Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
File: ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa (raw, json)
Hash identifier: QNIF5bLal3gtqTDJGECvN9G0soTQwPCj94Wt5LVKK54=
Subject key identifier: 65:D6:28:1A:1D:0E:49:B0:CD:3D:08:1E:6D:04:CC:17:38:5B:66:DD
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0283
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
Signing time: Tue 30 Apr 2024 01:32:18 +0000
ROA not before: Tue 30 Apr 2024 01:32:18 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:6000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:32:18 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=65D6281A1D0E49B0CD3D081E6D04CC17385B66DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:77:47:99:50:61:3b:f2:38:3f:bb:4a:03:
37:c0:c3:41:41:57:8b:85:1d:a0:f4:03:f6:38:de:
bd:a3:ab:46:f0:85:36:16:65:00:3b:ff:98:9e:20:
f5:9f:25:16:75:65:00:4e:1b:6c:32:a8:3f:ae:9e:
b6:a9:fd:1a:a2:26:57:70:3e:e5:78:f0:ac:19:16:
a7:01:49:da:fd:62:d8:a8:7f:f9:30:65:0d:0a:54:
6e:67:81:5c:49:d8:ef:4d:7a:96:fb:0c:03:47:c2:
b0:b4:26:14:e2:27:9f:b5:6d:28:27:1b:ed:8c:fd:
f3:3c:df:23:92:b0:b8:71:dd:1c:10:d8:ae:b1:20:
ab:00:8b:53:4d:bf:af:31:61:0b:39:09:26:8d:ce:
73:54:96:0d:a6:6e:cd:ab:4f:fe:ff:57:3f:8a:f6:
13:1c:df:c6:95:71:b8:c5:ab:eb:d7:6e:64:65:79:
a6:fc:91:7c:e0:de:72:c6:7e:e7:71:18:3d:e6:bc:
19:c3:db:11:5d:6e:97:e9:1e:22:9c:22:15:7a:98:
63:4b:b2:ab:27:50:43:7e:b1:35:2d:3b:e2:3b:26:
c5:46:0d:13:55:cb:4e:5b:b6:fa:26:3a:2d:a1:60:
93:1a:6b:69:99:83:2b:54:64:40:44:25:20:b8:df:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:28:1A:1D:0E:49:B0:CD:3D:08:1E:6D:04:CC:17:38:5B:66:DD
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:6000::/40
Signature Algorithm: sha256WithRSAEncryption
3a:cb:ad:f0:24:f8:b9:6b:c7:93:c6:3e:a1:f3:2d:60:fb:0a:
b3:e8:4b:67:cd:af:51:25:fa:0c:c8:0f:39:e0:54:cc:d8:09:
3c:3e:ef:3c:1d:66:c5:6f:ef:65:fb:b3:e3:4e:ae:b8:f0:c4:
44:14:de:bb:ea:2f:61:86:99:5b:ea:9d:1e:ef:04:e2:92:5f:
ce:3c:e5:b9:09:8f:50:54:6d:87:b0:8f:bd:ca:19:1c:ee:62:
2c:8b:dc:11:86:db:09:6a:57:4a:c2:4f:08:4e:44:83:97:2b:
7e:4a:fc:07:07:99:6a:67:cb:7d:d0:8f:f4:60:79:1d:4c:0c:
86:98:e6:ac:5a:1f:c9:c7:b3:89:f7:92:ce:74:e2:a7:63:13:
78:f8:9a:50:48:f3:7d:f0:b6:8b:e6:82:ad:a1:e3:22:aa:33:
09:05:10:80:d8:70:cb:cb:ff:00:2b:78:bd:6c:d8:53:c4:3d:
f0:e0:68:5a:23:c3:b1:aa:ef:27:32:3b:95:1d:df:5b:97:c3:
69:7f:85:c7:fd:9e:fb:9a:ab:93:80:9d:da:ab:cc:e3:bb:7f:
8e:df:40:d9:3a:97:3e:97:45:72:a9:2f:01:3b:2d:d0:a6:3c:
be:3a:0c:36:bd:2c:b1:bd:82:c7:bb:13:f7:e8:d1:a0:ef:99:
8a:94:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:40 2025 by rpki-client