Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa
File: mNgtEQNTfHEJkPAavkuI7W1NgG0.roa (raw, json)
Hash identifier: B5vm3WbBGLMbgPac0Kh5jwYGahB1nV48nGqj//UX2s4=
Subject key identifier: 98:D8:2D:11:03:53:7C:71:09:90:F0:1A:BE:4B:88:ED:6D:4D:80:6D
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 6C
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa
Signing time: Sun 31 Mar 2024 01:28:43 +0000
ROA not before: Sun 31 Mar 2024 01:28:43 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 01:28:43 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=98D82D1103537C710990F01ABE4B88ED6D4D806D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:a4:13:34:b7:0e:c5:67:f5:b0:91:0b:d2:
0f:b7:9e:17:fb:ad:a7:c6:f5:c6:d9:5f:a5:29:0e:
92:1a:7f:f5:c9:77:dc:14:81:2b:18:10:f9:50:b0:
91:e0:73:19:39:6a:99:3a:f7:ab:30:0a:55:38:47:
1d:28:f9:7f:5b:76:09:33:2b:0e:13:20:2e:88:77:
19:17:d0:c9:52:7f:e6:e4:dd:bb:d6:4b:bd:8e:65:
0d:03:cb:f9:bc:70:b8:c2:fb:6e:be:4c:a5:3e:cc:
13:66:ba:28:59:e4:bf:56:6f:3e:46:0c:af:dd:7b:
c1:da:6f:90:92:f4:a5:47:dd:01:8f:58:1e:29:8b:
8b:ea:4d:86:fa:c4:ea:ec:b1:e1:88:b7:f7:17:98:
3e:be:f4:d8:0f:5f:fa:3b:89:a4:b7:5f:be:c6:eb:
3b:21:93:a3:89:8c:bb:76:5d:12:d7:8f:51:c2:d0:
0d:38:01:e2:21:52:f5:db:30:85:17:e9:ad:51:1a:
96:c7:c6:0e:da:f1:96:9b:3f:dc:ff:63:43:20:8a:
3e:74:ef:7d:ce:9f:f8:5b:04:0b:7e:88:db:03:fc:
39:dc:f0:3f:cb:34:ac:1a:bc:7c:20:44:09:57:2e:
14:af:64:0b:45:f2:d0:ad:0d:fd:d4:dd:b7:4e:22:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D8:2D:11:03:53:7C:71:09:90:F0:1A:BE:4B:88:ED:6D:4D:80:6D
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
86:7b:d8:d1:af:66:5a:22:51:d6:6f:a2:8f:cb:b4:14:6b:81:
e3:1f:fd:97:a7:8e:7b:b9:b1:06:8f:66:dd:29:d8:d5:a1:92:
da:e0:63:77:08:10:fb:50:f5:08:58:bb:83:e2:38:0a:9e:04:
83:25:78:2a:89:a0:40:12:c0:fb:49:a4:ba:92:f4:97:47:59:
c3:e9:9e:a8:f0:a9:8c:3e:8c:3a:bb:11:cb:a0:01:84:8b:10:
1d:96:9c:d2:ed:12:c6:bc:66:f0:e8:df:f8:5e:82:9c:d4:25:
b8:97:54:cc:01:68:3e:2a:2e:bc:43:21:c1:76:49:f8:76:21:
66:22:78:59:61:a8:c6:8c:a5:2e:23:9d:79:80:43:04:f1:77:
75:cf:11:85:b8:9c:3e:5e:aa:44:95:22:79:8d:34:f8:2d:55:
1e:92:fa:f8:78:d2:62:ff:59:58:28:c3:c9:3d:a2:e4:74:51:
54:dc:1f:8f:4c:02:a3:ad:1f:1c:72:e6:e2:f8:7b:87:a4:d8:
33:25:47:fc:b4:9d:f1:aa:9a:74:c6:ca:f3:1b:28:88:54:59:
f8:6d:32:11:74:74:d1:03:3d:e7:d2:b3:50:df:31:10:c7:1f:
61:4f:ac:dc:f9:d2:80:1e:70:ca:83:5a:73:71:a1:0a:fc:11:
ce:65:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:35:23 2025 by rpki-client