Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa
File: KDpZj6QmLt8MUAGmWaSP540NfIM.roa (raw, json)
Hash identifier: MBPFRD7RjUKvpErdDfeCRHkGrAtO/j1+luqxBpKC6Rk=
Subject key identifier: 28:3A:59:8F:A4:26:2E:DF:0C:50:01:A6:59:A4:8F:E7:8D:0D:7C:83
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0992
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa
Signing time: Sun 30 Jun 2024 01:36:27 +0000
ROA not before: Sun 30 Jun 2024 01:36:27 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 211.14.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:36:27 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=283A598FA4262EDF0C5001A659A48FE78D0D7C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:89:95:a8:bf:c4:65:3a:02:6c:fd:62:f1:
df:1a:7a:ea:5f:9d:4f:b6:96:28:dc:11:63:f4:12:
29:dc:4d:8c:d8:ab:0d:bd:71:fc:51:a2:53:61:98:
8c:1b:7a:fd:12:b9:2f:92:3d:d7:c2:d5:88:3b:70:
e2:65:80:09:f0:8d:2d:98:0c:b1:c2:36:d1:63:59:
9d:a1:16:03:cd:b7:90:54:38:b8:ca:38:40:77:7e:
88:90:42:fb:4e:75:cb:75:33:4a:89:bb:ea:b7:75:
c6:c7:e8:c1:7a:e2:b3:2e:69:de:d0:bf:a0:8a:b4:
51:a3:d0:bd:39:0e:fa:a5:03:77:4d:df:80:fc:5a:
4e:a5:58:77:f8:85:4f:81:eb:99:ab:bf:b7:2e:bb:
88:e6:d0:e9:12:39:90:48:57:e8:a9:f4:a8:70:57:
fb:94:e3:69:56:cb:e9:9b:c2:b9:cf:f5:fb:cd:f5:
7b:cb:e4:1f:bd:7c:83:55:0f:e3:bf:0b:8c:75:1a:
63:44:76:95:e2:2d:49:92:73:cc:2b:3f:99:42:77:
5f:fb:24:d4:1b:0c:91:e9:63:08:95:19:40:ee:34:
f2:50:b6:ce:0d:fe:66:ef:68:16:85:13:7a:ef:b8:
1f:1b:4d:bb:cf:fb:a0:2b:77:ef:aa:51:c1:f3:48:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:59:8F:A4:26:2E:DF:0C:50:01:A6:59:A4:8F:E7:8D:0D:7C:83
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KDpZj6QmLt8MUAGmWaSP540NfIM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5f:d0:f3:7e:b6:33:9d:02:45:c9:be:6c:f4:52:a0:c9:0d:
9f:04:d9:16:55:bc:53:3f:7f:29:9a:bb:b0:55:5a:45:e5:d3:
7d:eb:73:09:9a:e4:cd:7e:b9:60:36:94:2c:43:05:ca:3b:38:
ab:f7:22:23:7f:e7:96:c4:a4:c6:db:d1:dc:c1:a7:5a:cc:73:
70:0c:b4:74:81:0c:ac:0b:3e:7e:61:f2:df:52:f4:df:b9:65:
7c:08:e9:b9:40:7d:cd:20:6c:33:53:3b:2c:fb:5d:bf:6a:3c:
fe:2b:39:4e:08:e0:25:bf:9f:0d:ba:f0:68:b9:d3:39:ea:ba:
15:76:53:59:c7:ae:bc:a2:2d:63:2c:82:08:33:b8:65:fa:5f:
21:7b:9f:72:15:96:8e:4e:ff:d5:8e:0f:08:28:80:f8:6c:8e:
bb:14:dc:53:d9:0f:0c:16:00:e9:ca:57:bb:05:d6:ec:30:9e:
cd:d1:1a:33:69:1e:f2:1a:52:bf:75:94:32:cd:4d:e0:f0:df:
11:8a:97:aa:5d:bb:cf:96:51:f1:4a:f0:c0:df:6e:4e:69:d8:
31:4d:d0:c0:77:0c:c2:1f:6e:a3:6a:30:41:1d:e1:d4:49:f6:
34:0d:dc:4a:ee:d2:92:b5:ab:53:6d:0d:56:f1:b8:77:e4:e9:
c6:48:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:14 2025 by rpki-client