Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa
File: Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa (raw, json)
Hash identifier: JJE2N6Ng9ZfpFTTH/x9Nf+cMSBIMerjWNW+KL4D2wMI=
Subject key identifier: 07:1F:6C:73:EA:87:52:84:A4:F8:C3:8F:E0:19:F7:48:70:A4:5D:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A02
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa
Signing time: Sun 30 Jun 2024 01:42:32 +0000
ROA not before: Sun 30 Jun 2024 01:42:32 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.106.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562 (0xa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:32 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=071F6C73EA875284A4F8C38FE019F74870A45D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:a7:54:cc:86:e3:d3:d7:30:14:d9:67:3f:
a4:4d:36:24:09:49:71:06:47:c3:cc:8f:20:b6:ed:
4d:30:fe:6d:96:6a:d4:e9:2a:5e:71:85:7e:e8:90:
dc:45:c4:c1:b3:24:19:bd:d0:a7:2d:81:47:88:92:
1e:26:1d:3a:60:92:4a:2e:83:d2:20:a0:88:f6:78:
40:4b:57:88:c7:10:33:d7:4a:11:88:e0:8b:55:59:
9e:48:96:bb:fe:28:ec:cb:6a:4f:5d:ee:7b:88:f9:
05:44:66:9f:bf:52:3c:04:fb:7b:ab:ec:e9:ec:8e:
40:df:c0:72:09:35:01:f6:09:57:5c:fc:53:6e:9f:
ee:3f:ff:07:89:91:0e:cb:c7:d0:18:b2:e7:74:b3:
62:12:06:f8:c4:39:9a:b7:ae:ad:4c:ed:70:be:46:
05:0a:34:21:7d:9f:3d:cd:dc:93:dc:28:fa:eb:86:
fd:b6:5b:e1:3a:73:db:b4:3e:8f:a9:d8:f1:26:d3:
4a:61:19:93:f3:9b:20:84:5d:9d:80:08:45:74:2d:
d8:5c:7d:a9:7f:23:82:e8:83:2b:af:4d:bd:58:eb:
c9:ef:6f:cc:e1:82:61:87:c0:e4:0d:0e:44:45:54:
f2:ce:90:f8:b1:31:80:e8:a7:28:93:86:26:e1:ad:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:6C:73:EA:87:52:84:A4:F8:C3:8F:E0:19:F7:48:70:A4:5D:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bx9sc-qHUoSk-MOP4Bn3SHCkXUc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.92.0/23
Signature Algorithm: sha256WithRSAEncryption
13:a8:bc:59:95:e2:e2:64:2f:ff:74:82:bb:5e:8b:46:7d:1c:
9e:c1:f8:a4:b6:a5:29:a0:69:b0:b7:bc:19:49:3e:ca:ac:f0:
7f:d2:1d:86:59:be:5b:e6:a0:49:3a:03:4e:9b:b9:1f:39:6c:
2c:1d:ba:f8:15:99:fb:3e:d2:53:f9:b2:97:56:88:03:7d:88:
5b:21:50:a7:37:79:6e:9a:5a:fd:47:b4:bb:aa:3d:d2:c1:75:
d0:00:fd:f7:ce:77:73:ed:94:25:44:ce:b1:81:50:d2:a6:e7:
f5:97:4f:c2:64:29:1b:6a:6d:37:52:4b:3c:2c:a5:82:3d:69:
1b:02:7e:79:04:84:f5:2f:b6:9a:b2:29:d6:65:a8:98:6b:45:
0b:64:ff:c3:9b:89:af:d7:03:26:8b:e3:fa:5c:6d:67:af:a1:
e3:6c:42:60:01:83:02:ca:a6:40:b6:c8:be:3b:b0:4a:cf:d8:
65:30:80:92:f6:77:6c:79:f1:b9:85:5f:c1:03:1e:0b:54:a7:
14:83:a5:6f:e2:ca:85:09:eb:2e:29:78:d5:96:e4:7c:fb:f2:
44:e1:84:c0:bd:cd:34:da:a8:c8:ff:a3:f3:a6:8d:6a:bf:ac:
9a:a3:2e:f9:b7:db:80:8b:8e:a6:93:38:d1:ce:2f:1e:d6:ef:
5b:01:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:25:12 2025 by rpki-client