Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6B9EgcBVxwkjioI02eYncTXhsQ.roa
File: L6B9EgcBVxwkjioI02eYncTXhsQ.roa (raw, json)
Hash identifier: ykZ44dH8Rs/XClG1ai0XsBHC/AnpEVujw1ropSiCdbA=
Subject key identifier: 2F:A0:7D:12:07:01:57:1C:24:8E:2A:08:D3:67:98:9D:C4:D7:86:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6B9EgcBVxwkjioI02eYncTXhsQ.roa
Signing time: Tue 30 Apr 2024 02:24:40 +0000
ROA not before: Tue 30 Apr 2024 02:24:40 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:40 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=2FA07D120701571C248E2A08D367989DC4D786C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:6a:14:72:32:b4:94:ca:30:62:da:c1:a9:
cd:b5:0a:81:c8:61:04:d6:67:3d:a7:75:02:47:80:
0b:07:5c:5d:80:a6:7e:b0:fb:e1:bd:3a:76:83:fb:
09:d4:81:84:88:12:5f:f7:96:f9:59:39:2d:87:0d:
a6:74:76:5a:1d:eb:a5:18:18:43:97:57:57:57:7b:
b5:65:04:15:a8:fa:37:a9:77:48:ae:b6:89:28:08:
e5:48:a7:86:78:26:d9:de:37:3c:98:63:0e:94:57:
98:fc:ed:f2:5c:87:1d:b9:3c:d6:81:2e:f1:19:85:
ed:ac:a3:61:c1:e0:f1:17:06:51:21:d4:0a:00:e4:
fe:f5:51:96:2f:fd:4c:bc:6b:37:ef:fd:40:11:44:
6b:bd:19:91:65:6c:68:e9:73:52:ab:0a:8f:66:0a:
57:5e:b8:2f:49:61:79:09:da:0d:c6:33:3e:bb:16:
b6:83:24:ef:0c:b2:49:92:02:2d:f1:b0:a2:f8:98:
49:8b:9d:90:fd:41:69:4c:7c:df:54:ba:58:00:0b:
44:33:dd:98:ae:93:6a:20:22:d1:80:54:bb:7e:6e:
09:db:35:fa:1f:78:a0:38:f5:c6:68:ee:22:b3:f7:
95:bb:7e:17:12:be:6d:16:a7:9a:9d:ae:97:38:78:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:7D:12:07:01:57:1C:24:8E:2A:08:D3:67:98:9D:C4:D7:86:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L6B9EgcBVxwkjioI02eYncTXhsQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b0:7d:3c:c8:a4:82:62:62:19:10:3e:65:5f:d3:09:cc:5e:
1f:32:1f:57:fd:c8:d8:d6:48:6a:81:7a:02:81:2a:23:9f:99:
3f:02:3b:82:3e:b1:00:69:28:b1:91:b2:48:b7:a7:ea:59:8a:
87:ca:d8:6b:72:8a:43:21:0d:da:57:5b:01:58:3d:55:13:f5:
19:6b:c8:e9:89:4b:9c:74:77:bb:84:2d:dd:8d:1c:9a:51:60:
5d:90:2c:c0:af:6c:bf:ce:59:27:dd:a8:47:6a:68:c5:4c:5c:
05:94:09:5b:ff:c4:df:bb:23:29:70:89:81:b5:db:9b:be:0b:
95:73:9e:24:a7:46:75:55:18:bf:44:72:8e:03:7e:97:b9:57:
50:21:2e:d2:2c:92:2c:34:3f:f2:c0:bd:71:74:92:58:14:19:
05:e8:e8:fd:68:99:cc:9e:01:c7:b5:56:e1:bf:45:df:ee:97:
5c:cd:62:6a:11:60:f4:03:09:30:68:25:e5:a6:83:4e:f6:ae:
75:2f:8b:72:1b:f0:4c:84:8e:f3:c2:e2:6f:48:47:3f:e7:30:
d0:79:71:e8:14:c6:6f:c2:eb:44:74:dc:f6:75:ed:c8:ed:8f:
48:04:26:ef:9d:b2:97:29:db:06:33:39:f4:10:a7:3d:d5:24:
24:8d:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:49 2025 by rpki-client