Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9QKCrDzF06gxwrzlFgo0vGfR9wU.roa
File: 9QKCrDzF06gxwrzlFgo0vGfR9wU.roa (raw, json)
Hash identifier: ee00WnW7uQjdvhqEMglsSqzBYG0dpevMxZlscKL/9U8=
Subject key identifier: F5:02:82:AC:3C:C5:D3:A8:31:C2:BC:E5:16:0A:34:BC:67:D1:F7:05
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 39
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9QKCrDzF06gxwrzlFgo0vGfR9wU.roa
Signing time: Sat 01 Mar 2025 01:29:39 +0000
ROA not before: Sat 01 Mar 2025 01:29:39 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 17698
IP address blocks: 117.18.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 1 01:29:39 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=F50282AC3CC5D3A831C2BCE5160A34BC67D1F705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:e1:24:6a:7c:3c:3e:62:18:46:fc:02:ef:
f1:60:a6:1f:9a:54:cc:24:a9:46:d6:30:e2:7e:6f:
49:e0:91:ef:3e:a5:b6:80:c3:fd:0b:02:6c:0d:86:
e7:40:89:cd:e3:b5:b7:ba:73:08:58:d3:d4:fc:15:
a8:ff:5c:c4:05:36:12:eb:e8:b2:2e:6c:09:52:70:
ca:60:39:bd:54:69:8c:c3:a8:9c:46:bd:b2:27:93:
c0:51:21:0a:59:32:8d:ed:5a:e9:70:45:bc:2d:fb:
67:4b:31:a4:db:51:09:04:cd:98:71:6b:67:59:37:
8b:ad:93:fd:2c:ea:a9:b9:68:a4:85:c5:36:41:82:
1d:72:5f:2f:b4:bb:dd:b7:ee:e0:c5:7c:1e:e1:8c:
e7:05:80:2d:8f:f4:70:95:c8:a5:06:b5:8c:4e:c6:
7a:cd:3c:be:cb:2d:db:33:4e:0b:f5:9f:18:65:f3:
c9:fe:6c:35:19:d4:29:7c:df:23:67:10:e9:b6:6a:
62:7b:0b:33:54:d7:10:36:c3:8c:8f:53:c7:ec:d9:
c8:7b:89:c5:42:42:56:e9:b2:23:a8:ed:57:5c:d7:
c9:bb:34:13:52:56:ad:6b:48:18:9f:33:17:2a:ec:
48:8d:76:97:6c:f5:6d:c9:f4:16:97:4a:7d:25:f6:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:82:AC:3C:C5:D3:A8:31:C2:BC:E5:16:0A:34:BC:67:D1:F7:05
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/9QKCrDzF06gxwrzlFgo0vGfR9wU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:b5:b2:4e:11:e4:bc:dc:2e:5b:cb:33:cb:1e:c2:31:6b:b3:
62:92:95:9a:c7:79:f5:ca:52:fd:0b:3d:50:a3:e2:2d:b1:17:
bc:0d:8e:fa:12:f2:21:65:20:1f:9d:c7:7d:e7:1c:b5:04:f8:
82:44:e5:96:d3:c2:ff:24:f8:45:b3:d9:71:2b:df:80:12:c0:
27:c4:88:63:5c:cb:fa:67:08:33:a4:5e:8c:13:4d:08:7c:ba:
08:aa:db:bb:51:a6:34:ce:f8:80:48:97:74:36:bc:ec:80:88:
6e:64:26:82:0b:35:db:97:a1:47:03:9a:94:72:7b:39:3f:89:
84:f7:05:86:b0:8b:6a:74:b1:89:a6:27:52:d3:ba:78:9e:cb:
b3:69:09:42:b7:6c:e8:bd:d3:0a:7c:ac:ba:f2:df:16:0d:26:
26:16:d7:1f:d2:19:57:a2:20:62:5a:44:31:5f:df:e7:56:aa:
85:e8:b6:ea:53:29:17:bc:12:b4:e3:e6:4e:31:b4:0d:a5:15:
35:7b:bb:a6:83:3a:a4:b8:8a:26:35:28:0b:6b:4c:9f:38:8f:
72:09:a8:67:f7:4d:1a:9e:ef:ae:24:f1:e4:17:81:29:db:93:
ff:52:d5:fc:fb:c6:c9:4a:40:17:ac:e3:cf:9d:1e:c1:4e:35:
90:a1:73:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:37 2025 by rpki-client