Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa
File: DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa (raw, json)
Hash identifier: XDDuRY4AznXyQQPZOnCiA7jLISDo6whXir0Knz9WS2A=
Subject key identifier: 0C:C9:20:C8:1E:00:AD:7C:E9:B5:F7:0A:C7:71:A7:5A:20:C7:50:14
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: EB
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa
Signing time: Fri 31 May 2024 01:31:29 +0000
ROA not before: Fri 31 May 2024 01:31:29 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 9370
IP address blocks: 122.202.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 31 01:31:29 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=0CC920C81E00AD7CE9B5F70AC771A75A20C75014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:57:46:6e:04:54:2b:29:c1:97:13:6d:24:
e5:74:d6:8e:48:67:55:bc:03:6b:bd:95:07:1a:92:
8a:dc:98:b5:4b:6d:ea:be:53:2a:f6:82:06:80:eb:
b3:28:c3:5c:39:f3:9d:b6:e3:e0:3b:e9:36:03:83:
45:f7:63:39:99:0d:43:12:1b:0c:e2:66:c5:96:f2:
9d:fa:f6:47:06:20:6c:58:65:e8:1c:79:c1:90:a1:
b7:28:a6:41:94:6a:35:65:18:e6:70:c3:2b:3b:46:
4f:9b:52:45:5a:48:0b:50:7d:66:8c:5a:4f:dc:9e:
74:d0:5f:34:02:41:60:c9:5f:b7:1e:dd:39:74:1c:
63:c1:2c:43:47:f5:d6:dc:ec:c9:8e:8c:1a:e0:04:
4d:15:1a:52:a6:5f:42:08:93:ca:ae:19:df:2c:ad:
be:49:13:f2:2e:ee:bf:9b:81:e5:db:5d:27:8a:c8:
5c:c9:1e:96:8e:7c:b9:71:9e:74:1b:57:5b:87:2e:
df:2e:c7:8a:86:8b:e5:1d:2f:77:d6:e2:e3:5d:2f:
f3:43:cd:df:e2:d3:58:ef:60:37:f4:24:de:79:4f:
0f:77:31:d7:fe:6d:70:b6:ba:17:69:65:73:4e:ef:
98:e7:41:47:b2:ff:91:c3:f5:12:73:86:46:4c:ee:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:20:C8:1E:00:AD:7C:E9:B5:F7:0A:C7:71:A7:5A:20:C7:50:14
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/DMkgyB4ArXzptfcKx3GnWiDHUBQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.202.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:7f:7a:fb:fa:85:4e:a0:dc:b2:11:66:a5:29:8d:31:46:7e:
63:86:fd:89:15:e8:0b:42:b8:68:e0:5f:b2:50:b7:aa:b6:40:
63:81:44:f8:b7:dd:9a:24:22:03:ac:7f:94:f1:7d:47:bd:73:
2a:b9:21:28:51:bd:54:5c:f6:6b:21:0b:6b:23:9e:16:74:61:
0c:2d:32:ba:29:37:c2:11:cf:5d:63:a6:3a:00:72:3a:b3:67:
4b:9f:a0:89:5b:c1:74:27:c2:a7:37:96:78:e4:f1:a6:33:25:
88:a5:55:b8:da:d2:09:c5:c3:5b:ec:cf:1c:86:01:37:49:e6:
14:03:62:ad:d1:f3:90:d8:2c:71:98:d5:c3:e6:5a:9b:1d:b0:
2f:49:a0:5a:49:84:1b:55:ab:94:e6:16:16:49:3f:53:fb:9d:
fb:c5:a0:15:63:5a:35:ca:d6:bc:87:79:37:6d:09:9f:1d:9d:
96:ae:f7:c6:78:40:74:e1:15:cf:d8:a4:4e:57:6f:4d:6a:88:
62:81:d8:5e:4e:32:c7:bc:7e:30:48:34:08:67:b1:3a:f8:66:
b7:21:5a:71:66:45:e4:22:bb:2e:ef:85:ec:38:f6:41:85:90:
43:4b:62:1c:af:85:71:fc:d8:6c:95:6e:16:12:c8:de:1b:61:
4e:86:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:00 2025 by rpki-client