Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/l-6NCMHZM7DrTuePY72AbCnxFek.roa
File: l-6NCMHZM7DrTuePY72AbCnxFek.roa (raw, json)
Hash identifier: ydleP/x+zOrWClqV/h9qf+tn8PrEsZ0p3qkdI2cuttE=
Subject key identifier: 97:EE:8D:08:C1:D9:33:B0:EB:4E:E7:8F:63:BD:80:6C:29:F1:15:E9
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 98
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/l-6NCMHZM7DrTuePY72AbCnxFek.roa
Signing time: Tue 28 Jan 2025 00:18:45 +0000
ROA not before: Tue 28 Jan 2025 00:18:45 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 28 00:18:45 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=97EE8D08C1D933B0EB4EE78F63BD806C29F115E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:71:e8:b3:18:0a:bd:30:e6:f3:f3:1c:d4:
8b:83:dc:cf:85:22:3d:77:aa:23:59:45:8d:45:3a:
be:7f:01:ac:da:33:22:ad:ea:97:f0:89:20:97:9d:
ac:ad:d5:61:10:97:ff:a1:c0:44:d6:ed:61:0e:cd:
af:44:06:a3:a1:08:c5:8a:df:f9:6b:2b:c6:cf:9f:
59:f0:67:46:94:05:51:3a:dc:6a:86:eb:5a:74:7d:
e1:43:10:37:6e:62:c5:6c:1a:cb:29:65:11:61:1c:
06:8c:45:f1:bc:7e:a5:1f:70:14:76:22:11:6b:4d:
7c:b2:e4:77:95:04:ff:24:47:34:0f:f5:25:fe:fa:
7c:4b:ed:c6:f7:1d:f8:7e:55:55:a6:f6:93:11:95:
ec:84:fe:69:bb:fa:c6:2c:f2:04:73:72:a4:61:c8:
ae:cf:e1:60:77:b3:24:06:90:85:56:c6:5d:12:e7:
e3:05:62:fe:58:43:04:22:bb:2a:8a:9b:90:97:71:
8e:1e:2f:4d:ec:87:90:17:fa:0b:cf:3c:43:bd:50:
5c:84:23:21:18:94:5b:7c:10:99:a9:fd:df:d4:1a:
4d:e2:d4:9f:24:69:ff:3f:9a:b1:4b:7d:88:4a:98:
89:e4:06:9d:c6:db:65:ab:cd:32:c5:59:36:84:b3:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:8D:08:C1:D9:33:B0:EB:4E:E7:8F:63:BD:80:6C:29:F1:15:E9
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/l-6NCMHZM7DrTuePY72AbCnxFek.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:64:54:06:3e:21:5c:95:61:17:e3:4d:1b:b4:6c:07:73:fa:
a3:7d:cc:91:2a:86:b3:35:6a:1b:db:0d:ec:8a:53:19:63:6c:
df:fc:4a:87:d5:98:f7:6e:ad:2e:58:ce:b1:a6:05:64:04:2b:
eb:7b:ee:86:04:47:af:22:93:31:f2:94:eb:f2:67:38:d0:83:
8e:04:7a:26:05:b1:a5:c0:1c:48:11:97:4e:77:6b:4b:ca:52:
a4:17:4f:f4:77:ae:3a:7f:44:9b:f1:41:99:c7:fb:2e:81:0a:
3b:7b:19:1d:89:93:46:91:1e:76:c1:d2:09:7f:2c:60:34:bf:
41:8c:6c:b5:64:5f:9b:19:c3:09:d7:1a:fb:a4:9b:df:c0:48:
52:21:fc:22:5e:4b:df:04:ef:ae:b6:8a:33:9f:58:5d:0d:2a:
f1:4e:56:d1:bf:0e:3b:1b:29:ae:16:d0:89:81:b6:13:e2:11:
34:28:ee:14:66:9b:94:0f:21:6c:70:0a:98:7b:5a:35:7e:16:
bc:e4:53:fb:09:36:0b:e2:51:74:38:90:59:1d:d7:8e:76:be:
de:04:db:87:b8:ac:53:df:55:5a:06:65:d5:35:d0:4e:0c:ab:
32:34:f7:29:ab:16:02:e9:f2:04:4f:5a:45:06:82:59:b9:64:
aa:95:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:19:42 2025 by rpki-client