Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
File: vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa (raw, json)
Hash identifier: /kPCV4cM78hGVZiI+66wXBuUvG+b5em8OIFff2dq6rw=
Subject key identifier: BC:65:48:10:8F:E3:8A:D6:2A:DD:58:2A:F3:EC:35:C4:88:36:45:07
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
Signing time: Tue 30 Apr 2024 01:46:54 +0000
ROA not before: Tue 30 Apr 2024 01:46:54 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.108.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:46:54 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=BC6548108FE38AD62ADD582AF3EC35C488364507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:d1:0f:22:4e:a2:1a:4f:bc:de:ab:47:ba:
10:15:45:14:c6:04:4d:0a:43:08:2b:d2:5c:93:6d:
c2:f2:6a:6a:d5:10:a1:9e:bd:82:7c:84:a4:a2:fa:
f9:ec:c2:94:db:09:34:7d:cb:5e:14:fb:75:ce:e5:
76:78:6a:0e:aa:a0:94:6f:33:ce:a9:97:0f:2e:b2:
2b:cf:fe:a7:a7:c5:43:0f:03:00:38:a1:37:7b:dd:
04:6c:b5:95:f8:11:2a:45:32:77:a3:1b:f7:73:32:
83:2f:a1:0e:58:a1:6d:82:3e:3e:6c:50:9a:bd:9f:
6f:d9:6c:f3:d7:05:75:50:3a:0d:5f:53:ac:2c:af:
7c:68:15:42:4b:4d:03:bf:8d:3a:d4:18:26:37:f2:
05:c7:4e:95:dc:05:ab:1d:7b:70:20:e8:89:2c:ca:
14:75:7b:0b:66:16:30:60:78:aa:8c:d6:c6:23:29:
55:07:3c:6d:1d:11:9b:4c:74:69:ca:c1:2f:00:7f:
cf:a5:39:3e:e0:65:05:c3:5b:17:70:05:a3:94:06:
b5:10:0a:82:b7:41:70:80:ce:36:82:5f:03:f9:7a:
87:89:5e:eb:62:d3:1d:71:99:62:77:78:3f:97:ae:
fa:78:d4:c2:21:8b:f7:c4:3f:3d:1e:70:3e:ff:f2:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:48:10:8F:E3:8A:D6:2A:DD:58:2A:F3:EC:35:C4:88:36:45:07
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.240.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:2b:e2:c0:bf:16:ce:43:34:15:35:b9:dc:96:1c:51:55:41:
de:b9:f6:ae:f4:6b:36:d4:e1:dd:11:f4:6e:aa:59:f4:7e:57:
40:6c:4e:7e:b3:91:47:ed:f9:85:8f:d5:83:9c:43:7e:5d:8a:
79:39:f5:28:74:ba:ff:88:25:e7:6b:a6:08:29:36:0b:0a:82:
9d:b2:7b:89:b5:47:22:1f:dd:c9:0c:f6:be:ca:30:a0:86:f5:
aa:fa:4b:ea:6a:0c:ba:5c:74:16:b0:f5:72:f4:f6:ce:ea:28:
41:53:6a:19:36:ab:32:3c:74:66:49:a5:c3:9c:a5:96:1e:74:
7e:24:4b:fd:ed:22:7e:8c:93:4d:2b:7c:08:6d:7b:06:d0:10:
7e:e9:60:02:72:77:29:90:b4:cd:70:c1:b3:23:a8:25:ed:38:
20:45:39:8b:45:56:47:54:2a:15:82:55:47:1c:e3:49:1c:5b:
9e:05:f8:ac:8c:d0:57:99:4f:53:03:41:0b:c8:20:09:6a:9a:
05:4f:47:b3:5c:a0:f2:79:d7:e9:7a:fd:74:74:25:44:27:80:
6d:bc:dd:08:72:85:fa:56:02:63:79:fc:e4:f3:aa:35:33:53:
5e:c2:85:da:f2:d0:71:6f:7c:55:dd:74:6f:41:15:e7:b1:c5:
ea:27:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:47 2025 by rpki-client