Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa
File: h9khvFfQgLDUn2bsalI_wDeRxgw.roa (raw, json)
Hash identifier: u5075CHtDr6qOHN1zyngkLBgliqf9tZBqMHuEF1aS/w=
Subject key identifier: 87:D9:21:BC:57:D0:80:B0:D4:9F:66:EC:6A:52:3F:C0:37:91:C6:0C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 084D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa
Signing time: Tue 30 Apr 2024 02:16:26 +0000
ROA not before: Tue 30 Apr 2024 02:16:26 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:16:26 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=87D921BC57D080B0D49F66EC6A523FC03791C60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:65:ca:ec:27:34:5d:f8:9e:ff:90:42:07:
ea:1c:e1:64:43:22:c9:f4:b9:78:dd:a3:13:66:a7:
d7:cd:b2:9a:c3:88:0c:d9:b8:f0:f6:65:08:f5:cd:
ad:0c:c2:79:33:e9:90:d2:a8:65:b9:01:46:13:dd:
1b:83:c1:98:42:49:27:18:30:6e:bc:f9:71:ac:5d:
72:18:b8:01:2f:42:7d:ce:36:7e:ba:aa:db:58:c4:
27:66:27:6d:a1:09:6c:d5:a4:a1:45:02:9e:b0:71:
5e:00:19:c8:09:6f:06:7d:bd:98:08:3a:59:bc:12:
77:bc:90:3b:13:78:85:95:c2:30:6b:0b:86:b9:d9:
29:9c:c6:36:91:25:02:02:d0:89:50:09:df:20:ff:
e9:f2:11:99:d0:fd:4e:30:a8:9c:1a:0d:2b:b6:d5:
50:64:04:28:d4:c2:b2:25:a2:66:57:ee:29:86:29:
b3:37:c2:3f:3c:27:d2:d0:b9:33:db:90:e9:f5:ad:
5b:8c:3d:5f:12:d1:07:a1:11:4e:f8:bf:6e:ed:db:
31:5a:a1:f6:d1:91:30:91:68:c0:f5:08:35:07:dd:
55:a4:81:0d:7d:78:9b:56:1b:6f:5e:d2:80:54:a3:
58:2f:07:01:33:56:43:8e:5b:9f:57:72:4b:f7:ad:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:21:BC:57:D0:80:B0:D4:9F:66:EC:6A:52:3F:C0:37:91:C6:0C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h9khvFfQgLDUn2bsalI_wDeRxgw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.237.0/24
Signature Algorithm: sha256WithRSAEncryption
43:56:f6:b1:ac:32:57:2d:fe:d2:07:0d:2b:f5:74:14:3c:7c:
e6:f5:26:cf:b2:4c:b8:28:17:e8:b4:60:00:53:9a:9a:87:23:
2d:e6:e1:1b:87:93:46:8b:df:8e:31:40:31:9b:73:1e:ee:82:
1e:5c:06:bf:6c:98:46:19:dc:b1:08:af:96:ca:5a:ef:ab:b2:
f0:44:1b:ae:86:10:88:9f:db:2f:00:14:42:cd:0c:29:c1:e2:
23:2f:f4:3f:50:6c:01:56:8e:87:be:78:65:be:e3:37:95:90:
ee:8a:9e:48:f6:40:82:b6:cd:c5:93:78:f6:e8:6a:77:2f:dd:
d9:da:4f:d4:80:b9:8d:87:80:ec:4c:a3:3b:ce:17:f0:99:42:
75:0d:cd:2f:c3:5f:6c:97:7d:00:03:d5:77:b0:6c:d6:83:7b:
09:6c:4f:d9:9b:95:04:ab:d7:58:d3:be:5c:d5:a6:d9:bf:99:
ca:73:28:a0:c3:a9:4c:03:42:3c:4c:b7:33:4d:99:25:b6:15:
52:b6:4b:f8:a8:34:93:7e:3e:ad:c9:38:a9:66:86:29:df:d4:
49:c2:d8:83:06:cd:ef:77:15:4c:3c:66:01:5f:2b:1f:e6:89:
61:4b:df:5b:1a:16:a7:cd:24:7b:c1:50:9d:3e:68:1d:bd:66:
a5:26:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:09 2025 by rpki-client