Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa
File: L_cD71bAOtMXNqk-46pTbytRIU0.roa (raw, json)
Hash identifier: AzyC0wVxNUNvqAySWojBgI1k0+n0aPeOn6BybSKEDN0=
Subject key identifier: 2F:F7:03:EF:56:C0:3A:D3:17:36:A9:3E:E3:AA:53:6F:2B:51:21:4D
Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
Certificate serial: 06
Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa
Signing time: Tue 14 May 2024 01:05:50 +0000
ROA not before: Tue 14 May 2024 01:05:50 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 131928
IP address blocks: 133.226.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
Validity
Not Before: May 14 01:05:50 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=2FF703EF56C03AD31736A93EE3AA536F2B51214D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:20:f1:65:70:c5:3d:0f:fd:bd:f2:ee:cf:
a6:e0:b8:ab:74:e1:b9:09:4b:fd:ad:f0:ac:e1:4c:
c0:ba:3d:31:0d:54:84:70:6f:1a:9c:c2:0f:ed:6a:
85:2e:b1:97:ba:39:91:ff:5d:5f:0c:47:4f:19:9b:
83:38:6d:70:46:de:f0:d6:99:45:d3:cf:87:65:c6:
29:d9:3c:97:48:dd:aa:a7:0b:19:8e:d3:6d:88:5c:
8e:ab:d7:84:92:ee:23:06:23:ed:09:df:81:12:95:
89:e6:5c:d9:91:18:b9:9e:d3:db:b7:6f:c4:09:b2:
82:64:d3:46:ca:0d:ce:72:2a:3b:d3:76:2b:f8:9f:
df:48:23:11:01:69:6a:41:95:11:fa:46:28:2b:cf:
a3:b2:89:9d:55:04:e4:9d:ae:28:82:85:e9:b5:7e:
e9:57:9c:44:e6:93:b9:78:aa:a1:7c:ba:d6:72:3d:
50:30:42:c0:ea:a3:9a:45:15:56:86:6b:46:a0:54:
d5:a1:85:0a:2d:fe:67:e3:fb:1a:dd:ab:79:1a:98:
27:3c:c8:f1:18:82:54:10:d4:6f:7f:66:1e:ed:e8:
88:a6:dc:15:1d:88:15:73:f9:92:64:09:10:25:3e:
4a:83:e7:0c:5c:78:c6:5e:9e:be:39:e0:2a:e6:d2:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:03:EF:56:C0:3A:D3:17:36:A9:3E:E3:AA:53:6F:2B:51:21:4D
X509v3 Authority Key Identifier:
keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/L_cD71bAOtMXNqk-46pTbytRIU0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.226.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:e9:b7:fa:82:77:8d:73:7d:eb:ee:91:15:75:70:b1:20:73:
23:0f:62:87:83:37:4e:cd:26:cb:b2:86:6c:04:7a:e1:47:e4:
89:d4:6b:c3:0d:79:b7:4d:e2:e3:b3:87:e5:db:40:56:7b:90:
cb:fa:a7:39:ea:55:5a:5d:63:3c:0e:fb:80:10:40:d4:4e:d2:
41:85:04:93:1f:f5:d2:1d:6d:c9:67:7e:bf:ef:33:6e:2e:2f:
60:68:b6:67:d8:04:50:51:5e:40:de:ae:26:1b:dc:6e:18:1d:
4d:ef:cd:6f:6e:d7:8c:4b:0d:29:e2:c9:4b:79:23:35:24:6f:
b4:b1:d6:d9:3d:4f:39:5c:03:d6:a8:64:28:73:f6:22:79:f2:
2e:29:b3:a6:1a:49:98:83:a6:ec:30:0a:1a:06:c7:d2:1b:d1:
01:b8:33:ce:37:e1:b5:0f:27:f8:ab:65:a8:82:09:25:95:a0:
9d:e2:68:d5:46:76:ea:44:54:89:0c:44:92:37:50:28:1b:47:
d0:49:b1:54:63:92:d6:0a:21:eb:52:7c:3c:3c:2c:cf:73:a4:
fb:7e:23:a4:51:41:10:19:69:6c:b5:1b:f1:63:08:36:21:e1:
e9:c2:fe:11:8b:97:1a:21:8e:87:16:cf:92:e5:d6:3a:12:9a:
b5:99:02:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:49:57 2025 by rpki-client