Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30320/1yNpGU2nuaPMA7_O7H8BlqY2MFM.roa
File: 1yNpGU2nuaPMA7_O7H8BlqY2MFM.roa (raw, json)
Hash identifier: VLk+J8exH2P5VQyhyBVUyv/GQwtqV90JquWWlx2pvwM=
Subject key identifier: D7:23:69:19:4D:A7:B9:A3:CC:03:BF:CE:EC:7F:01:96:A6:36:30:53
Certificate issuer: /CN=041B660708C68D9770418A81721FF0771F0A4A19
Certificate serial: 20
Authority key identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/1yNpGU2nuaPMA7_O7H8BlqY2MFM.roa
Signing time: Thu 29 Feb 2024 01:34:06 +0000
ROA not before: Thu 29 Feb 2024 01:34:06 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 131929
IP address blocks: 2402:73c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041B660708C68D9770418A81721FF0771F0A4A19
Validity
Not Before: Feb 29 01:34:06 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=D72369194DA7B9A3CC03BFCEEC7F0196A6363053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:13:67:1d:35:7c:25:a5:51:81:4b:e6:14:
71:66:05:39:84:4a:70:2f:51:88:9e:cf:9b:6a:64:
bb:3f:60:26:1e:c7:bd:95:1d:27:85:72:d0:55:36:
5f:c8:70:91:20:41:fc:3a:12:2d:d5:21:fa:85:a2:
23:4f:61:89:6b:61:f7:23:63:79:58:09:55:31:0c:
75:e4:ed:7b:5c:af:26:6e:ab:52:bf:4f:d4:a2:76:
90:ac:70:a1:90:1f:67:e4:c6:8b:ce:1a:03:c6:c6:
01:2c:b8:01:d2:bc:94:49:9d:51:7f:ec:e0:89:ad:
4e:12:41:e6:64:50:cb:f3:e2:17:11:79:5a:82:b3:
e2:8c:15:cc:5d:94:e7:75:db:a0:80:45:27:22:a3:
11:fd:95:43:35:b5:20:f7:a2:37:10:f4:9e:0e:42:
44:dc:fd:ea:ab:bd:f2:dc:b4:ba:33:d3:02:62:51:
1b:d3:10:fe:c2:5d:70:a4:9a:f6:1b:73:16:91:72:
7c:48:dc:c9:66:74:8b:9d:26:a2:3d:e2:3b:4c:26:
d6:c0:70:7d:cd:37:cf:bc:af:cf:a3:e7:af:9b:a1:
66:57:74:74:13:c2:94:8c:50:88:76:42:68:c0:b8:
22:3e:25:1b:f0:14:1b:10:d9:ca:1d:1e:ed:d3:95:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:69:19:4D:A7:B9:A3:CC:03:BF:CE:EC:7F:01:96:A6:36:30:53
X509v3 Authority Key Identifier:
keyid:04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/1yNpGU2nuaPMA7_O7H8BlqY2MFM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:73c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:59:93:c1:af:04:79:14:e0:ce:00:34:59:06:18:ee:5e:ed:
40:d4:08:f9:3c:54:c9:db:d7:75:db:f7:f3:a7:57:89:ea:0b:
6b:1f:ef:05:a1:ae:d1:ce:5d:40:9e:3e:30:5f:ce:b1:67:14:
62:2f:bc:b2:a5:34:f4:54:b2:4e:eb:91:fa:68:0a:ba:e2:a7:
4e:9d:7f:01:da:79:68:b0:d5:6a:5a:25:bb:5f:c8:a5:90:92:
b7:e2:6a:8a:48:fe:34:da:ad:d1:2c:3a:70:d2:aa:f3:fc:bf:
69:4b:d3:84:e8:15:55:48:78:0c:a2:19:37:dd:89:40:0b:16:
02:c3:82:9c:ce:ac:6d:c2:4b:a2:ee:e0:ac:e8:d9:2f:09:23:
50:26:ea:1c:5f:4e:f3:26:6c:46:da:b5:3d:dd:6f:18:2f:70:
6e:17:8b:07:05:60:e8:cb:53:8d:c0:49:24:d7:7d:53:c1:86:
90:e4:55:a4:e6:4e:ad:22:ce:e9:e0:e0:9f:5f:8a:58:00:89:
ba:ca:df:47:bd:00:74:26:e8:7c:0c:d9:02:c6:bf:e4:7a:3d:
54:f5:8e:9b:98:a2:21:59:39:13:0a:27:dc:58:1e:35:22:44:
0e:13:08:c9:45:5f:f0:4e:b7:e8:fe:7f:03:3e:f5:b3:e7:78:
55:ff:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:59 2025 by rpki-client