Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/Ps9Nm0dtkjVJwCtTap6CBZte4EA.roa
File: Ps9Nm0dtkjVJwCtTap6CBZte4EA.roa (raw, json)
Hash identifier: 2jz6enUZ0s4qcq1AALB4IMiento3GdOidqvkglHqYNQ=
Subject key identifier: 3E:CF:4D:9B:47:6D:92:35:49:C0:2B:53:6A:9E:82:05:9B:5E:E0:40
Certificate issuer: /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial: 52
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/Ps9Nm0dtkjVJwCtTap6CBZte4EA.roa
Signing time: Fri 31 Jan 2025 01:31:00 +0000
ROA not before: Fri 31 Jan 2025 01:31:00 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 58785
IP address blocks: 157.118.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Validity
Not Before: Jan 31 01:31:00 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3ECF4D9B476D923549C02B536A9E82059B5EE040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:ce:88:41:ee:37:b6:ab:b6:e6:bc:31:a1:
d2:e3:5f:f8:c3:48:fd:6b:b6:b7:1f:d1:fa:28:e3:
ce:d6:38:f3:5c:7e:0b:19:b0:06:6c:74:8d:e1:9a:
03:06:c9:b3:37:07:15:d1:53:92:1c:1f:b4:2a:49:
c8:18:60:94:8a:33:19:09:96:19:94:4a:17:21:19:
7c:85:59:79:5a:48:70:17:41:d0:38:c0:5e:b5:dd:
6d:89:cf:b9:c0:fc:ab:a8:b4:da:54:ff:93:6c:14:
c8:92:59:55:65:bc:6d:0b:87:98:1c:a8:51:cb:bf:
25:a1:d8:59:fd:45:cf:51:7b:e0:c0:48:85:a0:b8:
4e:74:e1:6a:91:b1:66:6e:3c:20:0b:c8:aa:22:00:
2c:8a:59:46:36:ab:81:d9:f6:8a:06:33:df:fc:f8:
02:7e:2b:8c:d9:67:99:2b:62:bb:a3:0e:08:49:33:
cf:c0:9b:9b:b6:36:cb:49:bb:91:70:0c:d9:a5:36:
9c:7c:e4:b6:ca:28:02:09:a9:ec:3a:57:8f:c6:b2:
f1:df:79:1d:7d:07:3f:d7:99:25:5e:3c:0e:b1:7c:
f9:47:d6:aa:3e:c3:90:63:b3:0b:a1:ca:01:0c:4d:
ab:35:75:81:c5:61:b6:59:17:b3:46:0d:05:d8:81:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:4D:9B:47:6D:92:35:49:C0:2B:53:6A:9E:82:05:9B:5E:E0:40
X509v3 Authority Key Identifier:
keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/Ps9Nm0dtkjVJwCtTap6CBZte4EA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:48:45:50:94:69:7b:f3:b0:41:40:37:c1:6c:76:62:64:f6:
1a:46:4d:2b:ab:af:39:95:c4:37:a9:41:9e:04:d6:0c:1c:62:
94:7d:0b:c3:5e:05:b3:a1:77:5e:51:b5:02:da:03:4b:91:01:
78:8b:41:53:9a:5b:9f:62:e5:61:f2:42:4d:f1:0e:51:05:f2:
af:0d:4c:8a:a6:68:32:00:35:83:6a:d1:f1:16:67:69:f8:b4:
b5:16:f3:72:8d:95:29:5f:db:26:7d:23:2a:af:5f:1e:50:e9:
2e:4a:74:2e:e3:17:e0:13:f9:23:7e:37:20:44:97:ed:9b:98:
b2:80:fc:8e:b1:4e:1b:07:19:f9:19:63:2a:15:f5:49:f7:00:
61:0a:44:cb:31:3b:f5:68:5d:85:34:96:87:a8:04:c7:b5:d8:
84:46:34:2b:24:2d:dd:32:ba:b0:35:c5:82:ca:98:20:2e:db:
9d:6b:85:2e:74:ca:51:1e:fc:43:67:e0:cc:59:c6:fe:60:da:
8b:04:d6:79:40:a6:a4:04:88:8a:a8:6b:72:fe:c1:cc:eb:25:
dd:42:75:89:fa:77:2d:7a:f6:69:f7:03:80:a3:a5:d1:86:fd:
fc:74:30:bc:31:c6:18:33:7d:a1:b5:0f:1e:2e:62:3f:e3:38:
b9:9b:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:26 2025 by rpki-client