Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa
File: 9IPLIXCzdIq3guRJFkSyjLHkXD4.roa (raw, json)
Hash identifier: 7bQbGhkS4JCInb8PY2J9NOizF1lvxfit6CqmPcMpD0U=
Subject key identifier: F4:83:CB:21:70:B3:74:8A:B7:82:E4:49:16:44:B2:8C:B1:E4:5C:3E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0ADB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa
Signing time: Fri 31 Jan 2025 01:28:24 +0000
ROA not before: Fri 31 Jan 2025 01:28:24 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.72.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2779 (0xadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:28:24 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=F483CB2170B3748AB782E4491644B28CB1E45C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:55:17:d6:1a:5d:53:3c:08:ed:07:61:0a:
ba:99:a3:b2:ae:21:92:6c:be:f4:e9:24:37:af:cf:
ed:51:f0:67:4c:5d:4c:12:a1:58:cc:e5:7f:41:61:
fd:e3:36:70:64:91:cd:a9:30:cd:5c:86:85:d5:0d:
b7:b8:1e:43:04:f1:c8:45:f2:bc:8b:41:47:e5:71:
ee:e8:17:11:46:5c:71:f0:2c:0e:29:73:d4:73:19:
88:e2:0d:c4:ea:10:44:ca:3d:f8:f0:48:67:e8:c6:
a3:44:fb:01:de:c4:16:53:4d:04:48:00:e1:d3:0e:
d7:90:a5:28:7b:b4:db:10:6f:3b:2a:b9:a7:19:a3:
32:b4:ae:73:1e:36:1e:e9:cb:46:e9:d9:78:d1:05:
b3:1e:1a:09:7c:58:d3:91:ff:64:3a:18:e4:3e:c1:
b0:94:c4:cb:9f:8f:83:b9:4e:4c:1c:d7:c8:8f:44:
4b:23:b1:56:66:9a:72:89:27:2e:cf:ae:c5:74:b5:
b6:9b:ef:7a:00:77:a4:f6:04:33:d3:0f:b0:9e:37:
19:93:38:86:de:a1:6d:42:fe:26:89:03:c5:ea:f5:
64:5a:4b:c4:46:07:e1:f4:39:4b:14:83:60:c0:de:
bf:bb:b3:6c:a5:39:20:f4:40:45:91:f9:2f:bc:02:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:CB:21:70:B3:74:8A:B7:82:E4:49:16:44:B2:8C:B1:E4:5C:3E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.9.0/24
Signature Algorithm: sha256WithRSAEncryption
63:93:5d:61:54:8c:20:78:cb:01:da:e7:88:5b:12:75:eb:c3:
cc:9f:c5:39:17:96:cb:73:2c:c6:e9:40:9b:26:46:f3:fc:f1:
22:84:e0:3f:1e:a9:fe:91:37:94:85:d3:f5:a8:ab:72:fa:83:
3b:45:fb:33:f0:aa:ef:ee:8e:1b:12:77:7b:b9:3b:4b:b1:18:
84:4e:9c:b1:36:df:9f:c7:90:ca:d8:da:63:81:42:12:2f:06:
63:72:42:20:14:29:a0:99:d9:1d:1b:4b:e3:47:90:8b:8b:82:
a8:ae:bf:45:96:24:f3:dd:b1:11:83:7e:b5:f2:2b:99:da:f7:
73:5e:04:c5:ab:f7:3f:79:8c:1c:0b:f5:e1:1b:95:96:84:69:
ff:fe:79:aa:f5:76:74:c7:65:13:54:d1:be:4e:b8:17:38:58:
d9:2f:b1:35:c3:85:95:54:15:a1:f5:c2:af:4f:87:b3:6c:05:
5a:10:29:f1:15:b3:80:ca:94:a7:b9:a6:e8:0b:56:79:db:ad:
cb:81:57:52:ef:9d:68:d1:65:8b:2b:03:8a:35:39:97:33:d1:
60:af:66:aa:ef:02:bf:28:5c:65:50:15:01:a9:b7:31:36:f6:
b9:ea:32:60:dd:68:ae:9b:fd:5e:b6:06:60:af:df:93:c8:df:
fe:ae:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:30:37 2025 by rpki-client