Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Y_hxUqfSEuHHBpUJenOSBYrlWfc.roa
File: Y_hxUqfSEuHHBpUJenOSBYrlWfc.roa (raw, json)
Hash identifier: 342REpOm4pI8RQtADqguZ6iqOSW5GU7qI0EEEVpz+3Y=
Subject key identifier: 63:F8:71:52:A7:D2:12:E1:C7:06:95:09:7A:73:92:05:8A:E5:59:F7
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 3D
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Y_hxUqfSEuHHBpUJenOSBYrlWfc.roa
Signing time: Sat 01 Mar 2025 01:29:41 +0000
ROA not before: Sat 01 Mar 2025 01:29:41 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 17698
IP address blocks: 123.176.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 1 01:29:41 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=63F87152A7D212E1C70695097A7392058AE559F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:f0:04:8c:42:00:6f:ba:f5:dc:c8:d5:df:
37:d1:78:42:1f:ff:0e:58:fc:c7:37:8d:f1:a6:71:
b3:0b:80:20:8c:44:4b:69:fd:44:cd:bd:d6:ba:f9:
85:69:5a:64:8f:b2:97:e5:a2:ba:2f:06:1b:62:ce:
32:ab:ed:40:a5:de:5c:a2:4b:9c:ad:9b:b0:82:54:
e5:b5:64:74:0f:24:1f:15:46:f1:0e:10:c7:7a:6b:
c8:22:e9:7e:c3:7a:e0:67:f0:f3:05:cb:9b:f1:1a:
7d:e2:e9:33:15:6a:fe:83:24:7e:b6:5b:49:0a:13:
b1:86:d1:1d:1d:b2:e1:6a:a7:51:48:5b:d6:af:d9:
be:8a:46:85:02:ca:f4:80:96:aa:fd:da:88:78:32:
ec:57:1d:4a:ff:5b:70:79:2c:bd:db:ad:d0:8d:f5:
49:90:b2:6a:8f:9c:ce:12:73:cf:16:75:6f:36:21:
b1:f3:03:91:6f:f8:a5:96:93:17:06:f0:ca:6e:75:
6d:66:ef:97:6d:59:fd:27:54:8d:ec:12:a3:00:da:
9b:e3:cc:7a:c3:e8:9b:fb:b7:a3:55:c3:ae:25:ba:
75:8a:fa:8d:ac:1f:d9:05:48:29:2a:1c:e7:04:67:
ce:3c:61:27:7d:a6:bb:ac:f2:41:4f:74:30:85:95:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:71:52:A7:D2:12:E1:C7:06:95:09:7A:73:92:05:8A:E5:59:F7
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Y_hxUqfSEuHHBpUJenOSBYrlWfc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.48.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:e7:55:61:a1:90:dd:86:42:3d:60:c2:41:02:b0:72:b6:68:
8f:55:af:b6:05:58:63:46:21:41:f9:0a:03:90:3a:3d:43:69:
57:a4:21:61:2c:21:72:1c:01:fd:57:cb:f9:b3:33:a3:c9:db:
56:50:38:f8:53:14:5d:45:aa:ae:d1:bb:15:da:b8:84:08:d6:
f2:2c:fd:b3:e9:56:ed:7e:24:b7:ae:3b:2b:67:0b:14:28:24:
b9:7e:aa:ca:cb:36:67:12:7a:71:c7:b9:e7:53:99:b6:a2:b6:
dd:44:da:9a:d8:3d:2c:2d:bb:74:79:a3:9b:fc:f4:a3:3b:e1:
48:b2:10:59:b0:74:75:c2:10:99:84:fe:d2:f9:99:46:79:db:
c3:2b:b9:74:c0:59:ee:7c:b4:a9:2f:84:f5:84:f8:91:f0:97:
0c:37:c3:41:2a:42:61:7e:ce:41:51:13:5b:e9:b8:e7:09:7a:
7e:3b:1d:55:d8:22:b8:de:da:ac:80:0e:4a:9d:2b:5a:b5:bd:
4b:f3:cc:d5:0b:7a:d1:33:52:3e:82:70:e5:78:c4:f9:f8:4e:
a4:47:cc:c8:19:41:01:eb:af:96:6d:02:d0:9a:0c:5f:7c:f5:
ba:1f:cf:e0:1d:69:6f:c0:16:a3:28:eb:ad:dd:44:c8:94:ff:
a1:ae:44:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:13 2025 by rpki-client