Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HPjLpYsGUd9vJWnCu7cP_gmSZM0.roa
File: HPjLpYsGUd9vJWnCu7cP_gmSZM0.roa (raw, json)
Hash identifier: qbFxP7DmK7Zz7G7zOgI+ghnUXmyIEad7DCb1lpQRHZk=
Subject key identifier: 1C:F8:CB:A5:8B:06:51:DF:6F:25:69:C2:BB:B7:0F:FE:09:92:64:CD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HPjLpYsGUd9vJWnCu7cP_gmSZM0.roa
Signing time: Tue 30 Apr 2024 01:46:54 +0000
ROA not before: Tue 30 Apr 2024 01:46:54 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:46:54 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=1CF8CBA58B0651DF6F2569C2BBB70FFE099264CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:a6:7e:dd:ef:8f:84:ea:05:23:e2:6f:67:
d4:85:dd:a7:46:6c:13:d0:10:39:59:a7:7d:b9:c4:
a6:75:ab:54:58:51:8f:3a:74:5f:d7:4a:26:98:9c:
9a:0f:63:2c:f6:52:a2:e8:81:4b:af:a3:4a:c2:98:
f3:23:c8:31:5e:3d:e4:e8:28:3e:6b:df:95:f4:3f:
4a:3f:90:87:d6:97:e0:05:69:97:3e:d2:3e:77:d5:
6a:ba:aa:3b:f9:18:5c:57:12:4d:60:c2:f8:77:bf:
3b:41:27:bc:7a:7c:7c:5e:68:71:e9:66:bb:9d:25:
7d:e3:0f:f3:f6:d3:da:61:b8:3a:0e:21:7e:14:a0:
0c:35:b0:e5:31:14:61:48:ef:1f:ac:65:da:ae:b5:
dc:a0:dd:be:87:dd:ac:c0:9a:f3:21:56:29:df:a4:
20:f3:9e:53:e0:f3:57:ad:b9:3d:57:8e:f1:f1:9f:
8e:81:99:59:08:20:5d:4b:39:66:e6:2f:57:45:57:
be:52:50:71:95:80:65:b9:2e:9f:0b:db:55:28:1f:
6a:34:5a:fc:45:ce:42:62:53:65:1c:9b:0f:24:ae:
60:f6:e2:86:f7:25:8b:4b:2c:00:0b:60:e0:6f:26:
f8:5e:08:2b:bf:f0:8e:98:2c:fa:53:37:6c:63:45:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:CB:A5:8B:06:51:DF:6F:25:69:C2:BB:B7:0F:FE:09:92:64:CD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HPjLpYsGUd9vJWnCu7cP_gmSZM0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:d2:c9:ed:d0:a8:00:fb:19:42:9e:aa:59:ec:47:11:8c:71:
e9:6b:c5:5c:13:c7:51:a1:ca:e9:ee:37:63:15:cf:cf:af:d3:
5f:73:e4:8d:2d:68:20:dc:80:cc:12:2f:00:e4:dc:1e:2a:90:
a1:79:13:e7:7f:a9:14:89:c3:4f:1e:af:74:bf:67:f5:ef:d4:
17:d0:78:55:aa:46:cf:27:50:97:b7:b1:9e:c3:69:d1:1f:45:
cb:99:8c:aa:ac:b0:9a:45:4b:cb:64:44:15:77:33:e3:43:61:
d5:89:d4:29:af:c7:36:13:38:2f:7c:39:9b:51:59:0e:0c:05:
04:e1:10:46:8c:6a:ae:d2:a3:97:b9:14:a0:5f:bc:25:0e:4b:
a7:9f:c9:ce:fe:7d:74:8f:33:f7:a4:e5:63:4f:a2:5e:c6:8f:
7b:b2:c7:e3:95:16:f0:fb:f7:b0:05:bd:0d:a2:7e:de:a5:83:
26:ea:05:fe:6b:57:3e:f1:24:8f:9e:1d:b9:21:88:5e:d0:07:
2d:d0:30:4c:ad:ac:f1:e7:d6:3b:79:6d:2e:17:13:82:e9:c3:
8d:a8:6a:b6:7f:42:52:9d:fe:8e:65:d6:57:3c:78:5b:0b:1a:
e6:aa:e7:3f:76:94:55:fb:b1:fa:c3:87:a2:6e:c2:7d:48:5c:
89:f6:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:03 2025 by rpki-client