Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/BnSYQAhj7eNEDgdrGz_Cs-06iFk.roa
File: BnSYQAhj7eNEDgdrGz_Cs-06iFk.roa (raw, json)
Hash identifier: JkahM9Hvh1Yqi71j4EkHnKqXXNikNJN89MN7w4tL+eE=
Subject key identifier: 06:74:98:40:08:63:ED:E3:44:0E:07:6B:1B:3F:C2:B3:ED:3A:88:59
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: BB
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/BnSYQAhj7eNEDgdrGz_Cs-06iFk.roa
Signing time: Sat 01 Jul 2023 01:31:17 +0000
ROA not before: Sat 01 Jul 2023 01:31:17 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 9370
IP address blocks: 153.121.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Jul 1 01:31:17 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=067498400863EDE3440E076B1B3FC2B3ED3A8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:e9:d2:2a:43:a9:96:c0:4b:3f:76:ff:20:
c9:a0:05:a3:37:91:a4:c5:97:3c:df:a5:8f:28:b4:
e6:f2:1c:89:a9:dd:f9:96:8c:c7:3a:11:05:cb:05:
6e:d9:4b:4c:a9:da:9c:37:b6:7a:23:46:f7:ff:32:
e7:63:a4:45:40:27:f9:db:a7:b3:ab:e5:93:ff:fa:
11:7f:07:34:b6:dc:d6:91:df:cd:14:28:33:ec:f9:
1c:ce:3d:22:ca:8a:b0:ab:7a:75:43:70:48:07:0c:
88:1a:d7:87:6f:48:0b:5d:ca:d2:54:4c:a8:72:0e:
55:e3:f6:75:2a:cf:0b:83:5a:ba:19:2f:7a:d1:81:
60:6e:dc:d6:52:95:df:a9:b1:70:89:0a:18:6f:01:
f3:0e:f1:3d:36:a3:81:d3:4c:6a:59:a3:e4:10:80:
51:af:56:94:e1:d5:50:96:ce:24:4d:84:5f:42:74:
a4:74:63:3f:93:ae:b6:d7:dc:cc:b4:a0:dc:b4:87:
e2:20:18:0a:ca:fb:a0:96:f9:47:b3:c1:f3:6d:62:
fc:97:2f:d0:41:77:8a:b9:75:7d:fe:bb:7b:d0:0d:
5e:4e:e3:a0:63:81:8f:a7:00:39:af:6e:c8:b7:72:
d8:16:cf:99:0b:16:a7:24:c3:df:45:f5:62:97:d4:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:98:40:08:63:ED:E3:44:0E:07:6B:1B:3F:C2:B3:ED:3A:88:59
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/BnSYQAhj7eNEDgdrGz_Cs-06iFk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.121.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:2e:de:5f:c7:2e:3e:de:2c:da:55:7d:ca:af:6d:7c:78:c3:
8a:39:79:b9:18:bf:ac:33:ab:cd:22:ad:b5:db:fb:6c:94:fc:
e7:e7:19:cc:ab:30:60:e9:cb:95:9f:26:18:d1:14:91:f3:d8:
f7:ea:31:95:93:ff:40:5b:61:9f:92:61:15:8c:08:1c:d7:6e:
79:50:8d:2a:72:2c:5c:1d:57:69:91:d9:bf:e2:ec:fc:9f:31:
b3:49:49:4e:8d:e9:7c:8f:1b:8a:85:93:84:32:ad:de:72:9d:
ae:5a:84:ed:ec:22:e4:f0:8a:49:15:f4:b7:0a:42:59:5f:b5:
13:31:f7:0f:ad:b4:c7:71:0b:71:a1:36:bd:b2:45:0e:db:d8:
18:48:d8:51:55:7f:99:f1:de:d2:70:72:ec:ce:bc:7a:ce:be:
83:fd:33:02:5c:9a:3a:d9:1c:ca:03:0e:98:8b:25:97:a6:9e:
55:8e:99:c2:11:f8:87:79:1e:eb:cc:17:ad:d0:37:4d:d1:51:
3e:bf:c6:15:fb:6a:d3:bc:7a:6d:e7:e0:b2:e2:c9:05:69:7a:
08:f1:50:2f:17:4f:4f:a1:4b:7b:42:61:bc:c4:db:7a:b3:e6:
da:e4:2b:2c:42:52:5b:af:99:2b:40:29:9e:5f:36:4a:25:f6:
cf:9f:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:24 2025 by rpki-client