Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa
File: 0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa (raw, json)
Hash identifier: Xok8e/bMa7YfCFJWTn4ud/hpaSQxu/g9cqFY0wseydA=
Subject key identifier: D1:9C:B2:D4:8A:7D:09:93:E3:4F:63:A3:45:F1:BB:C1:C5:54:DF:F5
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 29
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa
Signing time: Wed 10 Jan 2024 01:11:10 +0000
ROA not before: Wed 10 Jan 2024 01:11:10 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 10 01:11:10 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=D19CB2D48A7D0993E34F63A345F1BBC1C554DFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:ec:9f:2c:06:67:a2:d6:01:9c:17:cc:75:
bf:17:99:c2:5e:37:56:be:c1:f6:23:51:54:5a:ad:
e6:d4:4e:a7:7c:df:20:9f:3e:61:b1:28:6d:23:4e:
59:28:ef:54:8d:3a:66:8c:f3:79:ce:dd:ba:de:09:
9f:9f:a3:bd:3f:69:42:3e:fd:13:7e:16:35:ae:04:
a1:77:52:6e:82:f4:1f:29:cb:7f:94:5f:19:96:ef:
a7:8a:9c:c2:d0:3e:72:22:11:1c:e9:b0:e6:56:b1:
98:72:c4:f0:26:cb:a1:43:e0:84:2e:dd:bc:95:6c:
40:ad:95:03:5b:f9:5b:df:47:17:65:e6:c0:39:09:
de:2e:f2:ec:c8:01:06:dc:4e:af:03:14:08:19:29:
21:eb:6d:35:32:76:77:a3:63:85:8f:8e:1f:20:17:
31:f3:f6:6c:81:4e:51:06:a2:90:45:92:ad:48:8f:
8c:0f:81:5f:99:eb:a0:6c:93:ff:13:f4:c6:83:d6:
02:14:ad:a7:fa:b5:89:0a:58:2c:2f:42:45:ed:93:
7a:82:98:a0:9f:ea:6f:43:c0:29:a1:b6:78:b9:d7:
8a:1f:a2:49:9d:43:09:cb:d5:19:e1:93:13:6f:09:
fe:52:7f:da:c0:fb:f3:a8:f6:7d:7d:54:ee:d2:c6:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9C:B2:D4:8A:7D:09:93:E3:4F:63:A3:45:F1:BB:C1:C5:54:DF:F5
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0Zyy1Ip9CZPjT2OjRfG7wcVU3_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.64.0/22
Signature Algorithm: sha256WithRSAEncryption
91:e3:c8:52:3d:a2:88:43:9b:6f:99:da:5e:fc:a2:eb:3f:c3:
9f:5e:b4:c8:65:8f:fa:4e:c9:31:e9:09:bf:22:1b:09:0f:3e:
0e:9d:b3:51:81:8b:58:45:97:a9:bc:a6:45:90:fa:46:71:5d:
62:98:75:b2:21:e8:e4:e1:73:74:0d:4f:41:41:a8:8c:58:a7:
53:01:53:8a:0a:f6:85:8b:cc:38:0d:42:4b:aa:05:a4:c9:6f:
07:8a:b0:cc:c6:40:2e:ca:06:20:ad:17:d2:fc:cf:51:9f:9b:
b7:83:96:f6:33:77:74:ff:b6:d5:60:21:b2:8d:48:04:a5:40:
bd:12:9a:db:ce:be:89:1c:de:2e:b3:80:f1:b7:d4:b4:1b:5a:
b2:2f:85:a0:98:70:ef:8f:e6:48:a0:4c:c8:a8:ad:00:43:82:
a4:4c:6b:19:43:c8:7f:37:97:a1:12:28:3a:71:08:88:3a:a8:
11:05:dd:4f:25:9b:76:09:8c:29:83:72:75:ec:b6:c9:b4:04:
72:d3:50:fa:a2:ed:45:ae:2c:61:a0:33:dd:f4:de:7c:59:0a:
56:13:90:6a:e9:64:fa:e8:2b:71:fd:ba:97:3b:fe:7e:f0:1f:
82:18:a7:32:ee:bc:50:6f:bb:50:29:10:34:c1:f3:f1:ef:c8:
b8:73:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:36:21 2025 by rpki-client