Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6A3IKOpp7Rz99-FkQTgDd5n0UDk.roa
File: 6A3IKOpp7Rz99-FkQTgDd5n0UDk.roa (raw, json)
Hash identifier: BXsSXLkzlOSNNuKOyGDDJn4vHKvej445Ee6+KKorpZk=
Subject key identifier: E8:0D:C8:28:EA:69:ED:1C:FD:F7:E1:64:41:38:03:77:99:F4:50:39
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 083A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6A3IKOpp7Rz99-FkQTgDd5n0UDk.roa
Signing time: Tue 30 Apr 2024 02:14:30 +0000
ROA not before: Tue 30 Apr 2024 02:14:30 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:14:30 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=E80DC828EA69ED1CFDF7E1644138037799F45039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:91:8e:80:2a:01:75:16:de:eb:cb:15:b6:
50:b8:fa:91:c6:c3:d4:4f:fb:09:7b:ca:f8:98:b4:
e2:d8:29:c8:c7:7a:62:d8:f6:6e:15:be:73:d8:60:
e6:d3:33:36:3e:19:25:d4:99:23:36:80:5b:20:93:
9b:0a:a2:18:cb:e6:cb:95:18:ab:a6:bb:44:f0:e0:
73:41:30:84:ea:00:cf:a5:9d:20:45:21:86:06:7c:
b0:45:d9:7e:5d:25:a4:69:e1:a4:27:fc:0f:d5:4e:
67:01:cc:1b:2a:ef:8d:8a:a5:42:4c:eb:98:eb:7c:
bb:10:f0:6f:4d:40:3d:ae:a0:e2:40:c5:97:d9:20:
ac:b2:8b:6b:22:6b:4d:c6:2e:19:da:08:01:fb:32:
20:45:46:81:0b:7b:c7:8e:72:1c:04:69:21:8f:68:
18:0e:e8:b6:6a:ec:20:45:44:2d:c7:48:3c:24:fc:
38:55:1d:72:cf:7e:6d:5a:a5:9e:3f:1d:75:b4:c0:
bf:f1:f8:fa:3f:89:cc:1d:43:4d:d5:43:8e:3c:fb:
6c:56:88:22:39:15:5e:91:f5:a9:d5:f9:fd:f2:58:
2c:80:52:b0:ae:41:1f:13:e6:d6:25:07:e7:40:a8:
22:c1:f1:73:cb:0e:e0:bf:a5:d7:aa:38:52:ed:a4:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:C8:28:EA:69:ED:1C:FD:F7:E1:64:41:38:03:77:99:F4:50:39
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6A3IKOpp7Rz99-FkQTgDd5n0UDk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.36.0/23
Signature Algorithm: sha256WithRSAEncryption
13:c3:62:44:66:8f:3a:8a:8f:d9:7a:b8:22:3e:bc:40:65:12:
82:6a:7b:63:55:2d:42:02:28:38:70:44:4d:94:ed:4d:01:27:
02:83:52:9d:05:71:56:69:b9:60:9b:f6:77:f9:85:ea:33:50:
54:b2:a9:d0:8b:78:1a:80:c9:64:51:a7:81:93:04:3c:3e:4f:
84:48:5c:10:7c:e6:b8:5f:91:88:e2:4e:34:ef:5c:a9:65:fb:
57:e7:bc:05:a5:d8:6c:ff:5e:ea:02:b8:ca:2d:a1:52:f5:b7:
46:e2:d6:47:c3:e8:4a:ec:1b:38:bd:44:5d:0f:35:fe:0a:a6:
d8:2f:bb:3e:7d:c7:98:b6:16:21:92:51:8d:39:e5:96:de:ad:
bf:16:0f:bc:6e:70:ae:23:46:8f:12:f2:e8:32:33:4e:92:52:
59:84:92:de:2a:0d:3b:62:74:59:73:e5:a9:df:79:f8:02:f4:
d5:bc:3c:d3:50:77:54:6f:37:0d:a3:dd:bf:e1:b3:5f:cf:13:
74:6a:b1:2c:ab:8b:db:c8:43:77:6c:fc:4c:4e:2f:1b:5b:67:
01:b4:6f:73:a8:80:84:91:15:9d:bf:f0:6d:ef:d5:f2:c3:ff:
44:15:57:57:65:ce:60:23:ea:b0:83:52:88:37:31:50:cc:92:
60:cf:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:29 2025 by rpki-client