Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
File: OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa (raw, json)
Hash identifier: d89xplN+AQR8zqNFnEwR4MgVGatQ81Hj7MIRciaW5bE=
Subject key identifier: 38:46:86:7A:2C:ED:69:5B:EC:8C:96:4B:09:F1:4F:EF:3D:9F:D1:39
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: 19
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
Signing time: Wed 28 Feb 2024 04:59:54 +0000
ROA not before: Wed 28 Feb 2024 04:59:54 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 7679
IP address blocks: 203.135.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Feb 28 04:59:54 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=3846867A2CED695BEC8C964B09F14FEF3D9FD139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:fd:1e:9c:a1:ea:ea:45:3d:79:bd:80:20:
ff:2a:cd:52:29:1b:e9:1c:db:0e:9a:1e:eb:5e:70:
50:31:f7:86:e8:c9:b4:42:a6:c1:e0:48:94:33:46:
2e:3b:dd:e4:62:99:ec:84:b1:b0:e1:fc:10:f2:95:
30:a2:e0:bc:2f:28:67:bc:93:e5:6b:4c:80:23:ef:
82:f1:5d:04:3f:52:d9:8e:47:c6:d3:fb:7d:87:ab:
30:21:37:6f:72:80:a6:31:fd:dd:ee:8e:81:0e:40:
9e:97:06:71:43:5c:22:b8:74:00:66:9b:29:82:34:
5d:ff:b4:12:15:f3:65:d9:ff:6f:4f:65:eb:f4:56:
5d:4f:14:94:c0:e8:8a:b7:99:0e:75:6a:cd:ff:f8:
bb:a1:a2:81:4d:39:e3:a9:5b:e4:a5:be:83:07:36:
28:57:06:be:72:df:32:73:c1:d0:de:37:69:a6:41:
ec:ea:9f:6e:fd:cd:2a:b8:92:1b:0c:7d:6c:bc:3b:
41:8c:fa:2d:2f:79:04:d8:10:15:94:2f:31:5e:be:
14:13:ef:fc:80:9a:51:fa:77:07:8b:f4:a4:a4:07:
be:43:fd:f4:60:0e:d8:69:79:ca:24:5a:33:e2:cc:
cb:9b:f2:4e:5d:93:67:66:f9:8f:55:bd:48:59:c9:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:86:7A:2C:ED:69:5B:EC:8C:96:4B:09:F1:4F:EF:3D:9F:D1:39
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.135.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:1e:64:33:1a:77:63:68:7e:c2:4e:3f:e5:6e:45:48:9a:a3:
b0:5e:04:08:04:4a:3a:c3:1a:3e:31:fa:be:5d:6c:89:a1:24:
58:c2:bb:c4:42:1d:6d:cc:b3:97:49:62:4a:4a:24:d3:c0:bc:
17:b7:79:e1:47:35:82:eb:58:aa:ad:69:b6:3b:be:e3:4b:71:
93:50:fe:89:72:21:d4:78:05:27:f4:dd:2f:5c:a2:da:9d:ad:
32:9d:5c:f4:a9:4a:48:56:1c:3d:fa:4f:b1:08:f1:9d:50:ae:
23:c1:2a:bf:15:cd:d8:00:e4:f3:38:4b:7d:f3:1b:53:a2:8c:
0a:a6:4b:de:e4:e9:9a:e2:eb:59:6b:9d:8a:b1:17:75:a7:ef:
c7:cf:30:e4:89:ac:d7:06:20:3c:56:c4:ef:2f:1f:00:d0:5d:
c9:4e:08:d8:e4:3d:9a:da:23:3e:85:9a:93:35:e8:39:fb:20:
d2:23:b6:c9:fb:54:aa:39:bf:34:d3:04:30:cf:65:ce:c1:2d:
6c:c3:0f:3c:07:de:58:21:f2:d6:73:ee:3b:82:25:2b:62:84:
82:39:85:ba:9a:0b:c6:38:91:aa:d8:00:82:52:b1:a5:0e:00:
d1:0f:ff:59:54:b4:cf:08:24:46:15:8b:5d:85:c6:7f:a8:bc:
54:1c:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:58 2025 by rpki-client