Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
File: pdhsdXXrbB8XkL6GHilymfHfm_4.roa (raw, json)
Hash identifier: YqL+3Anbd+rPynKOvxnY74B9zORRYKhFugrpK1+TqZU=
Subject key identifier: A5:D8:6C:75:75:EB:6C:1F:17:90:BE:86:1E:29:72:99:F1:DF:9B:FE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
Signing time: Tue 30 Apr 2024 02:26:37 +0000
ROA not before: Tue 30 Apr 2024 02:26:37 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:26:37 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=A5D86C7575EB6C1F1790BE861E297299F1DF9BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:ed:f7:0f:a1:d7:33:5c:42:20:00:64:51:
ae:ed:e4:38:a5:cd:4d:c7:c9:0a:2f:d8:e7:19:d4:
cd:10:f6:1a:ad:1b:74:94:fc:78:01:6a:b2:f7:97:
07:cb:f2:68:68:ea:6c:25:73:bc:9a:99:4a:4e:3f:
fa:fe:81:f7:49:cd:87:9a:5a:9e:7a:2a:ec:b1:88:
75:41:e1:d2:a5:2b:f0:0f:91:d6:ee:54:6e:28:30:
db:25:24:8d:d6:a6:49:83:8e:79:56:70:f1:96:59:
f6:d3:5e:f4:fa:16:57:16:08:1c:1d:cb:34:00:65:
60:6e:b1:82:25:3a:c3:4e:ef:8b:3a:88:d8:fb:e5:
5d:06:4e:9f:90:b3:3f:e8:cb:9c:c2:ea:ac:44:f7:
c4:f4:7e:22:9e:fc:be:c3:78:ef:3a:24:9d:85:8c:
8a:ee:02:94:56:70:ed:a6:91:11:e0:ca:48:6d:2c:
67:97:3e:00:de:bf:c2:0d:33:95:c8:a9:a5:7b:80:
8c:eb:2a:52:ca:48:f6:b7:3f:9b:11:0e:e3:8f:66:
6d:97:70:4d:b5:59:a4:89:4d:4e:31:e1:8c:18:b6:
f8:3c:bc:0f:ff:2f:41:e8:ac:6f:0f:b1:c8:ae:7c:
4d:aa:47:c3:93:55:76:ff:7e:e0:95:c8:b0:9b:8e:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:6C:75:75:EB:6C:1F:17:90:BE:86:1E:29:72:99:F1:DF:9B:FE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.0.0/18
Signature Algorithm: sha256WithRSAEncryption
de:80:d2:bd:11:fe:c1:5a:aa:b6:2e:5c:8f:e2:63:76:ae:e2:
56:1e:01:ff:8d:c9:2a:4b:7d:51:39:28:7e:98:19:4d:fe:7f:
70:cb:d6:b3:9a:67:b1:0b:75:30:08:82:30:f6:29:92:09:83:
60:14:25:24:90:73:47:05:30:fb:2c:8a:6c:aa:8d:7d:51:1a:
35:93:ff:a4:62:db:8e:1c:5e:f7:ba:96:e2:bf:66:c7:c8:ca:
6e:7b:f9:17:b7:6d:4e:43:5f:ad:87:1d:db:b5:9e:f9:40:ec:
54:96:a2:45:64:77:cd:81:1d:18:c6:bc:63:34:aa:b7:5c:c2:
21:78:20:4c:3a:03:7c:f8:cf:e9:ca:05:70:ba:4a:92:ef:a7:
51:08:6a:ed:b1:19:ac:26:ea:c6:26:2d:f5:d6:d2:e7:4c:ab:
96:fe:16:cd:82:19:ad:06:e2:a1:d4:5c:db:09:7c:c7:c0:8f:
fc:14:82:17:c9:14:55:07:a2:cb:dd:cd:8e:5d:c1:e5:7a:ee:
55:8f:6c:0c:40:0f:21:b2:7d:de:fa:96:fc:ed:1f:69:4e:64:
e3:57:37:6a:ad:bf:8a:35:a3:e1:ec:73:fa:57:48:ad:18:70:
6a:ea:f7:cc:65:93:63:e0:72:d1:f6:92:5e:8a:e3:a3:0a:9a:
29:c5:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:41 2025 by rpki-client