93:6F:BC:B6:0E:6F:76:16
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa
sbgp-ipAddrBlock: critical
IPv4:
218.216.88.0/21
Signature Algorithm: sha256WithRSAEncryption
42:5e:7c:67:16:c2:b1:5a:af:68:df:66:2b:2d:e6:64:b4:24:
a1:9a:b3:a8:95:fb:a9:a1:cc:62:df:f5:c2:09:6c:c2:db:85:
d6:4c:4d:80:0e:cf:51:65:3e:ca:db:74:86:16:7d:ad:f0:27:
2f:ee:c8:b2:20:0f:10:11:1f:ee:f4:cd:16:1c:7c:34:e0:37:
48:0d:cf:ac:60:df:d4:62:af:92:4a:b9:79:05:f2:f1:df:a1:
d2:00:7e:e0:93:ca:35:da:5e:8e:47:40:bb:9f:fa:de:ac:fc:
65:37:76:8a:09:d9:22:65:61:78:68:e6:1d:17:e9:71:a5:9c:
75:f6:70:3d:05:cb:26:3b:ef:d2:79:5f:80:d9:09:09:cb:f6:
7e:f7:25:60:d8:a0:98:b4:4e:0c:0b:99:94:5b:64:9b:a9:f7:
7c:ac:13:6a:b0:8f:19:c4:13:8f:72:9c:48:27:59:35:13:91:
8e:00:25:1d:a6:32:af:a6:35:54:69:85:fa:23:84:bb:61:a5:
5c:87:45:5d:57:87:09:43:23:d0:d6:e3:6b:df:9c:fa:d5:2b:
64:1d:ed:57:74:c9:c6:78:39:88:3b:71:c3:58:a9:5c:cf:83:
c5:a9:01:59:98:69:97:cc:c4:f5:1f:13:94:e2:6b:8e:9d:8b:
8f:76:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:07 2025 by rpki-client