Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b7MXg6Jf8gNUu20PeOE5xmf6pS4.roa
File: b7MXg6Jf8gNUu20PeOE5xmf6pS4.roa (raw, json)
Hash identifier: 1JNdEcv5lXQdAIvqZSiS5ZmVGpEJIl+z/UJAGxmpIX0=
Subject key identifier: 6F:B3:17:83:A2:5F:F2:03:54:BB:6D:0F:78:E1:39:C6:67:FA:A5:2E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A49
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b7MXg6Jf8gNUu20PeOE5xmf6pS4.roa
Signing time: Sun 30 Jun 2024 01:48:27 +0000
ROA not before: Sun 30 Jun 2024 01:48:27 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 219.122.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:27 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=6FB31783A25FF20354BB6D0F78E139C667FAA52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:a7:0e:a3:35:af:d2:23:7f:fb:65:7e:11:
d8:62:1a:dc:0a:3a:10:22:5a:31:87:79:05:11:74:
6b:a7:40:f6:b1:44:54:9d:01:d3:f3:cf:c9:2d:bb:
cd:63:8b:f1:13:58:b8:a7:b4:a1:8c:f1:95:f7:5e:
a3:c4:3b:42:26:f0:17:db:8c:6b:ab:53:d0:04:6a:
e8:71:d8:27:78:f4:bb:bf:b9:89:01:90:5e:02:23:
1a:dc:5c:30:b5:be:a7:33:1e:39:33:b4:3e:6d:5f:
e8:75:97:8c:5d:8d:8d:dd:ef:22:56:1e:8b:8e:e9:
91:f1:13:f3:ca:4c:ff:3e:66:e0:15:f1:8e:b0:8d:
f9:ec:5c:89:8e:5c:69:fe:7c:18:97:5f:74:9d:de:
39:17:86:91:ed:a1:ce:14:65:ca:4c:f5:83:60:94:
fd:5d:22:12:9a:0c:6a:b9:f5:cb:a1:4e:59:80:04:
69:63:03:be:50:04:af:b7:79:14:22:a4:3b:0b:4e:
bb:ec:91:86:fd:fc:6e:d0:7f:06:de:13:4a:ac:1d:
76:e6:ae:e5:d3:f5:54:2f:a7:6e:29:5b:52:d2:40:
93:af:18:c2:14:e2:4b:1a:f5:d4:e4:1e:1a:86:a4:
54:89:80:6d:58:d5:fd:1c:0b:3f:31:76:8a:93:9c:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:17:83:A2:5F:F2:03:54:BB:6D:0F:78:E1:39:C6:67:FA:A5:2E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b7MXg6Jf8gNUu20PeOE5xmf6pS4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.122.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:7a:6e:af:40:68:d0:e1:56:8c:70:9b:8c:2b:f0:3f:88:cc:
85:25:43:68:f5:ca:63:60:99:dc:ee:ab:79:81:ee:03:40:27:
0a:f8:e8:a9:58:a4:4c:8f:98:0c:e4:63:12:9b:7d:7f:cd:8b:
2b:23:13:7b:95:61:0a:2a:d1:90:28:44:cb:eb:29:15:7e:c4:
04:cd:90:99:7c:d3:cb:8e:8f:9f:b2:5b:01:2a:08:bd:fc:aa:
4b:5d:bc:5a:0e:13:6c:44:fa:a7:0d:53:93:c4:eb:6e:68:f3:
59:a3:a5:03:eb:69:41:25:91:55:1a:10:9c:e9:31:ee:8a:63:
65:01:3d:8d:e2:b1:06:1c:2c:eb:32:5f:49:8f:35:d7:30:7f:
82:b5:0f:75:3a:04:b7:02:4c:bb:40:50:50:9d:0e:fd:56:ad:
f4:df:49:82:32:b0:81:58:83:bd:ad:74:ad:33:8e:91:0c:9f:
fd:bb:7b:c0:a1:e1:14:87:82:e5:11:7c:0c:a5:df:eb:6b:e0:
67:c5:cf:ad:22:c6:2c:34:28:9a:5b:92:db:73:80:54:a7:6e:
ab:2c:8d:9e:d5:d8:07:c0:7e:d9:6e:83:08:80:62:2e:45:6a:
69:56:35:7d:7b:a6:ca:2f:d4:94:81:d2:bc:d4:e3:83:a7:0f:
a6:5c:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:54 2025 by rpki-client