Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/c_sVPCtn6XQu9RCqU0kSxBCK_EE.roa
File: c_sVPCtn6XQu9RCqU0kSxBCK_EE.roa (raw, json)
Hash identifier: r2a8JWhJ5F4eIo9ZdQN44OCrxfvJHpg1y4o2WCHaHdg=
Subject key identifier: 73:FB:15:3C:2B:67:E9:74:2E:F5:10:AA:53:49:12:C4:10:8A:FC:41
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: 04
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/c_sVPCtn6XQu9RCqU0kSxBCK_EE.roa
Signing time: Fri 20 Jan 2023 03:09:30 +0000
ROA not before: Fri 20 Jan 2023 03:09:30 +0000
ROA not after: Wed 17 Jan 2024 04:46:27 +0000
asID: 2915
IP address blocks: 61.195.40.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Jan 20 03:09:30 2023 GMT
Not After : Jan 17 04:46:27 2024 GMT
Subject: CN=73FB153C2B67E9742EF510AA534912C4108AFC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:e6:92:bc:98:02:17:cc:48:03:65:2c:6d:
75:76:a0:68:18:0a:1d:11:f1:38:a8:07:2a:79:ef:
60:be:9b:c8:77:bf:c3:86:fd:b9:81:82:58:2d:e5:
cc:b7:f6:51:0c:e9:be:7f:cb:32:5f:50:22:80:20:
ec:dc:7f:ca:7a:87:64:4c:67:aa:a5:60:db:3f:47:
41:29:9a:92:87:e5:82:83:80:cd:28:12:c8:2a:80:
1c:37:8b:1a:99:fd:b2:2f:f4:ec:36:64:4c:2c:7d:
a4:e1:c3:36:6c:ae:47:aa:f3:b9:f2:9c:90:c9:13:
b4:1b:7d:17:01:56:f4:ed:9e:24:3f:66:72:25:c1:
38:5b:33:1f:38:e6:d0:87:b8:11:26:fb:22:10:30:
49:cb:ed:36:e7:72:0c:73:07:dc:63:a2:0d:82:92:
21:44:fd:dd:c5:c8:7f:fe:b8:3f:dc:c3:79:65:12:
a0:dd:35:c9:5a:18:a4:43:a4:22:d1:1a:c6:ca:6d:
74:3e:7f:25:eb:74:fb:85:f5:03:fd:fe:1f:51:2f:
c9:6b:1a:c1:bd:04:4e:0c:c7:b8:17:e2:a7:c8:a3:
60:3c:ab:81:28:da:60:28:0d:4b:e4:c5:84:df:13:
13:88:6b:5b:b2:a5:aa:02:f8:07:57:16:d3:ef:ba:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:15:3C:2B:67:E9:74:2E:F5:10:AA:53:49:12:C4:10:8A:FC:41
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/c_sVPCtn6XQu9RCqU0kSxBCK_EE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.40.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d3:9d:6b:20:af:22:60:70:f9:b6:e3:f6:e8:40:6c:fd:5f:
2b:e1:9e:9b:08:37:62:6d:1a:76:aa:59:e9:0d:84:67:3e:c5:
d0:d3:a7:bf:1a:5b:76:c6:95:74:1f:61:4e:ed:56:2c:1c:15:
97:83:43:2e:f2:2a:f8:2b:87:fe:84:dc:9e:d8:44:32:77:c7:
80:98:12:b1:e6:43:37:2d:5f:df:74:3a:81:be:47:6c:bf:11:
38:19:82:78:a0:d1:0e:1d:c7:db:52:1f:bd:b8:a0:90:5e:ca:
8b:e6:1f:a1:80:8d:35:44:80:70:d7:6d:9a:48:37:55:92:c3:
ab:f2:49:13:07:00:07:0b:95:bf:64:6e:4c:11:57:6d:ee:68:
f2:7f:25:f7:ad:04:eb:43:f1:b0:8d:f5:2f:44:53:e5:22:f8:
d3:cc:d6:c3:76:d9:7a:32:e6:83:95:d7:42:07:4c:32:94:2b:
4c:0c:dd:fb:91:7a:44:ef:1c:6f:a1:5b:81:0e:8c:03:aa:79:
51:84:52:ac:00:d5:29:70:99:ed:4d:62:e6:87:f3:02:03:ff:
0b:81:50:48:5e:e2:b3:6e:34:a3:3f:45:08:eb:87:c3:d1:3a:
a2:07:7f:6f:a0:fb:24:95:7b:56:57:68:c0:c2:ac:e8:de:f3:
0b:02:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:49 2025 by rpki-client