Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa
File: _kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa (raw, json)
Hash identifier: 6hz6A35ixERdlzuyCnLopIFeEkHGO7ryQpZ/yhJno8o=
Subject key identifier: FE:45:D1:F1:9F:DB:19:4D:F0:78:94:9B:B0:56:1C:16:73:2B:D8:58
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A2A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa
Signing time: Sun 30 Jun 2024 01:46:30 +0000
ROA not before: Sun 30 Jun 2024 01:46:30 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:46:30 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=FE45D1F19FDB194DF078949BB0561C16732BD858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:90:9d:47:cb:27:0d:ad:74:00:9d:1a:1e:9b:
13:31:aa:5c:71:7b:7b:52:3c:78:14:76:df:7e:d1:
3f:99:53:bc:97:46:ad:95:b1:f0:1e:6d:65:02:fb:
bd:39:79:10:e7:d8:e1:bd:5e:e3:77:62:cd:0e:ce:
98:4a:96:ec:04:18:1a:9d:64:b2:9e:7f:0c:0d:b7:
06:19:e4:0d:91:00:a6:04:be:60:02:fb:51:86:a5:
a9:07:da:a5:da:f5:11:9f:53:5c:8f:ff:8c:4f:55:
ca:5a:fd:21:f6:9e:8f:11:27:95:e8:23:2a:9b:23:
3b:ea:36:c3:6f:56:42:4a:b5:2b:96:ea:1a:af:6a:
93:73:02:79:9e:e5:73:ed:da:c2:c2:16:3b:8a:fb:
10:47:08:bc:0d:0b:52:9f:90:7c:bd:b8:d8:a1:85:
82:01:df:ad:af:74:25:59:0d:98:54:bb:eb:8f:36:
24:07:7f:f7:9f:58:80:4f:42:93:71:9f:90:1c:03:
f3:17:ca:65:60:04:77:24:d2:99:bf:a1:95:1c:7a:
17:da:59:5c:e0:16:53:c9:1f:b5:ab:93:67:73:ea:
f8:63:c3:f4:2c:33:f2:10:4c:0e:06:f8:98:31:4b:
bb:75:db:4c:53:6f:2c:82:fc:04:c4:ff:58:18:d3:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:D1:F1:9F:DB:19:4D:F0:78:94:9B:B0:56:1C:16:73:2B:D8:58
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kXR8Z_bGU3weJSbsFYcFnMr2Fg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:35:ca:82:0f:7c:23:1f:c0:e6:a4:82:42:5d:a1:9c:40:5a:
ec:75:25:bd:51:8a:02:d8:8a:66:f6:5c:d6:ec:ce:40:56:ab:
ea:dc:72:c5:a9:58:92:96:c8:2f:57:fb:8a:e5:d4:5c:54:73:
1d:68:b9:b9:49:08:fa:06:66:1c:75:c9:81:75:5e:0c:b5:1e:
9c:7d:5f:58:3d:54:cc:3c:5a:74:5c:22:f7:76:04:05:f5:42:
96:65:c0:a2:e8:39:5d:99:c0:01:04:cf:a8:72:83:6d:3b:40:
17:bc:ae:01:64:1f:b0:1e:69:00:bb:58:7d:a8:b1:51:e3:67:
5a:62:52:46:1c:18:e0:06:02:fa:ca:ab:c3:dc:74:0c:dd:ed:
59:fa:66:da:78:21:f4:25:c6:1a:b8:3c:95:9d:77:33:28:fc:
f5:93:f6:43:88:78:d7:f2:aa:90:ee:79:93:9d:45:54:93:e7:
fb:4a:65:f5:6b:44:fe:d4:9c:53:95:c0:73:af:bd:c6:3b:4a:
3c:38:bb:b6:80:22:81:6a:f4:28:9c:52:a5:71:5c:50:00:c6:
6f:8e:93:48:14:22:fe:c4:05:e8:95:9f:4c:a9:9b:26:be:a4:
cf:9d:f1:eb:b2:56:de:18:41:64:92:0a:da:2e:17:93:95:1e:
34:b2:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:20 2025 by rpki-client