![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
File: BQX4IkVATJDZ76SBA6xb_y0llbQ.roa (raw, json)
Hash identifier: 6gHZLs+Z0u0YBJa/D4Did+vtqrXCmW9jLS34HdHVE4U=
Subject key identifier: 05:05:F8:22:45:40:4C:90:D9:EF:A4:81:03:AC:5B:FF:2D:25:95:B4
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 48
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
Signing time: Thu 13 Apr 2023 09:54:16 +0000
ROA not before: Thu 13 Apr 2023 09:54:16 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 37892
IP address blocks: 202.145.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Apr 13 09:54:16 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=0505F82245404C90D9EFA48103AC5BFF2D2595B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:b5:28:0c:7b:38:f6:25:ef:c7:be:62:47:
fe:7f:89:24:fe:d2:a7:d2:29:f8:be:a8:37:db:fa:
03:d8:7f:71:a3:9a:fd:98:81:49:f6:16:0d:6e:70:
f8:c2:9c:6b:95:f2:9c:0e:bd:a7:c0:f8:24:e7:33:
4c:ab:e5:ed:24:00:40:ca:75:89:a3:0a:08:c9:fd:
d4:96:8b:80:a9:b0:10:d8:45:5f:f9:4c:04:d3:75:
1a:f5:6e:82:62:dc:7e:7c:f0:80:0c:41:48:30:47:
4b:ee:fb:a6:18:e6:05:2e:62:f0:f3:a9:21:eb:05:
cd:f9:07:cd:3f:ad:d7:ef:78:01:15:f6:97:19:2c:
da:c5:78:14:bf:1b:9f:87:eb:bf:4e:32:7a:c4:9f:
f6:2d:d7:24:d4:40:9d:af:ab:db:6d:62:66:f8:e2:
c6:6a:e2:5f:31:41:c9:68:e6:fe:2a:9b:59:2c:15:
5f:ca:6c:05:6e:0e:71:8b:f0:7a:75:b6:a0:ea:99:
6e:0e:de:00:ed:9d:6a:b4:a6:57:26:cc:62:42:7b:
34:4f:13:56:cf:6b:59:5d:45:e9:9e:2a:d5:ff:94:
dd:80:19:fd:55:16:95:3a:fd:96:ce:2f:cd:05:ce:
7a:08:e5:de:4d:45:1a:b3:5a:8b:40:2c:30:4d:9a:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:05:F8:22:45:40:4C:90:D9:EF:A4:81:03:AC:5B:FF:2D:25:95:B4
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/BQX4IkVATJDZ76SBA6xb_y0llbQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
97:db:5e:2e:31:09:40:d0:62:a7:c4:c7:b5:83:92:e0:1a:d9:
b3:4d:e9:90:2a:1e:cc:5c:bd:a2:09:5f:2e:f3:22:9a:4e:dc:
bc:06:09:78:aa:2a:de:cf:0a:25:e0:e3:98:cf:74:54:0d:6e:
f0:4e:69:da:e4:9c:b2:57:9d:89:60:5f:20:52:36:ab:f2:0a:
da:86:20:a2:89:90:08:09:60:5e:21:ad:87:a1:28:fd:ab:8a:
c1:6a:a0:cb:21:9e:ad:db:e1:a8:e4:35:87:60:f3:93:4f:88:
df:9a:d2:ec:74:a5:89:bf:ff:59:41:e3:c0:69:d7:09:b4:a2:
8f:54:28:f6:7c:c0:5c:03:71:48:bf:92:5e:67:f0:ab:c9:55:
58:84:ef:97:7d:f9:bf:78:7b:3a:04:bf:11:80:55:20:37:57:
bb:1b:ac:83:98:1b:ce:e3:0a:51:47:0b:88:ed:3e:92:82:a2:
7b:63:85:2a:9a:37:4d:d0:aa:46:a1:0e:dd:87:7e:9a:76:8a:
6d:11:3b:17:61:2d:45:7a:e6:73:5a:f1:40:f0:39:78:4c:28:
8a:4b:ed:63:95:20:fc:71:c4:7b:2f:11:f2:fd:ea:d7:15:61:
c7:e2:41:6e:e0:c7:bc:f9:83:d9:f2:48:af:4c:f9:e8:1c:47:
8f:e2:9c:23
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD
RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTIzMDQxMzA5
NTQxNloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMDUwNUY4MjI0NTQwNEM5
MEQ5RUZBNDgxMDNBQzVCRkYyRDI1OTVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKHWtSgMezj2Je/HvmJH/n+JJP7Sp9Ip+L6oN9v6A9h/caOa/ZiB
SfYWDW5w+MKca5XynA69p8D4JOczTKvl7SQAQMp1iaMKCMn91JaLgKmwENhFX/lM
BNN1GvVugmLcfnzwgAxBSDBHS+77phjmBS5i8POpIesFzfkHzT+t1+94ARX2lxks
2sV4FL8bn4frv04yesSf9i3XJNRAna+r221iZvjixmriXzFByWjm/iqbWSwVX8ps
BW4OcYvwenW2oOqZbg7eAO2darSmVybMYkJ7NE8TVs9rWV1F6Z4q1f+U3YAZ/VUW
lTr9ls4vzQXOegjl3k1FGrNai0AsME2aVJ8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQFBfgiRUBMkNnvpIEDrFv/LSWVtDAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv
JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky
Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MzQvQlFYNElrVkFUSkRaNzZTQkE2eGJfeTBsbGJRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsqRHDANBgkqhkiG9w0BAQsFAAOCAQEAl9teLjEJQNBip8THtYOS4BrZs03p
kCoezFy9oglfLvMimk7cvAYJeKoq3s8KJeDjmM90VA1u8E5p2uScslediWBfIFI2
q/IK2oYgoomQCAlgXiGth6Eo/auKwWqgyyGerdvhqOQ1h2Dzk0+I35rS7HSlib//
WUHjwGnXCbSij1Qo9nzAXANxSL+SXmfwq8lVWITvl335v3h7OgS/EYBVIDdXuxus
g5gbzuMKUUcLiO0+koKie2OFKpo3TdCqRqEO3Yd+mnaKbRE7F2EtRXrmc1rxQPA5
eEwoikvtY5Ug/HHEey8R8v3q1xVhx+JBbuDHvPmD2fJIr0z56BxHj+KcIw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:10 2025 by rpki-client