Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4mH7SSBxcQ8wkzADoEnigmq1DQ.roa
File: Z4mH7SSBxcQ8wkzADoEnigmq1DQ.roa (raw, json)
Hash identifier: gOkNYwX08Rey/R4fztlglSN8/tfA18UeNpSaqwsUDhI=
Subject key identifier: 67:89:87:ED:24:81:C5:C4:3C:C2:4C:C0:0E:81:27:8A:09:AA:D4:34
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01FD
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4mH7SSBxcQ8wkzADoEnigmq1DQ.roa
Signing time: Mon 30 Sep 2024 01:29:54 +0000
ROA not before: Mon 30 Sep 2024 01:29:54 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 9371
IP address blocks: 112.78.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:29:54 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=678987ED2481C5C43CC24CC00E81278A09AAD434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:8e:68:17:0e:a5:0a:c1:95:8e:3c:30:b0:
56:ae:e9:91:fd:ed:20:4e:87:eb:5b:d9:64:bc:cb:
99:61:76:45:49:ef:ef:53:95:66:ed:b3:70:9c:7c:
85:b6:35:21:4e:8b:e7:fc:51:85:bc:fe:24:34:ad:
3a:3d:c9:93:95:6b:bd:00:91:c9:6e:d7:f1:fd:8d:
33:c7:ca:4f:96:60:44:e8:af:ca:b2:59:92:0e:68:
2d:b3:08:cc:00:0e:b4:06:59:c2:ff:13:2c:6f:c6:
09:20:e1:97:19:ec:61:4f:fd:2c:d6:62:cd:6b:cb:
4b:49:ad:ad:00:9d:b5:83:c1:ce:79:0c:4d:4d:0f:
92:77:20:87:44:b9:32:95:89:ad:9d:3f:cd:10:40:
e6:46:0f:b7:a2:07:42:71:5a:1f:a8:3b:ae:b6:00:
3a:d2:ce:d2:a2:a7:61:8c:e9:4e:7e:4e:48:9d:4f:
d8:bb:46:2d:95:d2:3c:e5:b4:42:51:28:15:4d:cf:
87:4b:d5:2d:06:17:2a:5b:3d:da:74:ae:7b:bc:a4:
84:d5:a8:00:47:3e:77:d5:18:44:4d:44:35:e3:73:
82:e1:0f:77:07:fb:41:0d:d3:4a:f2:12:f7:bb:83:
bc:5f:f1:2c:81:1e:96:6e:62:aa:b1:a1:2f:84:ea:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:87:ED:24:81:C5:C4:3C:C2:4C:C0:0E:81:27:8A:09:AA:D4:34
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4mH7SSBxcQ8wkzADoEnigmq1DQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.192.0/19
Signature Algorithm: sha256WithRSAEncryption
93:07:0a:31:48:6c:27:94:35:0e:ad:32:a8:9f:50:e0:52:fa:
a0:df:c2:d8:08:c6:06:15:e8:22:b9:e5:17:88:cc:cc:ad:94:
6e:22:0a:b1:18:b3:e5:7f:74:6c:8b:f4:91:02:f1:7d:60:56:
20:b7:34:24:09:c7:8e:e1:8e:61:15:77:28:45:f7:8d:d9:7a:
67:cb:97:87:47:c9:d7:9c:69:69:be:b0:b5:7b:e4:e8:a7:31:
a3:51:6e:84:ff:9b:72:e1:cd:ac:b4:b5:68:90:1d:17:29:be:
1c:a6:e5:30:4e:c1:86:1b:5b:9f:02:87:b3:ac:2e:71:64:e8:
86:b6:2c:da:61:12:3e:26:dd:81:4d:99:75:b0:62:26:90:bc:
09:cf:fa:ac:c2:61:cb:fa:41:f8:72:88:dd:4e:4f:e4:27:a3:
74:66:17:a0:08:89:0a:fd:0c:de:f5:fc:94:51:bd:95:78:af:
3a:88:8e:f7:d3:ae:68:06:9f:cd:dd:b6:1a:de:e8:ab:1f:e7:
55:c3:dd:9c:02:d5:a2:94:57:4e:2a:df:84:e1:84:f7:2d:34:
1f:06:a6:ae:0a:c1:47:75:5d:7f:26:81:aa:6a:e0:ba:76:de:
0d:62:99:6f:08:c0:a8:4e:89:e0:a3:2d:c5:51:d6:02:20:8c:
7f:11:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:21 2025 by rpki-client