Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/ObiT5nOnwqmCL0rs6q3PHXPBQws.roa
File: ObiT5nOnwqmCL0rs6q3PHXPBQws.roa (raw, json)
Hash identifier: B5kJkPVH5bCqE5c7olvesiPAaKKY9DU3QIeBMMGMUjI=
Subject key identifier: 39:B8:93:E6:73:A7:C2:A9:82:2F:4A:EC:EA:AD:CF:1D:73:C1:43:0B
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: 58
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ObiT5nOnwqmCL0rs6q3PHXPBQws.roa
Signing time: Tue 31 Dec 2024 01:31:47 +0000
ROA not before: Tue 31 Dec 2024 01:31:47 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 37904
IP address blocks: 218.231.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Dec 31 01:31:47 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=39B893E673A7C2A9822F4AECEAADCF1D73C1430B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:73:5f:8d:8a:8c:82:a2:dc:50:ec:b8:bb:
12:45:69:9d:3a:11:a4:5c:3f:07:de:c4:f8:3d:44:
d5:9e:a7:dd:a3:e2:f5:48:a6:67:53:2d:4c:bb:11:
9b:7d:61:5e:5b:ac:16:f8:3d:58:ed:86:f8:c8:20:
54:60:a1:77:a5:68:41:ed:0f:34:74:72:1c:10:fe:
3e:a4:a2:b0:8b:61:80:e7:a4:fd:b6:e3:21:2d:56:
e9:7d:37:5f:c7:f6:38:0e:4f:7c:09:e6:fa:1c:e3:
27:cb:90:49:6f:06:78:e5:ed:75:5d:2a:ec:8a:31:
c1:ac:3b:dd:3d:37:81:15:81:9f:a4:e1:7c:54:7d:
27:3f:b5:fa:ed:bf:c9:6f:22:1a:9e:ae:0a:b3:5d:
d8:40:15:ce:49:12:88:6e:c9:f1:13:42:74:f7:39:
3d:6a:2d:89:53:da:77:d3:0d:0e:05:a4:14:69:34:
fc:83:4d:52:60:1a:db:d7:7d:2e:8b:17:72:17:7a:
af:6d:a7:6f:05:72:13:88:02:28:3c:b2:ba:e0:09:
79:3f:29:aa:1a:fa:9c:df:64:97:35:24:71:c3:bf:
58:22:8b:a8:d4:6f:07:4a:89:87:65:5d:da:04:4e:
67:c5:32:17:f9:42:dc:47:58:17:4a:9a:ea:c5:8d:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:93:E6:73:A7:C2:A9:82:2F:4A:EC:EA:AD:CF:1D:73:C1:43:0B
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ObiT5nOnwqmCL0rs6q3PHXPBQws.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.231.248.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0c:3a:fe:63:6c:27:83:7a:e6:0d:bd:7d:2e:7e:7e:ec:f2:
b8:25:9c:ab:69:6f:b3:26:90:a5:4f:dc:e8:fd:1d:32:da:74:
35:5f:d7:47:ea:b8:78:f8:9b:62:4e:4d:02:ec:61:d0:56:30:
0a:fc:f7:02:34:a3:5a:55:af:6f:fc:9e:27:db:15:07:c1:65:
96:c4:3a:ab:23:77:70:b7:67:ab:9d:0e:05:3f:08:8c:6f:cc:
0e:9a:61:4c:29:1a:b2:cd:61:9d:ff:65:85:5e:5d:9d:75:88:
e4:e6:28:78:be:8b:ca:9e:72:23:e3:b5:66:eb:e9:a7:33:43:
bf:9c:98:20:20:c3:21:01:22:68:c1:7b:7a:87:73:7a:62:98:
d5:0a:b8:4f:e1:20:7a:e8:a1:56:52:38:96:69:c8:4c:1c:29:
4c:e4:7f:6a:c6:e8:5f:f8:66:8c:15:fc:79:79:b1:55:75:12:
ce:69:21:1a:63:58:87:2c:0d:53:d9:be:18:00:c5:62:24:9e:
af:9e:9f:93:99:06:70:8b:21:b9:12:98:a9:ab:98:a2:32:b7:
c3:e3:73:fb:92:c8:67:69:0b:90:c9:e5:b9:3c:13:3a:89:c5:
c8:0f:ba:b1:e2:46:38:a8:63:bf:5c:a2:6f:3f:fc:6a:0a:3f:
e4:d3:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:57 2025 by rpki-client