Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
File: Yks8g9taIa3NG4IiJJmVMnHdddA.roa (raw, json)
Hash identifier: mPusTy8G2zTEYPA02tNgCC61F1P6VoWxUEA7KrOEVg8=
Subject key identifier: 62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
Signing time: Thu 29 Feb 2024 01:35:42 +0000
ROA not before: Thu 29 Feb 2024 01:35:42 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:42 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=624B3C83DB5A21ADCD1B82222499953271DD75D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:da:70:85:d4:81:ae:bd:a7:98:43:b3:2e:
ee:8f:11:cc:7b:86:fa:0e:d6:80:9f:23:b4:a7:66:
e5:f8:68:47:cb:6e:fe:f6:27:8e:a5:e5:8e:1a:c9:
d8:c1:ad:e1:16:7c:59:c8:72:06:76:b1:1b:fb:ec:
f0:d3:06:93:91:7e:ff:aa:13:95:68:ce:6e:c0:a2:
36:b3:e6:2b:cd:86:4c:03:7d:c9:e7:82:94:fc:e5:
48:3a:26:c9:04:d3:db:f4:10:f4:51:aa:0e:5a:1d:
c0:63:ab:07:fd:69:a0:39:c1:9e:d2:28:2e:0a:b3:
f1:d9:bf:2e:bc:56:63:9c:e1:f1:1a:b1:b2:71:23:
85:f1:23:9b:08:19:9b:8c:43:a8:62:5c:89:ee:56:
37:b3:5e:33:02:53:8a:4c:8d:00:04:1f:9d:60:6f:
4c:99:98:59:d8:14:be:86:fd:d8:13:f9:74:b0:cd:
1b:f9:f6:72:62:88:aa:f5:be:66:0b:69:d0:45:55:
39:9b:7a:2e:31:7d:b0:fe:5c:2e:1f:86:94:e9:9d:
43:8c:b9:9a:65:e2:f1:65:b9:2a:ec:2e:01:2a:ab:
d1:f7:dc:50:e7:30:01:c2:a9:3e:90:04:9c:06:fb:
de:e3:3c:c8:e9:97:bc:07:20:be:26:2e:fb:7d:21:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.102.0/23
Signature Algorithm: sha256WithRSAEncryption
43:db:a3:76:4f:b0:c5:cd:76:8c:9a:59:20:1c:19:a4:ec:a2:
dd:cb:6b:61:2f:94:a5:3a:d0:7f:4f:87:11:c0:2a:ed:8d:1d:
5a:76:83:59:be:8d:be:f6:d1:ae:eb:87:62:cb:26:54:3a:18:
8e:19:9a:3b:cb:10:d5:12:53:44:33:ef:c7:04:1b:6e:27:8a:
cc:f2:36:ea:d2:db:82:4c:17:73:43:94:10:d6:24:7c:84:f6:
ac:75:0d:44:a2:8d:68:26:b4:91:a2:f4:ce:76:b8:92:b0:75:
7c:92:07:f2:87:c3:c8:c6:91:3d:eb:7e:9c:98:00:99:d7:2b:
a6:5b:ef:44:9d:fa:ea:b7:97:5c:58:37:59:a6:cd:ab:71:8f:
bc:ef:ac:1e:f2:dc:01:22:e0:91:3e:2d:31:7a:ae:7d:30:71:
21:e9:e0:d4:a2:9c:19:ef:94:65:13:25:87:e7:dd:24:c3:3c:
d7:2a:24:7d:a9:07:1f:7c:b8:1c:29:81:b5:72:95:dc:17:66:
ef:9f:e8:2b:77:43:1a:bf:99:22:f7:d2:71:e5:e6:8d:99:04:
96:78:61:29:f4:dc:97:0c:e1:3f:5f:b4:8d:8c:02:fe:23:ac:
bf:3d:76:5e:e5:c2:74:cf:3c:a6:c2:a1:c6:4e:76:77:33:d4:
bb:8c:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:17 2025 by rpki-client