Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa
File: sazYUWSDQi5PTh3fSYklN9cGBo0.roa (raw, json)
Hash identifier: iqDj1gfbpjAlKa7mR1mF/K/sKt9gXH1/35G3+Ari9BU=
Subject key identifier: B1:AC:D8:51:64:83:42:2E:4F:4E:1D:DF:49:89:25:37:D7:06:06:8D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A7B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa
Signing time: Sun 30 Jun 2024 01:52:31 +0000
ROA not before: Sun 30 Jun 2024 01:52:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2683 (0xa7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:52:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=B1ACD8516483422E4F4E1DDF49892537D706068D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:ce:7e:cb:3b:26:e5:34:4d:8d:64:6c:24:
29:a8:6c:00:69:f3:02:35:c0:55:2a:f6:3e:2e:1d:
0a:6a:12:e6:1d:b6:75:0f:1b:1e:06:e1:8f:b8:a2:
b9:85:ae:02:ee:18:19:37:85:0a:0f:a4:6f:4d:4b:
20:63:cd:1f:dd:34:86:25:a9:95:22:a4:82:17:e4:
72:79:99:fc:6e:92:cf:d9:1f:f8:a5:8a:5a:0f:0f:
7d:b8:a2:fc:ce:42:71:db:86:42:db:d8:44:7f:5d:
a7:13:03:99:86:c9:bc:ce:e6:ea:bc:80:92:e2:4d:
ea:d3:e6:24:28:bb:f9:f3:72:d7:60:d9:c1:9e:5b:
3c:c1:e5:7a:22:35:39:ad:cd:84:00:fd:ff:de:5e:
5b:0c:2f:21:57:ae:d4:c9:00:33:8c:88:6a:6b:78:
66:1c:13:af:7d:34:9c:11:99:1a:29:9c:e5:23:53:
82:23:3c:82:50:9f:20:69:95:61:ad:4e:67:1f:fd:
53:55:ca:99:8e:7f:4e:f0:f2:06:e0:25:59:f4:65:
94:f9:7c:58:f6:8f:2c:f2:27:38:49:ab:a1:6a:22:
ed:cc:3a:3d:6f:7e:34:1e:c0:04:95:d9:d8:83:c3:
75:38:e1:53:b5:2e:fc:bd:92:04:31:53:16:f6:be:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:D8:51:64:83:42:2E:4F:4E:1D:DF:49:89:25:37:D7:06:06:8D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sazYUWSDQi5PTh3fSYklN9cGBo0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:3e:8b:33:66:40:93:22:e9:fd:8d:ce:36:a7:21:ca:b2:79:
5b:86:56:1e:67:f9:d0:fc:6c:64:f1:63:a9:7e:a8:11:16:a5:
a6:62:4f:a4:a2:c2:01:0b:5d:95:89:65:1d:6a:f8:37:cd:ea:
0d:55:a3:2f:72:3c:a9:5b:c7:64:b9:6a:fd:94:2f:e9:c1:a3:
4c:37:86:41:71:5b:86:cd:24:92:79:df:9f:a8:17:0a:06:58:
92:2f:f8:a5:8c:27:6c:b3:b0:2c:3f:44:dc:d3:2c:69:37:93:
f3:6e:4e:db:7b:0c:65:5d:0a:81:25:47:d6:e6:a5:5e:40:97:
c6:45:fc:d9:9f:67:ff:33:97:5d:0c:d3:b7:b2:25:06:4d:61:
77:79:f7:b0:23:ef:3a:48:8a:e5:fe:fb:c6:ca:6d:3c:c8:7e:
35:d3:0f:5e:1f:46:58:9b:0a:f2:37:5a:8b:39:a3:df:0d:f1:
85:29:56:a0:e0:ff:db:66:0d:a0:73:9b:e0:e7:83:d4:3f:29:
37:2c:f9:27:2c:d4:2c:99:04:8f:fd:ae:4e:b9:75:63:87:c5:
38:f4:06:dc:5c:39:b1:fe:dd:45:f4:aa:52:3f:fd:cc:e6:bf:
3e:f9:a9:2c:44:a7:2b:7f:49:7a:5e:f6:0e:bf:ca:9b:9b:67:
14:b9:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:17 2025 by rpki-client