Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Mmx8w4uIuK8tfXDq6l-CNpJKyXw.roa
File: Mmx8w4uIuK8tfXDq6l-CNpJKyXw.roa (raw, json)
Hash identifier: rSKKx58+JQPDpxLCT+HmnnxdveH1Gqk0Aot3NZ3czqg=
Subject key identifier: 32:6C:7C:C3:8B:88:B8:AF:2D:7D:70:EA:EA:5F:82:36:92:4A:C9:7C
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 25
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Mmx8w4uIuK8tfXDq6l-CNpJKyXw.roa
Signing time: Fri 29 Sep 2023 06:36:53 +0000
ROA not before: Fri 29 Sep 2023 06:36:53 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 111.91.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:53 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=326C7CC38B88B8AF2D7D70EAEA5F8236924AC97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:ae:61:08:64:c4:2a:50:5a:84:11:0b:ad:
cc:e5:3d:a7:a1:31:54:97:64:88:06:a8:2c:bc:40:
b3:73:6e:01:b9:10:eb:9e:c6:2e:23:e9:5f:8d:93:
db:ba:64:84:0b:12:f6:65:3b:8b:2a:58:0f:d3:f1:
7f:f8:55:a1:62:6f:61:52:b0:ae:dc:88:86:81:ff:
a4:b1:eb:de:d5:df:88:28:f0:f6:dc:32:dd:44:3f:
c7:d9:bd:6e:18:da:98:e3:37:4d:23:ef:7e:d8:db:
14:84:52:1d:2f:60:57:85:6a:8c:0f:92:c5:4b:27:
47:43:20:61:cb:e1:1d:51:a9:fb:00:54:40:d6:d6:
b4:d9:3b:06:68:57:9b:4b:4b:b3:0a:2f:74:a8:c8:
f4:af:16:35:f4:f4:9a:dd:c7:d1:70:a5:36:80:3f:
36:4f:b9:9f:bf:97:24:41:04:c4:bd:07:88:d2:84:
a4:f1:5d:81:e9:72:87:ec:39:21:98:f8:8c:03:13:
a0:4e:5c:a1:3c:c4:3c:f2:65:2a:c0:99:20:af:bc:
37:93:41:39:1e:99:ea:4f:c4:62:a3:0f:c5:38:31:
a3:ad:ec:6a:b7:6d:5a:a6:23:c1:9b:f8:36:70:33:
6a:1f:82:e5:c4:aa:1c:43:8c:74:d8:69:20:4d:ba:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:7C:C3:8B:88:B8:AF:2D:7D:70:EA:EA:5F:82:36:92:4A:C9:7C
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Mmx8w4uIuK8tfXDq6l-CNpJKyXw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.91.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:a1:74:e2:f8:d9:cd:8a:c0:34:f3:be:5f:23:1d:84:35:28:
4f:68:d7:75:dd:7c:6d:c6:d4:48:f6:80:ac:3b:c8:70:d9:43:
1e:f5:52:88:b0:cb:04:94:c2:8c:51:5e:e1:35:2e:5d:6c:66:
64:8a:32:b8:58:3e:35:40:37:fa:fc:4c:8e:62:6d:18:7d:3d:
ca:cb:c1:ed:18:79:2d:3c:98:77:c0:91:d8:b8:2b:ff:a4:14:
48:be:4e:89:ea:05:a0:b0:4b:54:80:4a:ac:40:aa:15:e1:af:
52:cf:7f:32:75:13:9d:a0:cb:f6:d3:a6:85:21:70:19:b0:f8:
ae:d8:9a:8d:6f:95:98:ca:2b:7e:7b:d9:c6:1b:25:4c:c6:c6:
1a:3c:6d:b4:30:a8:bb:9d:c5:fe:c4:6c:95:92:80:4e:2f:57:
f3:dd:d3:01:49:67:9b:a8:9f:29:20:49:49:44:db:d9:1e:9e:
59:0c:05:da:4b:fb:b7:e3:ac:c1:70:5f:99:53:7c:f1:4b:f2:
75:ca:95:4c:be:25:f8:6b:1e:e8:14:b0:53:e2:f1:d9:93:3d:
23:17:49:f5:04:1f:7f:22:5d:97:ca:96:8b:02:75:10:3f:dc:
95:65:60:ed:9e:88:79:36:fc:e1:73:a8:57:3e:f4:73:79:e7:
07:1f:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:13 2025 by rpki-client