Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa
File: AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa (raw, json)
Hash identifier: o0C2Od2dmwd21M8bbCFmWMF4PIu9tGf0wjrdLehAGE8=
Subject key identifier: 02:09:05:02:A0:50:DC:11:45:4A:09:10:26:97:B2:EE:6F:A7:77:50
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa
Signing time: Tue 30 Apr 2024 02:24:42 +0000
ROA not before: Tue 30 Apr 2024 02:24:42 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.111.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:42 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=02090502A050DC11454A09102697B2EE6FA77750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:03:d7:4f:5d:e1:2f:ab:0b:0f:bd:dc:a2:
3b:5a:bb:a0:2e:91:7a:94:0d:19:fb:81:0d:4f:6d:
68:fd:0d:56:01:09:36:bf:3f:9c:3d:6d:a7:bd:aa:
6f:79:58:c6:3f:02:e3:ad:e5:a6:0d:a0:4b:a9:30:
47:fe:61:7a:3d:9a:bb:fd:a2:f4:83:ce:5b:97:7d:
34:37:e2:d2:88:f1:90:26:9d:9f:8a:8a:e8:89:65:
86:f4:a2:17:ce:b7:4d:dd:08:46:12:e5:f8:e0:41:
a9:25:03:45:49:ce:0c:31:c5:67:17:49:f2:cf:25:
10:4c:43:e5:14:a4:7b:6a:ee:d6:b1:34:88:08:69:
c2:45:f1:d6:7b:48:1c:4a:de:a5:51:7f:c5:5b:67:
df:1b:85:9e:b4:56:7a:88:e4:d0:74:aa:9e:87:9b:
f6:8b:9d:33:42:14:eb:3b:b7:97:0e:2b:6e:1c:2b:
c2:94:c0:ec:0c:1f:63:74:36:a0:0e:e3:9c:31:da:
0f:c1:98:73:aa:2a:20:92:7b:00:02:1c:a4:15:ea:
e7:c3:8c:35:f8:41:e3:7f:a6:be:62:84:f6:82:3a:
c0:ba:56:59:12:98:3b:70:15:04:8b:0a:54:c1:fc:
b8:45:95:85:f2:c3:fa:c3:43:75:12:17:66:87:91:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:05:02:A0:50:DC:11:45:4A:09:10:26:97:B2:EE:6F:A7:77:50
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgkFAqBQ3BFFSgkQJpey7m-nd1A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:18:a7:d4:98:8e:48:72:38:41:c4:e3:d5:79:a9:22:d1:54:
f3:26:ff:3f:88:8d:50:e6:6e:8b:5c:45:87:1a:b9:68:84:89:
4d:1d:b2:e5:d1:ea:d7:96:af:0c:fd:f1:14:63:8b:0d:41:59:
df:4f:52:ce:0f:62:20:3d:68:5a:7c:a5:b4:bf:65:b7:23:86:
99:54:be:47:36:11:ab:d8:37:27:8e:10:38:73:c1:79:53:69:
e9:99:74:d1:c9:1c:65:95:7d:05:f7:4d:67:0a:41:14:3d:01:
9d:ae:6c:b6:c4:f6:eb:6a:a5:d2:0f:0f:cc:c0:23:72:7d:c1:
a8:73:31:b0:ae:2c:18:b1:c9:e1:b8:16:ab:a1:eb:a6:7c:e6:
9d:66:48:d3:98:c8:fb:2d:06:d9:57:82:3a:26:b9:2f:c0:b7:
93:ac:4b:c1:94:4b:bb:17:8f:93:21:e6:35:84:73:7d:89:59:
ca:cd:cb:95:bf:31:e5:6c:a3:ae:89:9f:d9:fe:c9:58:e0:7f:
3d:e5:84:94:53:74:98:51:59:8e:bc:cc:79:59:9d:6e:95:6c:
53:07:74:e0:c1:be:45:33:0f:9b:00:7f:d1:ae:0b:5f:d8:4a:
6f:55:17:b2:20:68:b6:09:72:71:8a:95:34:c1:0b:c3:dd:de:
f3:12:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:32 2025 by rpki-client