Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
File: Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (raw, json)
Hash identifier: OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=
Subject key identifier: 12:68:FF:05:0F:B5:B6:DF:9B:51:86:8C:42:BC:BD:88:67:82:D1:D8
Certificate issuer: /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial: 03
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
Signing time: Mon 18 Nov 2024 06:22:58 +0000
ROA not before: Mon 18 Nov 2024 06:22:58 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 45681
IP address blocks: 160.191.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Validity
Not Before: Nov 18 06:22:58 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=1268FF050FB5B6DF9B51868C42BCBD886782D1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:a8:59:62:10:60:8e:b1:fe:77:25:1f:15:
d3:1c:b3:7a:60:81:10:e0:73:10:f5:37:d9:f3:0a:
7d:27:28:ba:88:e6:9f:bb:26:ac:ec:a4:0f:c9:04:
4e:b5:76:89:59:fb:a1:da:d1:65:e0:a7:bc:cb:16:
75:81:98:dd:e0:14:ce:4a:c3:ce:d7:a4:02:a6:92:
36:5e:b3:a7:c9:36:dc:f7:00:03:36:60:fc:ad:49:
05:45:7c:da:63:0d:eb:f8:80:bb:e1:f1:f6:b8:3f:
a1:fe:a5:ad:fa:23:9a:fe:62:d3:33:65:16:92:70:
51:b2:cf:c2:63:1b:13:81:49:ae:b7:25:ac:c8:59:
f6:0b:68:80:98:86:0b:85:11:4e:3e:63:65:ec:56:
21:6d:b1:c3:c5:d7:c7:c1:35:d2:7c:45:af:52:c9:
1a:1a:d6:99:be:5c:60:98:3f:fc:c8:53:94:09:bf:
48:4a:8b:43:89:b0:93:29:0f:b2:db:ef:8d:4d:19:
13:fc:0c:6d:ff:37:3a:20:f1:96:f5:1f:99:13:95:
ac:fb:fc:1c:74:51:cb:2b:ed:82:9f:74:a5:55:61:
76:8b:b0:91:ad:93:85:a5:04:c8:a0:47:07:1d:67:
e7:fa:c0:84:ec:1d:31:b8:b2:6c:c3:79:ae:8b:9d:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:FF:05:0F:B5:B6:DF:9B:51:86:8C:42:BC:BD:88:67:82:D1:D8
X509v3 Authority Key Identifier:
keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.142.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c3:97:af:1a:9e:e8:5d:b1:5b:c1:f8:c0:42:0b:4e:b4:77:
a3:fb:40:b7:30:61:9d:85:2f:a3:21:c8:bb:aa:e2:b3:f5:20:
20:de:a4:39:c7:81:12:2e:c5:37:2c:58:99:4b:3d:52:80:a8:
4d:3b:16:75:a3:02:ea:0b:c6:df:c4:d8:56:67:3e:7d:af:9c:
3a:7d:a4:f0:df:3b:13:31:04:6d:d8:bc:41:3e:fa:90:3a:1d:
6a:2f:f5:9b:a5:d4:ac:71:40:af:1c:a3:b6:40:7a:85:fc:b4:
ad:b6:e7:57:53:27:49:4a:a0:18:0f:f5:e5:1f:33:22:3a:84:
86:4f:08:2c:8b:e8:45:7c:9b:8d:9d:a9:29:b2:15:7f:1a:00:
dc:69:f8:88:03:12:62:e1:6f:c6:33:46:b2:94:a3:81:97:1f:
4f:7f:a1:3a:0b:f6:18:6d:fe:5d:14:5b:5f:c1:b6:66:25:c8:
05:bf:ec:ab:a7:d1:79:f5:6f:f4:e4:88:bd:7a:6e:b9:97:65:
70:89:b5:fa:0b:e1:9b:02:8b:71:5f:3e:f4:4d:50:a9:94:f7:
fd:0e:80:df:60:c3:fe:99:71:c7:26:23:5b:7c:20:03:f5:21:
c6:27:34:2a:2d:83:23:eb:69:99:9e:df:3e:67:50:3f:7a:32:
dc:e8:a2:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:27:14 2025 by rpki-client