Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa
File: GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa (raw, json)
Hash identifier: nkP4jHEqLv5Fc710s1g42/NQZyAsPaVDAkn5Xl7ToRE=
Subject key identifier: 18:34:58:0A:99:EB:EC:99:3C:60:29:46:4C:28:24:B7:EC:DA:A2:AF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa
Signing time: Tue 30 Apr 2024 02:24:38 +0000
ROA not before: Tue 30 Apr 2024 02:24:38 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 219.114.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:38 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=1834580A99EBEC993C6029464C2824B7ECDAA2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:1c:1e:07:19:58:8c:12:fc:3a:9e:29:77:
04:9e:ff:0f:48:3d:ff:a0:a7:86:c7:36:c8:b4:d4:
2a:01:8d:91:86:78:16:80:f8:96:67:d3:a5:71:c6:
58:52:8d:10:f3:8f:8a:d5:09:7c:40:fe:75:a6:9f:
48:a7:df:74:f0:c4:fd:5e:66:e6:a7:00:65:b6:c8:
6b:ac:a0:06:25:32:94:77:cf:18:68:b7:40:6f:8c:
3f:98:dd:e4:72:f1:b0:90:c9:d4:bb:36:2f:33:00:
56:ff:ad:9d:bf:2c:a3:7e:94:55:1b:c3:a2:0c:bd:
c6:ac:ec:77:fa:26:43:74:83:93:79:be:af:ac:54:
bd:07:50:75:e5:12:b5:8e:72:0e:00:79:8e:ca:f5:
ad:23:92:70:00:63:25:a1:0d:3c:3c:57:69:b9:f6:
03:fb:55:88:bc:75:ad:58:27:30:b8:a7:c1:e8:57:
2a:65:1d:01:41:08:9e:ac:78:4c:36:b4:54:12:65:
3f:bd:ae:f7:a7:56:71:48:70:1a:af:43:3a:be:b3:
e8:1e:6a:2a:e9:d9:5c:a6:18:f2:af:51:51:45:29:
7c:ba:e1:98:04:fd:18:e2:7c:84:12:b6:39:8c:91:
64:1d:c4:98:b9:27:ad:69:26:c0:1c:53:77:89:b3:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:58:0A:99:EB:EC:99:3C:60:29:46:4C:28:24:B7:EC:DA:A2:AF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GDRYCpnr7Jk8YClGTCgkt-zaoq8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.114.168.0/21
Signature Algorithm: sha256WithRSAEncryption
e6:29:d7:12:c0:73:b8:61:2e:b6:78:c4:e7:23:fa:1c:e3:b6:
33:ad:9f:1a:77:4e:ab:ac:5c:9c:07:56:06:9e:d6:49:c8:5a:
8e:7a:e8:58:a4:b9:d1:bc:ec:73:ad:0e:17:17:02:8d:bb:2d:
b9:cd:2f:b3:06:6a:41:c7:8b:d4:f8:53:d3:d4:b8:d5:31:a5:
72:c2:26:93:43:55:b9:0e:ce:0c:56:ad:87:03:58:84:0f:c5:
df:5e:fc:d3:20:08:60:13:00:85:3b:0b:db:92:94:77:9a:d7:
2d:87:ab:a1:d8:ae:2b:fc:bb:41:50:0e:ce:76:8c:0b:5b:75:
4d:34:08:ee:3f:0d:f5:05:c0:6e:6f:46:1a:23:c1:f0:aa:c1:
33:7a:0e:c9:29:13:9f:c4:b7:7e:ea:ef:ea:9c:68:80:9f:da:
e7:f2:f0:6d:0a:d8:84:41:2a:32:8b:f1:0d:98:41:91:2c:5b:
c0:5a:29:fb:a7:da:45:86:68:65:6f:31:8e:7e:6a:d0:62:08:
39:c2:46:63:29:99:34:2d:de:32:c5:71:41:c5:13:2c:61:dc:
f3:ba:43:c9:5b:8f:2a:e1:72:7a:49:fb:4a:54:3e:bf:92:88:
26:51:07:ec:f8:49:4a:86:32:65:cc:01:52:44:a6:15:e2:6f:
07:a2:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:12 2025 by rpki-client